Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: kJytWOomqNqx1LqzyJWrqO/zxFXhqkbm0W1p8QvH+ec=
Subject key identifier: E4:ED:0A:F8:69:CA:E1:28:AB:EA:84:66:8C:76:3F:1A:99:D0:93:57
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 019A0035C78C54FFE19163075943EAED4921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 163B
Signing time: Mon 20 Oct 2025 06:01:55 +0000
Manifest this update: Mon 20 Oct 2025 06:01:55 +0000
Manifest next update: Tue 21 Oct 2025 06:01:55 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: kZl3TtvNvw2CoE86pk4fVlCUMmC8cziv37ySWLRFqSk=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 06:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:35:c7:8c:54:ff:e1:91:63:07:59:43:ea:ed:49:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Oct 20 06:01:55 2025 GMT
Not After : Oct 21 06:01:55 2025 GMT
Subject: CN=e4ed0af869cae128abea84668c763f1a99d09357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a9:cf:d4:c4:65:eb:74:51:75:e5:05:fb:87:
0f:09:e2:90:f2:a4:4a:f4:82:01:30:61:ff:87:92:
ff:2c:08:04:53:67:20:58:17:60:58:02:48:ac:e2:
f7:6b:fa:0c:ed:03:fa:a7:82:aa:8a:c1:12:90:3a:
a8:ee:d7:5a:35:e3:f8:6f:82:2d:1b:6f:47:8b:38:
60:c4:b6:20:ff:84:36:63:a1:fd:38:7d:36:32:e5:
72:0f:f9:70:b6:67:45:9a:12:bb:52:d6:1e:c8:f1:
dc:0f:51:e1:bb:3c:37:75:43:24:db:e0:a6:b9:e8:
47:c3:c6:95:db:17:19:98:54:1c:52:d2:dd:26:18:
6b:de:60:85:a5:48:eb:3e:be:47:50:27:5b:7d:eb:
b8:53:71:69:c3:28:03:f4:58:99:77:87:27:a9:d3:
48:83:e6:78:32:a5:2f:2f:15:29:d9:d2:5d:a7:0a:
6b:7c:49:8a:57:1e:19:00:51:2c:de:6b:65:37:72:
d1:b0:7a:e0:ee:0c:61:ec:49:fb:c9:fc:0c:4d:74:
6e:00:eb:e6:1b:df:38:f0:6d:f8:04:4c:d0:b0:91:
f7:f1:2f:82:06:75:fc:96:95:ad:8c:e3:9a:9c:d5:
2a:dd:28:94:f7:9b:87:db:d6:52:e9:19:fc:11:5a:
ef:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:ED:0A:F8:69:CA:E1:28:AB:EA:84:66:8C:76:3F:1A:99:D0:93:57
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:c2:c4:02:5e:f8:da:9d:5c:e0:ac:02:f2:e0:8e:af:e9:75:
5f:cf:42:a3:46:5d:e8:be:3e:de:e4:ec:55:33:de:44:bf:9a:
e0:13:4b:6c:21:2c:8a:7f:c8:67:da:31:ec:82:60:c2:5f:3e:
1e:a7:6f:c0:e7:3a:f4:a8:82:f8:d1:18:d1:0f:d7:dc:74:e7:
02:94:f9:1d:c2:13:03:c3:15:26:1a:5b:78:0c:6b:49:93:aa:
40:65:55:ec:ff:d3:f1:70:57:e8:0b:50:da:e9:e6:a1:81:b5:
4f:8b:67:20:19:0f:1d:31:05:0e:3a:50:93:31:0c:a0:da:2b:
5f:1d:68:97:84:d4:a2:42:c6:06:6e:42:42:7f:78:39:6f:fb:
78:01:54:7a:0a:04:8f:31:90:e1:20:7e:85:bf:d5:ff:79:fd:
18:32:33:77:55:15:50:59:c9:47:d2:ec:dd:9a:14:2d:7f:8f:
2d:d2:a9:82:68:9f:cc:9c:9f:46:6c:9b:e0:ca:30:33:b3:b9:
3b:af:70:ec:df:88:4a:5a:f2:ad:28:9f:8e:0f:90:19:48:b6:
e6:ce:f9:00:22:da:d5:51:f5:24:2f:45:b0:62:cb:90:a5:42:
10:a0:04:a1:b4:25:e4:4e:b2:af:b8:95:9e:b2:92:c9:69:36:
77:60:06:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:14:43 2025 by rpki-client