Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: JJ/BoGkMsRMPOWA2R6AIEE1a8ylf2mNQdpOEMPSEqdg=
Subject key identifier: 81:5B:2E:1A:EA:0F:24:10:1F:13:86:4D:20:7B:32:C7:AC:2B:B9:53
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019A4E867FE84C5FE69BF0B4297DEB899C42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 052D
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: RK0NTPuSZgChlWud3ovyyUzX1GhGNIJLnvXMhEz3NXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:7f:e8:4c:5f:e6:9b:f0:b4:29:7d:eb:89:9c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=815b2e1aea0f24101f13864d207b32c7ac2bb953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:54:f7:ed:81:95:13:10:df:38:5e:18:d9:75:
26:e3:a9:98:ef:9b:d3:93:bc:31:49:2d:c8:a1:ea:
bb:7c:02:82:18:bd:fb:30:8f:51:fd:11:45:ba:6b:
f6:2e:4d:37:18:94:a6:de:24:18:e5:88:a9:bf:ba:
99:27:d6:83:d3:1e:e2:7d:cd:e6:39:f8:fb:86:30:
94:0b:41:a4:ef:95:e4:49:f3:cf:e4:cb:d3:42:8e:
8a:b8:1e:ce:18:d8:b0:f4:65:6c:f5:73:9f:7d:2a:
56:7e:1b:7f:d8:de:49:59:5c:37:8f:93:08:34:fa:
cc:91:3c:23:e4:a0:e5:53:4d:ad:53:69:31:f6:5a:
09:e4:c0:fc:5b:aa:f2:4d:b7:52:70:72:97:9f:78:
c4:bb:e9:8f:fb:6b:cc:c6:72:72:79:32:73:a9:17:
7f:73:33:85:eb:fe:f8:53:f3:c0:d4:d6:95:44:44:
af:bd:53:dc:87:f3:d4:66:e4:21:2a:bb:3c:02:64:
4b:12:4d:5d:a4:3b:c2:12:6c:85:3d:c1:e7:d6:52:
5e:a3:5c:a7:16:43:b6:a3:d1:a6:82:72:f2:c2:d5:
b9:7a:83:f4:75:62:27:b4:6f:c3:6a:cc:a3:e3:6d:
bb:3e:df:e3:0a:ca:cb:b8:97:29:ed:ca:74:fe:7e:
64:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:5B:2E:1A:EA:0F:24:10:1F:13:86:4D:20:7B:32:C7:AC:2B:B9:53
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:17:b8:0f:df:57:7e:fe:de:5a:98:0f:09:93:e0:21:4b:71:
41:d2:c8:09:65:a5:19:45:aa:0d:b8:9f:86:95:58:60:5d:8a:
6e:4a:45:e9:61:07:03:66:a3:ae:13:50:e4:a0:77:6e:10:4a:
60:4b:19:26:67:ca:8f:83:d3:c0:2e:26:38:ca:29:cc:2a:6f:
9a:fa:db:0e:5c:b4:b5:6b:f4:e2:32:69:c0:0c:bb:57:91:4c:
01:96:f9:54:90:2c:e3:e0:ce:9d:3d:ce:b0:a3:55:17:ae:a6:
90:93:dc:b4:d1:03:a5:a4:57:7a:6a:df:c2:7d:53:d4:28:0c:
f4:0d:15:67:6b:0d:d0:d3:ff:e7:87:6e:bc:9d:47:16:5c:ea:
8f:c8:44:36:9e:4d:42:84:97:d5:46:f2:a5:3c:a1:f9:d2:1b:
16:45:d3:68:6b:0a:27:88:86:b7:ba:5e:ec:5e:29:5d:88:d6:
d8:7b:3f:3e:6d:ba:22:30:03:2d:dd:36:c1:2b:40:1c:21:5b:
53:06:17:a6:8b:87:92:8a:d5:22:6b:29:cc:1b:cc:fc:32:4f:
80:ab:6f:6d:c9:06:51:9c:ff:86:22:01:65:4d:28:6d:03:fc:
c6:af:e3:7e:9c:ff:1f:ef:3b:23:8f:89:16:4a:c2:82:55:cd:
b5:d4:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:18 2025 by rpki-client