Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: 6EQN1yteimfxmQYgJiW+NRZnDYKGngFUpAsQoVF7DSA=
Subject key identifier: 28:78:83:EA:1B:00:35:B2:4C:F6:EC:06:55:76:6E:84:20:50:70:C6
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019896372D1E5168E2A127A5C208D5430A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0449
Signing time: Sun 10 Aug 2025 23:00:55 +0000
Manifest this update: Sun 10 Aug 2025 23:00:55 +0000
Manifest next update: Mon 11 Aug 2025 23:00:55 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: A+CHHGxS8s/q/zl/Umpj9dXsM/PjsLnvSscLNcNSPUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:37:2d:1e:51:68:e2:a1:27:a5:c2:08:d5:43:0a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Aug 10 23:00:55 2025 GMT
Not After : Aug 11 23:00:55 2025 GMT
Subject: CN=287883ea1b0035b24cf6ec0655766e84205070c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:09:09:2a:38:22:4e:73:ca:81:9a:f8:f7:c5:
d5:90:9a:e3:0b:cb:ee:82:72:ca:b6:68:13:2b:40:
91:8c:af:ae:9c:a6:cc:2b:24:43:57:74:a9:c0:5d:
ff:47:e5:65:93:04:99:db:03:bc:f7:a6:ad:92:81:
3f:b1:f7:bd:02:4d:40:9c:b1:eb:ae:59:2c:61:35:
37:29:5e:16:fd:e2:f3:f7:a7:f3:bb:d8:da:f0:e7:
0b:99:6b:e0:6a:c7:ca:8d:6c:fd:f9:5d:fa:82:e8:
ba:cb:00:eb:1f:52:41:89:3b:54:5e:e9:55:42:83:
1d:0e:8c:56:3b:8e:56:83:7a:aa:01:8d:72:d7:f4:
bc:35:b1:cb:9c:5f:66:b8:b2:8e:09:f0:eb:07:71:
06:38:86:ac:ff:55:4f:46:e5:fd:cf:6c:eb:6d:a3:
63:52:e7:b7:66:36:b4:43:5d:c6:0c:4e:ca:2e:ac:
3a:47:cf:88:88:bc:83:00:42:16:d0:6f:fc:12:40:
12:5e:86:2e:58:be:6f:3e:20:5e:26:8f:c0:5f:30:
85:ec:16:9f:2a:83:41:f1:57:9a:20:95:2e:23:32:
0b:a7:c5:8c:86:5d:53:3e:03:44:62:a5:74:d4:03:
54:db:24:01:94:13:c3:40:cc:7f:17:d1:21:eb:bc:
70:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:78:83:EA:1B:00:35:B2:4C:F6:EC:06:55:76:6E:84:20:50:70:C6
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3f:68:58:6e:8a:04:68:a2:c9:4d:45:51:6c:a0:16:e1:f3:
e7:ea:b9:e7:b9:55:2c:79:97:ed:6c:80:3e:11:58:a5:fe:06:
bb:11:b6:1b:4a:d8:0e:68:eb:6f:1c:e1:41:7a:50:21:80:d0:
a6:3a:68:6d:10:18:b3:6c:f9:6b:ee:88:9d:d4:49:4e:08:22:
c3:8e:e6:47:6c:23:1a:00:fc:a6:19:d1:61:2e:78:6d:36:0a:
8e:96:15:f4:b6:af:65:f5:98:85:ee:68:53:96:e4:fa:a7:56:
12:f5:9f:66:ae:01:30:3a:97:3f:44:23:86:b0:79:3b:2a:d6:
d7:fa:a4:d5:04:15:6a:e2:71:5e:87:e9:32:1e:80:ac:1f:30:
61:db:8f:5f:10:74:5b:0a:ea:42:6e:d6:7b:72:73:49:08:88:
99:43:1e:04:9f:e0:f8:29:f9:f9:e0:23:59:db:c9:53:c3:16:
1a:9b:95:4f:14:dd:6e:93:5e:64:82:bb:eb:8e:2b:7a:a6:44:
7e:01:af:ee:a8:f6:18:5e:2e:2a:dc:14:25:1f:df:c0:cf:0b:
63:f4:b9:8b:b2:ad:d9:75:65:a4:21:5d:34:6c:37:20:fa:fa:
15:a4:ea:87:5b:d7:bc:55:6c:b5:ce:39:10:ed:3f:00:31:63:
33:b2:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:29 2025 by rpki-client