Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: yUZegh70a10EqWKTH6pbpKUkWWSyxQBWSSx5koZWxxc=
Subject key identifier: C7:27:EB:3E:3B:69:22:01:1D:2E:7E:75:06:8C:26:2F:4A:87:8D:58
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01967DFC97673F73DCAADE4CDCA55331A01B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1516
Signing time: Mon 28 Apr 2025 20:00:27 +0000
Manifest this update: Mon 28 Apr 2025 20:00:27 +0000
Manifest next update: Tue 29 Apr 2025 20:00:27 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: ZBGGQu7PR55pcTf2j+zhfQ82coSgWMrtLBZhBwpsYWE=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 15:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:fc:97:67:3f:73:dc:aa:de:4c:dc:a5:53:31:a0:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Apr 28 20:00:27 2025 GMT
Not After : Apr 29 20:00:27 2025 GMT
Subject: CN=c727eb3e3b6922011d2e7e75068c262f4a878d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f3:b6:d9:c5:78:f4:c4:9c:09:a8:7e:9e:eb:
2b:e4:95:28:25:f1:4a:a8:28:19:2f:db:b4:78:66:
eb:4e:21:af:ec:5a:b6:89:f6:d2:a0:a2:3d:2f:3d:
f5:2b:3e:82:c1:ad:66:08:1d:84:80:95:53:82:27:
c4:17:df:03:2d:71:ab:1d:54:ff:d0:2b:aa:ef:94:
7f:13:83:4f:8f:07:81:78:fb:f1:77:10:53:ba:1c:
9b:2b:01:cf:76:d4:a2:c7:0e:89:4d:1b:18:5c:d2:
5f:b2:e9:eb:5b:b5:05:54:fb:35:2e:c2:8d:0a:1d:
e6:5b:4a:8e:71:a7:42:fd:6a:61:2f:de:3c:fc:f7:
20:80:a2:91:f9:fb:69:e0:85:f5:9e:c5:05:d5:88:
11:3e:5c:91:6a:f2:22:09:5d:20:8f:46:63:4f:b2:
95:c6:0e:c7:f7:eb:b7:60:fd:e9:ea:6d:56:fa:1a:
22:9b:ba:46:b1:21:dc:dd:13:2f:9d:15:ed:ac:e8:
0f:15:d2:45:c1:0a:1e:77:7d:57:21:85:88:ee:7b:
ac:18:d7:b0:aa:e2:26:ae:22:5a:4f:b1:a0:36:c9:
8a:f0:9f:28:33:da:10:82:ea:f3:3c:fa:b1:59:6e:
60:ed:38:c8:60:ef:b9:e8:1e:0c:39:28:a0:0c:28:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:27:EB:3E:3B:69:22:01:1D:2E:7E:75:06:8C:26:2F:4A:87:8D:58
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ad:00:63:bb:bb:ac:07:09:53:eb:aa:fe:da:43:cf:64:f1:
f8:d0:15:a3:9d:4a:1a:38:c2:47:e4:af:b1:d4:f0:28:da:37:
43:72:7a:81:a4:59:76:a1:95:79:d6:e3:97:10:2c:1c:a5:9c:
73:6a:28:f7:74:5e:e9:6a:d0:34:aa:7d:08:38:5b:61:44:49:
73:9a:d2:10:d2:b6:c9:22:3a:72:d0:56:40:91:aa:fe:46:42:
94:16:f0:74:17:72:92:88:3a:fc:49:75:25:3a:d5:ac:3c:68:
6b:bd:d3:7a:f4:60:44:1d:39:14:e1:ac:74:77:ff:ec:88:df:
65:08:ed:32:f3:f8:47:ff:8e:dc:5f:b1:26:7c:de:37:f6:7e:
83:81:a7:2e:a1:8e:3a:6f:a7:53:24:bf:7d:83:a8:9c:33:f5:
11:81:57:01:3b:c9:18:53:6e:7e:f6:57:30:b3:08:43:ee:e0:
ed:ee:2f:81:17:56:3b:24:65:29:99:68:13:75:a1:47:ed:dd:
be:a3:b3:26:56:a5:14:83:a2:3d:61:66:af:db:f8:31:de:db:
59:91:36:cc:f9:8c:70:87:6d:70:25:16:bf:59:41:0a:a8:ba:
f0:0d:5b:9d:61:ff:a1:20:3c:c0:3d:c5:46:23:6c:40:41:83:
79:33:1f:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ9/JdnP3Pcqt5M3KVTMaAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw
ODRmZGYwHhcNMjUwNDI4MjAwMDI3WhcNMjUwNDI5MjAwMDI3WjAzMTEwLwYDVQQD
EyhjNzI3ZWIzZTNiNjkyMjAxMWQyZTdlNzUwNjhjMjYyZjRhODc4ZDU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvO22cV49MScCah+nusr5JUoJfFK
qCgZL9u0eGbrTiGv7Fq2ifbSoKI9Lz31Kz6Cwa1mCB2EgJVTgifEF98DLXGrHVT/
0Cuq75R/E4NPjweBePvxdxBTuhybKwHPdtSixw6JTRsYXNJfsunrW7UFVPs1LsKN
Ch3mW0qOcadC/WphL948/PcggKKR+ftp4IX1nsUF1YgRPlyRavIiCV0gj0ZjT7KV
xg7H9+u3YP3p6m1W+hoim7pGsSHc3RMvnRXtrOgPFdJFwQoed31XIYWI7nusGNew
quImriJaT7GgNsmK8J8oM9oQgurzPPqxWW5g7TjIYO+56B4MOSigDCjaRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcn6z47aSIBHS5+dQaMJi9Kh41YMB8GA1UdIwQY
MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt
Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl
LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj60AY7u7
rAcJU+uq/tpDz2Tx+NAVo51KGjjCR+SvsdTwKNo3Q3J6gaRZdqGVedbjlxAsHKWc
c2oo93Re6WrQNKp9CDhbYURJc5rSENK2ySI6ctBWQJGq/kZClBbwdBdykog6/El1
JTrVrDxoa73TevRgRB05FOGsdHf/7IjfZQjtMvP4R/+O3F+xJnzeN/Z+g4GnLqGO
Om+nUyS/fYOonDP1EYFXATvJGFNufvZXMLMIQ+7g7e4vgRdWOyRlKZloE3WhR+3d
vqOzJlalFIOiPWFmr9v4Md7bWZE2zPmMcIdtcCUWv1lBCqi68A1bnWH/oSA8wD3F
RiNsQEGDeTMfbQ==
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:50:19 2025 by rpki-client