Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: zIwpsGo7OPvLXQfGA5999U6hLzB+LALBi5Y77Cy3MPY=
Subject key identifier: 0B:95:E4:B4:77:BE:89:28:24:20:D6:97:3E:33:C2:06:5D:91:EA:94
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01969ED11BC8D3A06B7A365CE5B7E23C7D01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1527
Signing time: Mon 05 May 2025 05:00:26 +0000
Manifest this update: Mon 05 May 2025 05:00:26 +0000
Manifest next update: Tue 06 May 2025 05:00:26 +0000
Files and hashes: 1: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: pSOMkMuTZt8IYTiSH/OEydedP/E7Gy74ToT1al/ifGY=)
2: l3wz3kxvyE3dLi_otf1H964v_ag.roa (hash: EFAbZ5XqN3YjWYZwMd/7NbegJtXwuA7JeIY2LVho3FU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9e:d1:1b:c8:d3:a0:6b:7a:36:5c:e5:b7:e2:3c:7d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: May 5 05:00:26 2025 GMT
Not After : May 6 05:00:26 2025 GMT
Subject: CN=0b95e4b477be89282420d6973e33c2065d91ea94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ad:7f:ea:aa:a4:f9:18:3e:52:e1:60:d1:b7:
87:b3:0b:ea:c2:61:00:f3:64:76:5c:71:6e:14:b5:
f2:ec:ca:cf:3f:bb:31:87:48:1d:18:a2:ea:80:22:
14:aa:66:65:75:4b:64:5a:98:6e:c8:ea:3e:bc:04:
02:20:53:6a:c2:df:b2:a5:91:ad:0e:06:06:99:f2:
83:4b:43:1d:86:67:56:a8:c7:61:16:7a:04:6e:20:
80:6f:98:61:ff:9b:9d:19:fa:16:59:5a:07:10:75:
82:b5:9f:59:40:ae:82:07:92:e4:1f:7b:2d:e3:40:
63:51:b5:f9:85:7d:5a:e2:20:ee:4b:50:bc:53:01:
92:67:dc:c1:4f:da:64:dc:0c:72:9d:59:6c:43:b7:
24:a9:b7:3d:76:f9:eb:61:f0:8c:2d:77:7a:4c:00:
d2:91:a2:69:c8:57:d5:50:3d:6f:c9:d0:cb:86:ab:
a8:92:6a:9f:2a:76:83:c4:d2:50:64:55:a7:72:ac:
f8:c3:ec:33:e5:32:b5:0a:4b:a9:84:29:6c:99:e7:
98:45:cd:bc:7d:3f:45:84:16:09:b6:15:3d:08:73:
67:47:b1:42:0b:0f:e6:c3:1c:f1:8a:20:ee:13:e9:
51:1b:ef:f6:b5:cb:89:9d:ed:c8:f9:94:50:08:41:
d2:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:95:E4:B4:77:BE:89:28:24:20:D6:97:3E:33:C2:06:5D:91:EA:94
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:8a:86:ac:eb:e5:4e:51:0c:ba:50:75:0f:2f:85:df:17:50:
95:91:85:df:27:9a:10:91:cd:3f:60:0d:9b:0a:92:8d:d8:02:
a5:88:fb:99:54:fd:0a:21:9f:18:32:f4:00:df:dd:40:f0:f8:
6e:70:40:74:bc:2f:07:0c:98:79:bd:cd:89:6c:d1:9b:a1:2a:
a4:c7:85:6e:1d:ff:29:c7:53:a8:be:20:d6:ad:9e:d2:66:f6:
06:eb:8a:8a:63:e7:0a:ee:62:73:e8:53:5d:26:65:94:fb:ca:
c1:ff:aa:80:0e:77:93:b4:3d:a8:16:23:f3:22:d2:37:af:c3:
e6:a0:84:b1:f4:22:c2:37:d4:4c:25:8e:9d:c8:b5:9e:62:ce:
94:fe:b8:b1:24:49:24:06:9e:3b:40:7d:a6:07:ce:d0:fb:93:
e4:1f:7b:5d:e7:55:54:67:81:35:82:4c:54:13:cf:49:07:7f:
0f:a1:5f:10:d9:17:ae:33:a0:8a:c9:cd:e1:a8:bb:f2:48:fd:
e9:ba:cd:77:41:d5:9f:78:27:af:d0:b6:f8:f7:2d:2c:e5:2e:
38:85:b5:db:80:9f:42:57:5f:5b:89:e8:30:50:f9:33:57:91:
da:24:9c:53:5f:2a:7b:2d:4c:50:48:ed:67:ad:5b:9a:45:e4:
e7:ff:dd:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZae0RvI06BrejZc5bfiPH0BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkNzgzYmU4YjVmN2FkZDAwOGQ3MTJiNDM3YmQ5Zjk5N2Mw
ODRmZGYwHhcNMjUwNTA1MDUwMDI2WhcNMjUwNTA2MDUwMDI2WjAzMTEwLwYDVQQD
EygwYjk1ZTRiNDc3YmU4OTI4MjQyMGQ2OTczZTMzYzIwNjVkOTFlYTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq1/6qqk+Rg+UuFg0beHswvqwmEA
82R2XHFuFLXy7MrPP7sxh0gdGKLqgCIUqmZldUtkWphuyOo+vAQCIFNqwt+ypZGt
DgYGmfKDS0MdhmdWqMdhFnoEbiCAb5hh/5udGfoWWVoHEHWCtZ9ZQK6CB5LkH3st
40BjUbX5hX1a4iDuS1C8UwGSZ9zBT9pk3AxynVlsQ7ckqbc9dvnrYfCMLXd6TADS
kaJpyFfVUD1vydDLhquokmqfKnaDxNJQZFWncqz4w+wz5TK1CkuphClsmeeYRc28
fT9FhBYJthU9CHNnR7FCCw/mwxzxiiDuE+lRG+/2tcuJne3I+ZRQCEHSZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuV5LR3vokoJCDWlz4zwgZdkeqUMB8GA1UdIwQY
MBaAFF14O+i1963QCNcStDe9n5l8CE/fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEt
Njg4Y2UwMTM2NzFlLzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi82MDY1ZGItOTNiMi00MWVjLWIxOWEtNjg4Y2UwMTM2NzFl
LzEvWFhnNzZMWDNyZEFJMXhLME43MmZtWHdJVDk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgYqGrOvl
TlEMulB1Dy+F3xdQlZGF3yeaEJHNP2ANmwqSjdgCpYj7mVT9CiGfGDL0AN/dQPD4
bnBAdLwvBwyYeb3NiWzRm6EqpMeFbh3/KcdTqL4g1q2e0mb2BuuKimPnCu5ic+hT
XSZllPvKwf+qgA53k7Q9qBYj8yLSN6/D5qCEsfQiwjfUTCWOnci1nmLOlP64sSRJ
JAaeO0B9pgfO0PuT5B97XedVVGeBNYJMVBPPSQd/D6FfENkXrjOgisnN4ai78kj9
6brNd0HVn3gnr9C2+PctLOUuOIW124CfQldfW4noMFD5M1eR2iScU18qey1MUEjt
Z61bmkXk5//d6g==
-----END CERTIFICATE-----
Generated at Mon May 5 13:45:21 2025 by rpki-client