Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: bmPce1maRLjXyjOPGUhonR8cL9lwB490hF67PY1/8oQ=
Subject key identifier: 7B:2E:1C:D9:F5:DF:EC:DE:48:54:6B:3F:91:11:4D:AC:8B:8C:03:F9
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0198D5F119E803BB3A08571478A653B7672E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 046A
Signing time: Sat 23 Aug 2025 08:00:04 +0000
Manifest this update: Sat 23 Aug 2025 08:00:04 +0000
Manifest next update: Sun 24 Aug 2025 08:00:04 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: u/Hrtgj1LKExUJ4/5kSFqOhyFyuBqjsIDJB4gYxLrJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:19:e8:03:bb:3a:08:57:14:78:a6:53:b7:67:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Aug 23 08:00:04 2025 GMT
Not After : Aug 24 08:00:04 2025 GMT
Subject: CN=7b2e1cd9f5dfecde48546b3f91114dac8b8c03f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:47:f9:2f:b6:46:79:64:1f:ac:f8:92:77:82:
75:8c:91:55:17:c1:22:86:9e:73:0b:ee:4c:13:8f:
26:54:f3:9d:28:19:cf:3c:f1:c2:ce:6b:ad:c2:76:
b9:58:9e:e6:c9:c3:99:bd:67:31:65:cd:7f:8c:00:
0b:21:c3:27:70:c0:1d:a1:09:b3:7a:de:71:ad:d1:
ca:19:77:39:f3:eb:9e:b3:c4:51:2d:98:19:ed:d7:
f0:b0:07:a9:56:04:c2:54:71:c7:39:20:41:e8:1b:
34:b1:59:12:ff:24:21:cb:26:ba:1d:5e:27:4c:7a:
8a:b7:f4:b0:90:15:f4:cb:4c:6e:85:7c:89:b0:78:
25:24:98:df:f8:4b:4e:91:58:e7:a3:df:bb:dc:57:
75:0d:4c:ef:7f:ce:32:66:70:8b:62:23:b0:65:fd:
81:0e:3b:64:c6:c3:bf:1b:ab:fd:d8:09:01:dc:1e:
fe:4a:ac:67:7a:5b:e0:2f:c2:54:af:3f:a0:84:30:
bc:b9:bc:ce:a4:fc:47:5f:8e:14:ce:d0:2a:66:79:
7d:ff:8d:4f:4b:db:d0:ee:9e:86:01:92:37:14:86:
24:87:8a:0f:7f:15:c2:c1:cd:0b:25:8b:26:2e:b1:
4e:30:d5:c3:4b:11:e9:da:66:9e:22:09:1e:e4:2e:
68:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2E:1C:D9:F5:DF:EC:DE:48:54:6B:3F:91:11:4D:AC:8B:8C:03:F9
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:63:db:9c:7f:c5:c6:82:67:00:c8:02:16:ba:7f:d6:f1:53:
e7:37:30:ca:3d:fc:72:6c:26:4e:bd:05:de:87:56:60:0f:ab:
71:e1:cb:c9:e3:7b:be:d3:9f:16:44:12:64:ad:d6:41:67:09:
72:3c:3d:a3:2e:28:6e:48:0c:e7:72:2b:b4:65:31:ee:39:bb:
71:82:27:25:3b:9b:d4:c4:70:dc:3d:f8:7a:cd:b3:98:b7:4e:
4d:8d:69:44:5c:cc:ef:ca:1c:06:af:a3:2c:9d:59:79:c2:92:
df:bd:4b:53:93:6a:e4:c4:30:03:d3:08:c4:d1:f8:0b:0c:5f:
77:13:ee:32:bb:63:ad:fc:98:fc:4e:43:d6:c0:dc:ee:f6:c9:
10:0e:ad:e3:14:2b:d4:8a:a6:45:ae:ed:b3:75:da:3b:8d:4d:
c9:7f:b9:bf:9e:5d:07:85:25:3f:fc:ba:10:e9:12:38:bd:27:
d3:d5:5c:d1:8e:dd:78:a9:bc:bf:d9:9d:c7:ea:61:07:da:14:
ec:26:1b:5e:b8:b8:4f:bb:66:c4:9b:68:5c:6d:d5:49:73:cb:
23:66:69:ac:f0:80:6f:83:ca:98:0c:b0:55:33:47:22:ad:00:
80:2e:fb:4a:d6:25:b0:5a:a1:e5:22:80:c7:99:d3:b0:0d:60:
6f:4c:b7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:00 2025 by rpki-client