Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: nb5d62WPD3GRh5Xh+hqI1EOkPY2dzFs/UFANbGDeim0=
Subject key identifier: 97:E6:35:9C:33:D2:0C:37:2D:4F:BF:3B:D9:01:55:E1:C3:00:B9:2E
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 0198D4E0812056DBC5C2678B42A7399D9D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 15A0
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: 4TnSlHTfEdFTsFq4KgA1oQcWlAc49Y0YA48NDnrVW58=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:81:20:56:db:c5:c2:67:8b:42:a7:39:9d:9d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=97e6359c33d20c372d4fbf3bd90155e1c300b92e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4a:df:54:98:8b:90:ba:ba:c6:5f:20:3f:5c:
8e:53:5b:da:9a:75:6f:c2:53:29:e9:95:a7:d8:f7:
9e:83:21:08:cb:2e:aa:ca:ea:8b:f1:12:eb:d9:78:
67:04:85:3c:91:c3:b4:ba:b8:55:09:03:67:3c:26:
9f:81:38:31:8a:8a:e0:4d:c7:8d:f1:5e:4c:df:26:
bd:9f:38:d4:c8:b7:c9:af:e3:6b:18:e9:31:71:e6:
1e:c5:9f:bb:1d:7c:94:0e:0d:f4:30:03:d5:9a:91:
79:b2:9c:fa:32:91:1b:f6:34:ee:40:73:69:61:94:
ec:c0:ae:78:27:b7:f6:fc:56:6f:82:7d:0d:79:1e:
50:2c:cc:5d:66:64:5b:03:b7:5a:87:79:6b:72:22:
83:03:13:43:5b:fb:4c:64:20:a1:0e:20:b3:ad:86:
cf:30:93:6e:ea:e5:c2:47:e6:f9:a3:e5:65:7d:c4:
b2:1d:79:47:93:5b:2c:cb:12:38:99:d2:32:c9:f9:
f8:af:b8:bd:f5:e6:2f:40:a0:3a:7a:42:95:61:5c:
70:6d:1a:f2:28:9c:ce:49:b7:c1:40:8e:dd:08:7c:
f1:97:78:a0:b2:4c:8b:f7:e7:dd:51:bb:97:5a:92:
03:37:19:ed:7e:58:da:d3:2f:06:dd:86:e1:4f:9c:
05:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:E6:35:9C:33:D2:0C:37:2D:4F:BF:3B:D9:01:55:E1:C3:00:B9:2E
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:91:49:96:da:73:f6:47:7e:11:6d:fa:6f:29:2b:d5:cc:93:
4d:f0:c6:eb:81:5b:f7:d3:25:ce:9f:18:9f:d1:26:83:28:d6:
ff:19:88:e1:52:7a:3c:19:77:c7:56:11:fb:a4:63:60:be:a6:
6d:72:0e:8f:57:e1:83:f8:12:c2:03:46:9b:69:30:fa:e2:2a:
2c:03:64:9e:82:31:3e:4b:3d:7c:72:4f:f4:fa:11:c0:7b:06:
c7:76:c1:81:12:d0:ae:70:59:bc:9b:3b:37:80:85:2a:4c:6f:
96:4e:f6:f8:ac:f5:25:db:69:50:9f:92:8e:d9:d6:d5:a9:7f:
32:7b:d3:ad:64:a1:04:00:60:3c:1f:06:b8:31:ec:ea:b3:dc:
e5:ce:2b:b1:68:85:26:d0:1d:57:cb:a1:10:b1:da:0c:99:a6:
0e:44:d6:54:91:fd:e9:11:e3:cc:63:b4:9b:76:9f:52:81:3c:
79:95:3d:bc:23:c5:b9:3a:eb:10:66:2a:8a:f0:62:78:4a:e9:
08:d5:24:9c:ef:39:b8:05:0c:2b:d6:c3:ce:32:1f:f4:e0:f7:
be:cc:0a:0e:6a:c7:45:79:99:cc:c8:18:28:e8:d8:f0:6f:e0:
41:a4:cd:5b:c2:fc:c1:69:fc:a4:f6:46:02:09:f9:35:c0:21:
5b:cc:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:47 2025 by rpki-client