Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: vEr1pO6RCYzaVrllHZeUbQrQjsjNIVuWUPXs5MuijeE=
Subject key identifier: 20:B2:5D:89:6F:09:2E:3C:09:C0:13:FD:67:3B:FC:72:59:99:53:96
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0196D43F6D0C448523F0C7AE0785D9A28EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0360
Signing time: Thu 15 May 2025 14:00:48 +0000
Manifest this update: Thu 15 May 2025 14:00:48 +0000
Manifest next update: Fri 16 May 2025 14:00:48 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: QhziZs2pmSekdOV9pLyE01xd29tS2Q58HNZr5U1UoU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 May 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:d4:3f:6d:0c:44:85:23:f0:c7:ae:07:85:d9:a2:8e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: May 15 14:00:48 2025 GMT
Not After : May 16 14:00:48 2025 GMT
Subject: CN=20b25d896f092e3c09c013fd673bfc7259995396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:fe:b4:0a:fb:c5:47:a9:47:94:d6:c6:ee:
d8:60:46:5b:b8:dc:7e:fa:64:ac:86:f0:d4:ef:1e:
2e:39:ae:34:be:e6:78:1a:9b:72:de:cc:65:63:32:
95:05:85:56:fa:dd:fa:72:f6:9e:1a:ba:d5:36:02:
69:8d:53:31:d6:9e:1c:b5:b4:6a:8f:27:ed:c4:64:
f5:e3:e3:40:c9:b6:35:7e:76:bf:96:ff:b1:f1:43:
eb:86:aa:4a:33:c8:8a:86:62:c8:83:b6:fc:a3:4b:
57:ef:8a:ba:8a:39:25:d0:c4:5d:5d:38:17:32:47:
e9:8f:cd:bc:59:50:bf:00:b3:13:c3:e9:68:97:2c:
4a:00:41:b8:6b:30:42:0c:89:c9:05:8b:c7:15:71:
74:73:e5:34:10:6d:ba:69:ab:b6:30:de:34:e5:93:
1c:91:cf:11:ab:08:53:ea:e5:2a:09:e2:c8:a2:c1:
b4:c1:8a:13:b7:22:31:a7:fd:db:c6:47:82:2a:22:
51:97:a8:89:72:61:67:3f:36:1f:3e:19:35:05:b9:
eb:97:26:14:88:da:6e:e2:65:11:6e:06:ba:0e:b1:
8c:5c:b6:a9:83:b0:c1:18:86:e3:36:5f:bd:64:4f:
1c:ae:dc:08:87:1d:82:30:dc:7e:8a:9e:9e:03:8a:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B2:5D:89:6F:09:2E:3C:09:C0:13:FD:67:3B:FC:72:59:99:53:96
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:2a:b1:55:5b:2b:13:d4:9a:3f:6a:2c:b1:29:40:91:85:63:
6f:63:ab:4a:56:bb:c7:2f:e6:16:38:f1:29:80:01:a8:48:4a:
18:76:d6:b1:93:84:2d:70:8d:ce:9a:fb:b2:05:07:87:ae:c1:
3c:67:bd:eb:f0:f5:ca:5a:ab:9b:23:67:a0:9e:22:38:0d:85:
a9:fe:78:de:78:dc:3f:2b:e8:a6:68:c7:5d:b9:c3:f8:be:c1:
fa:43:83:31:4d:df:1c:42:e4:54:13:cd:85:0a:5d:88:e1:c0:
58:d2:18:c6:eb:03:ce:67:b2:29:69:3e:43:84:3a:bc:35:cc:
f4:a3:50:ad:9e:db:a5:5b:6f:0a:a3:2c:4d:74:90:2f:41:13:
21:5f:8c:fd:74:73:7e:7d:91:04:a3:6b:ed:3b:dc:91:96:c5:
ab:8f:fc:f4:c6:a7:e0:77:01:9c:19:48:37:23:41:ad:04:54:
e8:83:b8:24:28:dd:93:25:59:48:46:6b:b6:35:d6:b4:81:ef:
b8:d6:9d:9c:76:b7:22:4f:e3:8e:f4:9e:af:a6:07:d6:e6:da:
5a:8c:6f:33:f0:88:10:7f:b2:01:e0:ef:e0:81:73:7e:9d:e8:
72:4b:50:3b:d4:8e:15:60:52:ef:79:dc:06:4c:6e:a0:69:db:
a8:57:32:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 19:33:50 2025 by rpki-client