Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
File: pN15cHEksgZy5pw44Xtma3-ufB0.mft (raw, json)
Hash identifier: r7tmxR35hikJYnrvGOC/MSIcEMsPe8Ukqo818Nq/OBw=
Subject key identifier: 46:30:9E:A9:00:85:14:EC:EE:57:3F:13:95:76:84:3F:50:BB:00:94
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Certificate issuer: /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial: 019778661E012AB3E992CF6D7C569E613744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
Manifest number: 046B
Signing time: Mon 16 Jun 2025 11:00:47 +0000
Manifest this update: Mon 16 Jun 2025 11:00:47 +0000
Manifest next update: Tue 17 Jun 2025 11:00:47 +0000
Files and hashes: 1: chSPcB-8PJwSsmzBV-10wqsxDLw.roa (hash: O+lS3nkRm8C+lzL/Hin40zEYWRx8Gg/FA+5nWyAJNII=)
2: pN15cHEksgZy5pw44Xtma3-ufB0.crl (hash: iS6Ipg1fKyxODOPqA+f8eCIs/s1yXLA0zB4yFCXondU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:1e:01:2a:b3:e9:92:cf:6d:7c:56:9e:61:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Validity
Not Before: Jun 16 11:00:47 2025 GMT
Not After : Jun 17 11:00:47 2025 GMT
Subject: CN=46309ea9008514ecee573f139576843f50bb0094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:84:a6:91:7f:36:87:00:b3:0a:d4:03:8c:b9:
53:4d:70:fa:a4:f2:7b:b6:c4:e7:94:1e:63:08:7f:
72:0f:77:28:2a:72:c2:3d:0b:67:cd:8d:ee:67:78:
02:b9:cb:fe:62:cd:9e:64:52:50:19:92:50:07:9a:
a9:4b:14:23:64:6b:6a:f6:15:ef:b2:41:58:9a:2d:
a3:f4:df:84:ce:ea:9d:fb:75:80:6d:2e:bf:d2:c5:
f0:68:09:22:65:1e:b3:f5:a5:01:38:33:92:19:6b:
b8:3c:1d:20:37:d2:c5:05:54:c3:bf:ca:79:13:2f:
38:77:f0:11:d2:c4:bf:dd:16:e9:a7:67:b0:1b:e4:
c1:12:91:70:96:b8:bb:df:ba:b3:d0:a9:f5:c6:95:
82:f3:ae:1b:46:94:02:9e:ea:07:3b:77:a8:f2:74:
91:81:c7:77:b7:11:45:35:29:01:7e:b2:61:3e:04:
51:19:f9:d0:0f:eb:10:9a:78:cb:ac:a8:aa:ee:3c:
59:e4:7a:1e:97:a3:9a:c6:49:36:16:65:22:37:fb:
63:8c:6b:90:fe:b5:1d:0f:64:f7:ad:e5:2a:75:8f:
58:a3:07:aa:a0:30:a2:a6:50:ef:95:6c:81:86:fa:
83:77:d7:ae:71:a0:a1:1f:98:c6:81:ac:f6:59:d2:
73:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:30:9E:A9:00:85:14:EC:EE:57:3F:13:95:76:84:3F:50:BB:00:94
X509v3 Authority Key Identifier:
keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:39:20:60:5d:37:b5:81:34:ed:9d:de:be:84:b6:04:81:20:
e0:2b:ac:ac:98:6b:50:b4:17:b8:66:06:21:88:b5:b1:76:8f:
42:a5:7d:49:ca:b2:3c:31:6c:84:bb:25:b4:da:6a:23:85:a5:
ba:f2:88:1c:cf:f9:d2:e2:0d:fa:73:f5:7b:21:48:ff:bc:05:
7c:3b:98:2b:6b:26:3f:cc:5c:53:32:e3:d2:4a:29:42:c3:7f:
7a:eb:17:94:5f:87:de:42:b8:15:f1:15:a5:00:0b:c4:8d:72:
69:d8:fa:6e:28:00:a2:3e:55:d1:1d:29:65:ef:bb:9d:7b:af:
6b:37:60:0d:a8:5c:f6:26:21:cf:50:2c:d0:6d:ab:d5:bb:b3:
97:c2:01:3e:91:61:95:ad:87:b1:14:f6:02:4d:e0:f9:a7:68:
94:bc:b3:96:58:29:52:fb:22:49:cc:b9:c7:87:7b:ca:10:52:
91:d5:ff:60:81:07:c9:38:29:ff:ca:52:da:22:67:4c:9d:57:
41:e9:5b:82:56:01:4d:5e:7d:28:46:90:7b:32:c4:54:4b:2d:
47:1c:90:c2:55:e4:04:07:56:7b:f1:38:68:25:dc:a7:3d:03:
30:3c:f5:de:74:41:13:5f:68:9c:d3:f8:6b:62:ef:a3:38:7f:
c6:ef:bf:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:54:10 2025 by rpki-client