Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: UvrZkO1kB9XgwNkgmfctXSHqkGBr2EEhkfrZF4YAX04=
Subject key identifier: 9C:85:5E:66:8A:38:83:3F:91:DD:A7:16:E8:06:EA:60:8C:65:FB:A6
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0197481E73D4279382B73AEE36BCE644F471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 039C
Signing time: Sat 07 Jun 2025 02:00:44 +0000
Manifest this update: Sat 07 Jun 2025 02:00:44 +0000
Manifest next update: Sun 08 Jun 2025 02:00:44 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: eIouVIWbgzoOAZLZ58Wsfey4xfQO/VmXj3n1Y1aWf4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:73:d4:27:93:82:b7:3a:ee:36:bc:e6:44:f4:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jun 7 02:00:44 2025 GMT
Not After : Jun 8 02:00:44 2025 GMT
Subject: CN=9c855e668a38833f91dda716e806ea608c65fba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:6e:a3:a3:e8:50:44:ff:a3:16:37:a9:b8:
a7:23:f1:44:f6:f4:e7:6a:55:a5:20:11:73:e1:19:
6c:ca:d4:3f:1f:71:fc:8d:67:9d:48:55:a7:81:41:
bd:2d:ab:dd:f6:d8:d1:cb:69:ea:bf:bc:84:39:be:
c4:cc:65:74:90:e0:5e:2d:28:69:c6:84:e6:e3:e5:
02:3e:9e:85:b8:0d:bd:f9:09:3f:f0:b2:52:43:78:
18:f3:25:08:bc:e2:39:f4:3a:27:4d:4a:ae:3b:1d:
87:3b:41:90:4a:43:dc:51:42:49:ee:c5:d1:26:34:
2d:33:3c:75:a5:c6:5b:d2:7a:ff:11:f9:9f:82:c6:
29:4d:dc:84:20:28:f8:5c:6a:54:a7:6f:d9:cc:9c:
ee:5a:3a:47:39:17:d0:5a:34:5d:ed:f4:7b:85:c0:
67:f6:5d:35:70:38:25:5f:44:f9:12:30:16:00:a3:
0f:ec:11:cc:76:37:ec:f2:17:86:6f:43:10:17:5c:
29:21:9d:d1:49:fb:6f:c1:f8:22:8f:7c:99:75:a2:
f2:b1:d5:a5:cb:a2:a2:f6:7a:01:13:5e:b6:8d:ee:
04:fc:f5:c1:3d:0b:04:45:1d:04:a4:f7:50:01:2f:
44:66:ef:8d:8f:4a:ec:77:92:b5:7b:ad:79:71:5e:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:85:5E:66:8A:38:83:3F:91:DD:A7:16:E8:06:EA:60:8C:65:FB:A6
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:48:0d:38:bc:3c:1a:83:00:51:3a:12:0e:a7:33:e5:f0:f4:
c8:2c:bf:a1:d5:b8:b9:50:2f:cb:da:03:c9:72:49:82:9e:d1:
be:e7:36:8e:63:cd:51:98:6a:6f:97:2f:32:35:15:18:df:35:
4c:95:69:af:64:ac:93:c9:7d:35:da:be:0e:dd:89:8b:e3:17:
1b:2e:bb:12:2f:82:82:97:57:a7:bf:f9:99:23:1d:e8:21:40:
b3:e5:c8:50:20:7a:5b:16:e8:c7:aa:56:95:be:10:e4:99:a9:
4c:d8:17:57:a3:16:ba:fe:ab:e8:72:34:01:b7:56:0b:d2:bc:
d6:0c:93:69:20:a0:1e:a4:4d:b4:31:04:fb:7e:cb:db:0a:c7:
0d:a7:e0:95:b4:8e:5a:3c:a8:3a:29:90:d2:98:c8:f0:a0:7b:
70:7f:4f:c8:33:db:22:6f:07:2e:c4:d8:64:6b:2c:ca:82:e9:
d4:88:bb:d9:79:01:5a:f3:a4:b8:95:3f:2e:3d:87:30:4f:28:
05:11:90:f9:68:f7:f3:d0:95:bf:56:b5:26:fa:e7:e2:62:68:
36:5b:0d:90:cf:8f:03:1c:2a:8d:71:f3:f5:bc:48:af:34:c5:
c8:81:1f:09:2b:c7:af:f5:4a:6f:4f:db:24:ac:47:27:31:f2:
95:24:5f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 05:36:27 2025 by rpki-client