Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: Gxxucb7SV4u9VhvvdGqG4jWA+LishjndbykUZm/JVPs=
Subject key identifier: 73:E5:18:AA:19:60:FA:7F:7B:B4:4C:C0:FC:CB:2A:C5:C4:D8:30:77
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 0197B6D76BBA25673F83A63A337DCBD0EB77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: 7NzbgkLj/BB2PLoPM0APgV5muk1ycvrUQG2xISo4mKg=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6b:ba:25:67:3f:83:a6:3a:33:7d:cb:d0:eb:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=73e518aa1960fa7f7bb44cc0fccb2ac5c4d83077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:22:8b:5a:24:bb:34:0e:2b:8d:7d:bf:ec:
a5:4e:46:ad:dd:74:8d:6a:a1:c4:78:a1:c6:48:d5:
16:65:6c:4d:e4:1d:dc:89:18:ff:e4:5e:12:2d:83:
48:e2:41:79:c7:fa:68:1e:29:7c:00:59:04:94:a2:
7f:af:3f:95:b3:82:35:24:41:3e:1c:7f:9a:08:bc:
64:a5:ba:41:2f:b3:2d:31:ae:3f:d1:9b:9d:33:ca:
fd:39:a7:53:e5:9d:79:3e:ed:3f:24:ea:f9:0c:e1:
0d:c0:33:e9:0b:6f:f2:10:e2:ce:ec:76:81:05:48:
06:22:e5:93:e2:a3:70:07:96:c9:16:30:0d:f4:f3:
5a:0e:55:e5:6c:0b:2c:da:a6:ad:b4:fd:c9:74:d0:
86:ec:e2:fe:b5:9c:72:cd:c4:f1:e7:22:13:e2:99:
00:50:66:5c:d0:cd:ff:14:ee:92:85:94:b6:c0:c4:
11:4d:05:d1:73:45:93:2e:1f:d5:97:3c:bc:ef:0b:
a9:34:60:b0:bc:6a:bd:b5:2b:09:f4:e9:ad:a4:46:
ff:3b:ac:c3:46:89:f4:2b:45:8a:e8:20:95:c1:0b:
77:64:8c:19:42:5c:c1:07:15:10:6c:8e:05:af:42:
5c:01:41:9f:bf:f8:c9:d1:47:e1:70:e4:9e:77:97:
44:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E5:18:AA:19:60:FA:7F:7B:B4:4C:C0:FC:CB:2A:C5:C4:D8:30:77
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:c8:be:3e:02:67:17:08:96:b7:80:07:5e:03:b0:5f:ef:35:
2c:c7:8a:74:38:b2:1e:29:26:1f:29:7d:81:0c:63:80:b1:40:
4f:33:c7:95:fe:ff:ce:aa:12:74:82:2a:fb:e7:42:fa:1e:e4:
0f:9b:20:4c:b8:e6:5e:dd:ab:d0:87:0c:36:7e:49:ed:cb:87:
9a:36:12:2c:61:91:cb:92:4b:f6:b5:98:17:2d:ae:0b:75:47:
f8:70:72:f1:60:fe:ab:b8:b7:40:cd:4b:18:00:1f:ee:88:1d:
b0:63:ec:6a:0c:44:02:64:ba:bd:ec:11:57:cd:01:2a:09:15:
19:c1:49:ac:df:ad:8c:28:c3:33:3a:4c:48:27:50:26:9f:f3:
ff:76:18:18:86:90:0b:be:26:4b:2c:90:25:b2:a6:6d:9d:1e:
1a:62:09:9b:9d:8a:b1:cc:c6:10:f0:f3:ee:f8:58:c5:e4:b8:
c3:3f:08:30:25:52:19:43:70:8a:31:69:ea:bb:8b:63:fc:19:
a5:5f:b4:f4:47:16:59:5c:75:ee:9e:17:a3:5b:18:9f:10:16:
cc:39:2b:1f:ed:c6:6a:10:bc:b9:df:f1:10:8d:f2:0c:25:20:
11:e5:4d:69:41:99:8b:83:f3:29:b7:4d:e6:d4:39:60:45:bd:
8f:d2:58:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:26 2025 by rpki-client