Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: 2vZv4wb2k64xcgRB0yYC1OGfhYzKHoW9lL6pl8l8vyA=
Subject key identifier: C7:08:7A:B6:D5:9D:87:61:23:52:74:A4:FE:62:38:79:EE:1E:18:5D
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019839841C26A7A7FA5578863DB3CBF318EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0419
Signing time: Wed 23 Jul 2025 23:00:15 +0000
Manifest this update: Wed 23 Jul 2025 23:00:15 +0000
Manifest next update: Thu 24 Jul 2025 23:00:15 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: LpYDbXH1t06t4ok0YKJo4PezeEDmemCY4r0IcVGXO7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:39:84:1c:26:a7:a7:fa:55:78:86:3d:b3:cb:f3:18:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jul 23 23:00:15 2025 GMT
Not After : Jul 24 23:00:15 2025 GMT
Subject: CN=c7087ab6d59d8761235274a4fe623879ee1e185d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c9:d3:70:91:55:81:11:b2:70:f6:a8:be:be:
39:9d:8d:37:d0:63:62:00:1f:cf:05:fc:92:46:e2:
9a:fc:2c:f7:bf:c2:a1:51:54:c5:ac:f9:84:a8:e6:
ae:c3:b5:cf:87:b5:79:fe:f6:0a:12:dc:ca:11:f0:
2a:64:cc:6a:ed:df:87:28:25:e7:4c:6e:b4:37:6a:
35:ff:9e:5f:4a:b1:f9:7a:54:55:55:b1:1f:b4:f7:
b7:3d:51:a4:e5:c2:3e:15:7c:18:8e:10:be:f5:ff:
77:14:d7:2e:8a:1b:d9:f2:f0:33:43:52:32:61:4d:
64:8c:f6:4d:6a:eb:50:56:f4:02:10:10:82:98:a3:
9a:36:d7:bc:f9:89:d1:c0:2c:05:6b:c4:d2:ee:f5:
4a:90:eb:78:fa:ba:82:de:f3:86:c2:8b:d6:69:7b:
cb:4d:fe:47:83:60:8d:50:0f:cc:46:49:8e:b7:94:
93:a1:5c:d6:ea:58:d7:07:d1:84:d8:82:13:ec:95:
72:0f:74:23:60:d4:d7:84:e1:0a:11:7b:91:b6:d3:
2b:2c:9b:8e:43:e8:dd:9b:23:ba:4f:c7:82:e5:22:
81:76:76:06:0a:48:a9:bb:3e:af:b8:67:fb:55:28:
29:18:68:63:f8:ff:d0:0f:0d:19:bf:fa:72:cf:e4:
09:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:08:7A:B6:D5:9D:87:61:23:52:74:A4:FE:62:38:79:EE:1E:18:5D
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:fd:5e:74:b8:9e:a6:cb:c4:61:68:1b:3b:db:6d:ab:a2:8c:
60:36:64:88:02:ad:46:93:00:1f:b1:d2:5f:9c:82:cc:47:35:
ee:2d:00:0d:ac:b8:35:e0:9b:21:68:55:d2:46:2b:01:5f:45:
81:8b:36:8b:e5:80:f3:06:b5:a9:77:34:2b:b0:ed:22:50:4a:
c5:1d:e2:f1:0c:47:b6:84:27:db:88:d6:5d:59:5c:d6:f6:15:
c0:db:4a:87:56:0f:a0:07:9e:e4:3c:7b:36:41:c8:b5:93:c7:
3b:1e:2b:d2:9a:15:b1:d8:a2:ad:09:09:1e:7d:92:9f:cd:3d:
f2:89:9d:30:ba:51:ab:4c:1b:df:ed:fc:51:56:bd:e0:ad:7e:
bd:fb:12:11:ee:10:a1:5d:b7:6a:e9:af:a8:3c:cd:c9:70:ca:
99:c2:72:f3:11:61:bc:ba:8a:03:13:2f:14:ea:5d:f4:3a:d5:
e4:35:e1:b0:af:69:94:89:78:75:85:74:57:50:bd:a1:eb:af:
00:ae:8f:a8:a8:4b:f7:95:3d:c7:bd:e4:22:8b:a2:eb:4e:ea:
e6:1e:70:d0:40:78:af:77:0b:60:5d:c3:00:b3:21:37:e6:23:
bc:4d:86:64:ad:c2:02:fd:29:96:b7:bd:52:67:8d:71:ea:6d:
04:0a:64:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 03:56:46 2025 by rpki-client