Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: tEK2JlWajJsKXMqleuh3lMf0mIZ+Bc7jnNv+2ciABi0=
Subject key identifier: 0E:B9:38:13:EF:0D:DE:F7:DA:5C:8F:28:A2:81:46:F9:63:FB:B1:44
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 0197CD5F70D3F90E4540790147B7E16DEF0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 03E1
Signing time: Wed 02 Jul 2025 23:01:13 +0000
Manifest this update: Wed 02 Jul 2025 23:01:13 +0000
Manifest next update: Thu 03 Jul 2025 23:01:13 +0000
Files and hashes: 1: 5CWyh9PK5o0CRshOuZZrSEZUYvo.roa (hash: fLRtRssfXw0tGSXMJxuEbYJSjSGokpVQlmfs5gVL6NQ=)
2: UVYnKt_30APPOeuH0s5UjzlGPFA.roa (hash: Ew+BOeWWwETAT/J2F3S8Uy7N2dyPufBElP43bD+0M6A=)
3: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: t1uxBNw5le0Z8uQqsRvyxSdl8Wlp86y9Rgqxg0uNvNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:5f:70:d3:f9:0e:45:40:79:01:47:b7:e1:6d:ef:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Jul 2 23:01:13 2025 GMT
Not After : Jul 3 23:01:13 2025 GMT
Subject: CN=0eb93813ef0ddef7da5c8f28a28146f963fbb144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:8a:80:94:84:1d:13:2b:66:00:fa:a0:6e:
2e:53:13:a8:e8:47:16:52:de:1a:83:14:1d:8c:c5:
c9:6f:b4:f6:5b:17:cc:a9:3b:f8:b2:2f:d2:08:c9:
09:10:17:8f:6a:f9:a4:b7:d0:61:c1:80:e0:ab:81:
26:75:9e:c7:99:09:dd:30:55:9f:70:9d:50:95:a8:
45:c9:3d:f2:db:23:0f:4a:c0:78:a8:09:1b:79:9f:
94:73:8b:ab:00:ac:4b:a8:a7:9e:02:1f:e4:4d:7a:
13:59:d4:a8:df:e7:29:13:05:98:68:3b:bd:0e:ae:
a2:57:ea:a1:d6:7e:3a:47:1f:fa:ff:f5:4e:81:ef:
05:28:58:3d:f5:8e:d5:12:04:bb:ef:67:14:7c:77:
4b:57:0a:33:4d:74:c1:a1:e5:5b:50:a7:8c:b3:b1:
e8:5a:ac:f7:96:df:7d:89:c2:3d:17:46:e8:55:14:
6c:07:c3:35:14:80:91:9d:78:41:a5:04:90:63:f1:
34:83:fe:c0:d4:3b:2c:f7:b3:ad:9d:c2:58:89:8d:
80:48:db:36:22:d9:0d:86:4e:4e:db:9e:e7:6a:8c:
8f:af:3e:78:a0:24:a2:48:a0:dc:c7:d3:26:2f:8b:
14:6d:31:ec:f7:9f:5f:24:25:17:1b:c1:cc:a9:61:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:B9:38:13:EF:0D:DE:F7:DA:5C:8F:28:A2:81:46:F9:63:FB:B1:44
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e6:e4:f2:5a:3b:68:6e:35:a5:94:53:33:ee:54:c3:a7:c3:
bb:6a:30:6a:7f:e8:7c:22:b7:5d:50:b2:31:f6:21:db:c5:a6:
d5:8f:0c:f3:80:ad:d7:01:e1:21:57:e6:cc:ea:5a:fa:54:80:
13:09:9d:4c:fb:bb:2e:be:dc:28:e6:1e:aa:10:ce:f3:16:a0:
3a:74:97:3c:88:d3:e7:2f:82:a5:8a:32:06:4a:1e:4e:48:24:
b3:9f:c4:b1:91:ca:97:e6:73:a8:39:82:78:a1:0d:40:11:4c:
00:1e:45:d5:b0:12:aa:54:26:1c:49:c3:db:4e:eb:0c:5f:05:
23:bc:0d:bd:f6:bd:63:54:e2:b3:ee:96:87:8c:9f:57:e6:de:
7e:2d:d2:a7:35:f4:f2:7a:1d:96:4d:bc:20:ac:e4:10:b9:0d:
9b:64:77:71:47:a2:b9:c0:92:b2:6d:bf:80:3e:e9:5f:da:51:
4f:a0:b5:e1:4a:bc:ee:59:aa:bc:e7:8a:35:1e:1b:01:e3:ec:
c9:65:d1:e7:da:41:13:16:d7:55:3b:10:01:ef:90:5d:7e:b8:
11:1b:d1:0e:6d:7d:02:cc:bf:ed:d3:8a:d2:99:64:82:26:92:
ff:96:01:93:89:f4:2a:3b:43:22:ab:29:48:4f:3a:af:51:12:
5b:5a:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:11:09 2025 by rpki-client