Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
File: _XTetBhEJvpiIlthIMNnBvc3uOI.mft (raw, json)
Hash identifier: qS6HWLfwX3Rb0kw61jr6b3oRpiAUrtgJfY2y1yrH39I=
Subject key identifier: AB:11:83:1D:4C:CE:EF:77:E3:2D:41:FD:AA:C8:D5:19:A2:B4:92:27
Authority key identifier: FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
Certificate issuer: /CN=fd74deb4184426fa62225b6120c36706f737b8e2
Certificate serial: 01969E2CA21325E778F1C3B45B4A10E2FACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 02:00:47 +0000
Manifest this update: Mon 05 May 2025 02:00:47 +0000
Manifest next update: Tue 06 May 2025 02:00:47 +0000
Files and hashes: 1: K3K73SOKoUl1BbH2-VG761We22I.roa (hash: JYStvIUn6egbkb0Wps8aA9dlj6GWDzxPYmBqdWiziOs=)
2: _XTetBhEJvpiIlthIMNnBvc3uOI.crl (hash: UVNuXjGoB9HKvQXUGhHV06ON8yyfWV4CeJkG3KGRgF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:2c:a2:13:25:e7:78:f1:c3:b4:5b:4a:10:e2:fa:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd74deb4184426fa62225b6120c36706f737b8e2
Validity
Not Before: May 5 02:00:47 2025 GMT
Not After : May 6 02:00:47 2025 GMT
Subject: CN=ab11831d4cceef77e32d41fdaac8d519a2b49227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:02:b6:bf:06:c5:6a:e6:df:86:d0:7d:78:a7:
49:27:25:10:da:fd:e9:d4:c6:07:49:16:d1:1c:07:
9e:1f:e2:35:b2:9b:a0:16:1c:58:99:b9:d2:2f:d0:
8f:a3:2c:95:0f:99:21:c0:15:d2:7d:24:52:1a:66:
55:61:0f:89:53:f9:fc:c2:68:c2:3b:a9:fb:b3:29:
c6:5e:4e:80:6c:c3:61:c3:dd:63:5e:b9:ad:7d:20:
1f:28:59:32:f8:0e:26:88:fc:9b:f6:e9:45:a0:71:
b6:cc:c2:e5:14:6c:1a:ee:7c:96:b0:58:de:a1:3a:
a8:59:f6:71:07:07:4c:8f:c3:8e:2d:70:42:fa:fb:
50:c6:cf:b1:53:02:bd:68:3c:a3:4c:0d:a1:5a:d0:
3a:5c:bc:81:00:89:99:80:32:3e:df:9a:9c:6e:1c:
a5:6c:0d:ae:b1:bf:d9:7f:5e:d0:60:d6:dc:13:f6:
8a:1e:99:b9:e1:91:fd:2f:33:84:83:91:a8:1f:4a:
63:03:58:b2:ef:bd:2e:6f:3b:f6:79:32:e3:33:23:
38:df:af:83:c0:9f:02:5c:76:65:57:6e:f7:2f:ce:
ef:e8:3f:9f:92:5b:88:f7:1e:f2:c3:51:75:86:03:
ee:8e:f0:6e:75:05:69:dd:4b:d0:80:d8:ed:08:1d:
97:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:83:1D:4C:CE:EF:77:E3:2D:41:FD:AA:C8:D5:19:A2:B4:92:27
X509v3 Authority Key Identifier:
keyid:FD:74:DE:B4:18:44:26:FA:62:22:5B:61:20:C3:67:06:F7:37:B8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XTetBhEJvpiIlthIMNnBvc3uOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/18491f-b04d-4b0d-907b-d5705ae37014/1/_XTetBhEJvpiIlthIMNnBvc3uOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a8:7a:e3:14:09:e5:32:7b:70:a9:c8:2e:ca:f2:b0:0d:60:
67:93:3f:75:16:40:b9:1c:c4:71:65:62:67:f4:ca:37:cc:23:
87:53:63:07:30:77:f5:20:46:5a:ec:83:eb:d6:f7:b8:88:63:
0b:69:7d:db:42:ed:3f:cf:93:aa:94:8f:2f:b3:fc:ef:b2:99:
b1:bc:88:cb:d0:09:d9:0a:da:88:a2:6b:28:05:fb:c1:85:2d:
48:4c:4d:9d:f1:e2:ca:5a:e5:fa:a8:6c:c6:5e:30:fe:fb:7e:
ad:b7:37:a9:92:db:2c:98:66:f9:32:1d:5f:62:e8:ef:45:60:
6f:1a:3f:d0:41:ad:3a:36:f1:ba:3f:ca:db:55:ef:cc:74:d1:
36:a9:cd:8e:ae:36:cd:b2:a0:79:71:9b:71:dc:b1:f6:c2:e6:
af:6d:3c:d7:e7:25:0f:68:92:05:6b:69:0b:49:10:0f:a5:c0:
0f:25:a6:3a:46:d5:61:45:d4:74:3f:c3:c5:6f:37:81:f3:92:
e2:24:4a:5f:45:9d:27:53:a9:2c:49:99:5c:a4:93:eb:21:98:
b8:b3:b0:33:6a:ec:81:80:88:f9:ab:8a:13:ad:f3:c4:11:97:
2b:81:59:25:06:97:01:a2:db:dd:57:48:b3:7e:54:e7:90:d3:
af:c6:e3:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 08:43:38 2025 by rpki-client