Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: tnF7FHWUSDL6fCX7TNM0m5Y6tMFYqhxvj21OZQ3w1Jk=
Subject key identifier: 28:89:EC:F9:CE:4D:D9:64:8B:30:39:1C:D1:6C:71:4A:AE:53:96:00
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01992CD900B229CF171592CAB712F0A9C6F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0497
Signing time: Tue 09 Sep 2025 05:00:42 +0000
Manifest this update: Tue 09 Sep 2025 05:00:42 +0000
Manifest next update: Wed 10 Sep 2025 05:00:42 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: AYeDj4BTXRrG+BQfcj+em1ffpFle8rGukAIbNhc7EfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:d9:00:b2:29:cf:17:15:92:ca:b7:12:f0:a9:c6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Sep 9 05:00:42 2025 GMT
Not After : Sep 10 05:00:42 2025 GMT
Subject: CN=2889ecf9ce4dd9648b30391cd16c714aae539600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:07:f9:04:4d:e4:54:a3:2a:31:a6:d6:d3:31:
aa:8a:d3:bc:57:99:d0:3e:31:dd:bc:1f:61:56:c4:
78:01:3a:88:e8:c5:f4:43:5f:a4:c1:b8:89:19:4b:
23:9c:b1:c2:49:18:86:ad:af:f8:8b:79:61:60:fb:
c3:87:57:ec:be:09:1c:6e:4a:9a:0e:c9:f0:b2:03:
bf:58:0d:40:96:0b:9c:c7:ea:e8:89:56:f3:6f:bc:
2f:b3:21:65:6e:e0:b9:fd:e5:e4:95:f4:55:07:73:
c3:b3:79:56:58:60:34:2a:f9:1d:40:5b:27:8c:64:
b0:69:0e:83:52:59:a5:b0:3c:68:f7:86:56:e5:de:
67:df:26:6b:93:d8:63:81:98:6b:c9:ae:96:d5:c1:
07:45:d4:51:ee:9c:eb:38:aa:f3:87:8e:c2:ec:33:
e8:24:a5:7a:71:95:6f:7d:e7:fe:11:08:28:a2:82:
b7:2f:df:71:39:be:7b:c6:f6:9b:86:87:1c:62:ac:
b5:7d:90:1a:56:c6:80:05:1a:b9:32:89:60:9d:47:
46:0d:c8:40:2b:39:10:7b:d5:ec:19:6b:4a:47:c9:
0d:02:40:d2:ba:9c:65:1e:03:81:e8:88:84:72:49:
ae:e8:e8:fe:43:12:51:a2:d5:29:f1:68:a2:5f:22:
f3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:89:EC:F9:CE:4D:D9:64:8B:30:39:1C:D1:6C:71:4A:AE:53:96:00
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:6d:1a:09:8f:9a:6d:ca:51:6f:48:88:67:cf:d2:9d:88:dd:
8c:3c:87:c4:2b:0f:56:0e:e7:f6:e7:eb:6c:7a:55:b0:7f:a2:
21:4b:bd:81:21:45:0f:6b:91:a1:df:82:67:2a:2d:8d:3e:af:
08:58:46:9b:16:26:bb:d9:f9:dd:05:6c:6c:5c:02:9d:39:10:
bb:14:7e:a7:78:a0:01:9d:8b:c7:96:bd:99:c8:7e:e6:5d:c5:
eb:da:23:99:21:bf:b1:bb:9e:4b:28:20:ee:14:b3:32:fd:2e:
73:65:67:ef:66:1c:01:b0:b8:35:1e:07:18:24:9a:7c:61:f7:
fa:d6:ff:9c:91:1d:2f:2b:1c:86:81:68:9a:26:28:42:c8:57:
39:b5:8d:be:2f:38:ce:1c:f5:a2:0a:55:ad:f2:31:65:f3:54:
cf:49:33:f0:96:25:d0:40:80:90:d7:5b:df:0f:6e:95:75:b1:
4c:24:85:0f:e4:9a:f3:b2:21:ef:d4:44:33:2e:7f:5e:34:b5:
17:78:c5:c8:aa:25:bc:c3:6f:ff:b2:85:23:77:db:bf:72:22:
60:9a:01:a7:8f:62:b8:8c:6c:e2:bb:31:72:09:62:e6:fe:33:
e2:df:04:c8:55:c8:9b:8d:32:1e:d5:09:03:54:c2:63:98:cb:
f9:a4:9c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:59:02 2025 by rpki-client