Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
File: RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft (raw, json)
Hash identifier: S1gswxDzLON1cWgAZGvotz3e/kIw2iUaAlxZb2h12mQ=
Subject key identifier: EA:D2:E4:A3:99:BB:55:DE:71:52:5F:C7:0D:94:DF:1E:FB:54:95:6F
Authority key identifier: 46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
Certificate issuer: /CN=46224dc9396e580ff7120f257353a70c72379c93
Certificate serial: 0198D65F3A18B5985E75F4BD9CE12227956D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
Manifest number: 1620
Signing time: Sat 23 Aug 2025 10:00:21 +0000
Manifest this update: Sat 23 Aug 2025 10:00:21 +0000
Manifest next update: Sun 24 Aug 2025 10:00:21 +0000
Files and hashes: 1: 237nnYKB7i2VaJ7m52nEdfcb0Ac.roa (hash: dLnbAiBZCTSW/Pqjq4dBaGgbhjyCcK3BPz7BIZYga/k=)
2: RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl (hash: QOHM4F27XwzsTLIa08/BYzKuHulnfF2r8A+i1mwuX3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:3a:18:b5:98:5e:75:f4:bd:9c:e1:22:27:95:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46224dc9396e580ff7120f257353a70c72379c93
Validity
Not Before: Aug 23 10:00:21 2025 GMT
Not After : Aug 24 10:00:21 2025 GMT
Subject: CN=ead2e4a399bb55de71525fc70d94df1efb54956f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:ab:11:08:8e:05:e1:6c:2b:99:6a:14:23:
d5:62:32:42:ce:16:22:79:4c:f7:c4:22:75:82:f4:
23:cd:fd:5c:53:66:8a:f1:dd:94:12:4b:12:58:07:
7e:e5:be:0b:0e:8b:53:aa:71:5c:15:80:19:0f:45:
d8:b8:a2:37:f2:4c:2a:be:f1:2f:90:9d:e0:bd:15:
90:a8:9d:0b:72:dd:22:06:ff:fb:cf:7a:ec:a3:e3:
a7:93:57:1c:33:7e:b2:20:ef:39:b6:59:4f:1c:82:
aa:cc:bd:6c:dd:6d:62:50:7a:7b:a8:e1:6e:a6:e8:
f1:7b:c5:f4:61:b6:e9:d9:e4:13:3b:6c:a6:ff:05:
0e:12:96:34:ba:df:b3:55:ef:f8:db:c3:57:8d:a6:
33:87:dc:c3:d8:62:fe:28:e1:f9:70:4c:41:75:1b:
3a:68:57:97:86:cb:3d:b8:ed:2c:7f:1e:68:98:68:
e5:3b:e3:69:bf:44:a3:64:e4:3c:6d:d0:8a:03:75:
03:6b:35:d7:cd:bd:73:83:dc:3a:e9:af:24:77:be:
57:af:35:15:d5:5e:a9:97:ca:61:f3:94:fb:bf:21:
3a:72:d8:94:18:a1:18:73:73:b8:b5:7f:72:89:ed:
72:76:6e:04:78:35:e9:a7:72:da:59:d9:8b:1e:c3:
21:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:D2:E4:A3:99:BB:55:DE:71:52:5F:C7:0D:94:DF:1E:FB:54:95:6F
X509v3 Authority Key Identifier:
keyid:46:22:4D:C9:39:6E:58:0F:F7:12:0F:25:73:53:A7:0C:72:37:9C:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RiJNyTluWA_3Eg8lc1OnDHI3nJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/e05dff-be12-4e82-873d-d31a33fc5e99/1/RiJNyTluWA_3Eg8lc1OnDHI3nJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:87:b7:7c:1c:4d:31:bd:77:1c:76:3c:d7:67:35:71:63:48:
3e:e7:8b:d5:eb:38:81:f7:3c:4b:64:ea:c2:4b:d4:52:a5:9d:
9e:fd:f0:ee:35:ea:9c:b6:9b:36:09:7f:21:96:ee:4c:80:25:
da:9d:f8:a3:9a:3f:59:fc:ed:bb:84:47:b5:6a:9b:0e:17:42:
00:28:d2:dc:38:8d:64:06:c0:e1:73:0a:62:58:c8:3d:94:1c:
c4:cf:e2:6b:17:ab:c7:7e:ea:fb:a0:68:62:e1:23:0e:3d:c2:
70:fa:12:00:4e:17:a9:5c:8b:ba:fb:87:64:91:84:18:50:9f:
50:4b:b9:90:d4:e8:ab:9c:9e:da:13:75:a7:49:c7:a6:a5:01:
e0:fd:1b:d8:47:c4:ae:52:81:8c:4a:04:a8:69:aa:1f:c1:e3:
1b:2e:5d:96:06:6a:eb:98:1a:8e:19:57:07:43:0a:4a:3e:69:
f5:f7:c0:c0:61:09:12:33:44:b5:0a:da:45:a7:87:9c:61:05:
17:de:dc:2c:06:6e:7a:40:a1:8f:4e:d6:30:d7:a4:78:c3:18:
87:46:65:c3:d7:4b:8d:46:50:75:2b:b9:a6:4a:e7:53:1a:0d:
38:da:ca:d3:97:63:9d:18:36:81:d7:16:ee:01:b8:d9:4f:e5:
c8:a3:5d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:28 2025 by rpki-client