Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: LNpI10yXszpkVf1Uac3CcuR7rUSNNT6tBKk4hSiZFh4=
Subject key identifier: 31:AD:95:69:9C:DE:DE:21:57:B3:3B:BF:6E:B8:5E:DC:08:CA:58:43
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01969295EE10604E47818223D1F2097B5764
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 033E
Signing time: Fri 02 May 2025 20:00:21 +0000
Manifest this update: Fri 02 May 2025 20:00:21 +0000
Manifest next update: Sat 03 May 2025 20:00:21 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: J1WH+WhQutqdzCXHek5bbVDKEGD1dSOU8SbsKhl4tdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 May 2025 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:92:95:ee:10:60:4e:47:81:82:23:d1:f2:09:7b:57:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: May 2 20:00:21 2025 GMT
Not After : May 3 20:00:21 2025 GMT
Subject: CN=31ad95699cdede2157b33bbf6eb85edc08ca5843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:5d:9c:48:01:29:55:3b:56:c9:50:70:b1:
95:a5:4d:6b:8c:e9:37:63:3f:9b:e8:f5:fb:bb:ec:
eb:4d:98:a9:cc:06:75:cd:98:e5:73:b7:0e:2c:0f:
47:aa:fc:91:c8:e5:37:67:f9:69:42:90:2f:8f:f4:
e9:f2:e8:50:ea:2a:7c:a9:78:ad:57:9b:9e:99:b0:
b5:61:b1:85:dc:68:55:0c:08:c2:80:15:eb:ae:52:
e3:ad:cd:5d:cc:9f:0c:b9:5f:80:db:52:29:59:34:
73:20:24:7f:b5:c0:44:67:25:c8:ba:1c:4d:72:ed:
06:18:c8:80:dd:10:e8:35:21:bc:c4:88:e7:c0:cb:
74:63:f0:ad:80:85:7f:8b:a1:94:61:59:34:a1:95:
56:67:d1:da:e3:14:16:fd:28:75:d2:84:55:82:c2:
2c:6c:d8:2c:af:66:77:b8:37:15:23:c9:4b:6b:99:
9d:c7:fe:2a:51:e8:14:e5:5e:06:26:c0:61:db:7b:
5a:82:2b:1d:17:df:88:9a:91:4c:82:ad:f5:77:f0:
75:7f:78:ed:2a:fd:ee:a7:26:50:51:0e:70:c5:9c:
02:90:12:e5:df:44:16:55:4a:e4:34:37:7b:0f:06:
4f:0e:46:fe:4c:2b:a6:4b:52:76:26:db:94:58:78:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AD:95:69:9C:DE:DE:21:57:B3:3B:BF:6E:B8:5E:DC:08:CA:58:43
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0b:5c:eb:dd:d6:7f:87:b5:b1:16:ab:16:7f:17:d1:46:ae:
b1:42:25:02:06:91:ae:ca:a6:aa:c6:e1:d2:02:70:69:2c:b4:
ac:3e:57:d6:06:94:37:4a:e1:8e:32:ac:26:09:2d:df:a3:04:
46:58:e5:1c:7f:b2:fb:3c:54:a3:d0:dd:f8:b5:ed:47:44:6b:
46:8a:63:da:37:7b:6e:51:73:1a:de:89:91:3c:4d:5b:cb:c1:
e6:25:e7:3c:9a:06:d6:72:f7:86:f7:8f:5e:20:f7:5f:a3:de:
ff:d4:9e:36:eb:2c:6b:81:a3:6a:7b:4d:9c:f0:9e:85:61:27:
55:6f:80:a7:20:27:9f:6b:04:58:9e:3c:1d:47:17:ad:d1:fd:
97:2e:fd:9e:31:c1:25:30:81:06:c5:f0:70:19:8a:ce:01:48:
ce:16:4d:49:62:00:2b:3b:b4:a4:3d:9c:5a:e2:8d:f9:30:8e:
13:6a:ac:c9:f4:c4:12:0e:e6:dd:5e:0a:7d:ef:bb:33:fa:c5:
85:2f:1f:15:28:df:dc:bc:8d:11:6f:56:00:a2:c8:13:64:65:
e3:81:3a:e6:cd:b6:aa:7c:04:fb:79:d9:43:c6:fb:32:35:48:
3a:f3:8e:66:b6:8e:c8:3b:ce:1b:2b:1c:8f:90:3e:b3:29:f9:
b9:b7:78:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 02:21:59 2025 by rpki-client