Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: IWgurLyJAVmckdcP9WDYK55NEQp/R5peQNMh5BcLtbU=
Subject key identifier: A7:66:4D:53:EC:71:50:5B:41:94:B0:42:45:BE:FF:64:AE:AE:23:32
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 0196767ABD1CB738E4646BB48D3D80C3EAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 1466
Signing time: Sun 27 Apr 2025 09:01:17 +0000
Manifest this update: Sun 27 Apr 2025 09:01:17 +0000
Manifest next update: Mon 28 Apr 2025 09:01:17 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: tQQXIHW2Ki1qzbfZ7UPW0ZOtcI/O75+sKz+sq412hbM=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 07:29:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:7a:bd:1c:b7:38:e4:64:6b:b4:8d:3d:80:c3:ea:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Apr 27 09:01:17 2025 GMT
Not After : Apr 28 09:01:17 2025 GMT
Subject: CN=a7664d53ec71505b4194b04245beff64aeae2332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:2b:0a:bb:e2:b5:3e:e8:c5:dd:66:c9:90:
85:26:44:15:df:02:40:fc:9e:57:b8:4b:c1:85:18:
18:ac:48:00:8b:b8:5a:8e:a1:f6:97:ec:37:7e:af:
b3:63:2c:d5:50:fb:9c:21:47:60:a4:8d:11:20:8b:
fd:1c:cc:e4:60:5b:6d:6c:5b:ed:34:f3:7b:cb:c1:
81:58:48:be:be:3c:ee:7e:17:52:3b:09:7e:86:d9:
51:19:e2:14:dc:7b:4e:95:28:61:43:d4:83:27:e0:
ab:3e:36:27:37:b9:13:da:38:90:01:72:a6:cc:0d:
59:59:ec:65:18:38:2e:18:37:9d:6e:fe:66:39:3c:
32:55:fa:20:1e:14:ec:d7:4b:79:01:15:54:7c:94:
96:7a:a3:49:65:cf:e7:4b:db:51:b3:8e:7f:94:c7:
7a:9f:da:b8:39:f7:d0:7d:e1:ae:97:29:3a:4a:5e:
97:a8:f7:c7:7b:a7:56:be:40:92:39:36:32:a3:9f:
56:30:35:5a:1d:08:e4:e1:50:48:35:57:69:92:22:
76:2a:1b:35:25:db:20:dc:de:d2:b7:1f:40:eb:45:
f8:be:cd:fc:40:6d:5b:01:e8:02:75:72:64:b3:2d:
85:c8:f4:57:22:6f:38:84:37:ff:aa:e9:41:0b:b5:
b7:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:4D:53:EC:71:50:5B:41:94:B0:42:45:BE:FF:64:AE:AE:23:32
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:d7:0f:69:12:76:be:b6:57:66:eb:e5:12:ed:6b:1b:7c:
81:64:a5:03:05:fc:5c:92:d9:29:a2:2d:54:0f:fb:85:ef:34:
dc:f2:6e:df:76:c0:8c:4f:cc:b2:65:8e:a5:90:ff:1a:bc:18:
f9:d4:0c:1d:8f:af:2d:39:81:e3:5d:c0:fe:a3:bb:fd:86:88:
4d:44:4b:dd:57:4d:ce:28:04:2b:1e:73:fa:bd:fb:a0:91:22:
e3:ba:41:b4:9f:66:9c:fc:86:35:eb:14:e5:6b:ba:10:b3:a2:
65:70:08:30:73:6c:0c:34:98:c9:e1:08:a8:6e:e4:1c:64:b8:
08:8c:ec:ed:43:42:53:6b:68:cf:b5:3e:1d:76:e2:6b:51:f1:
b8:e2:1a:81:e1:4a:83:18:07:41:a1:99:0a:4d:45:1b:bf:8e:
d2:b5:cf:ca:48:f7:f4:38:c4:d2:cc:9a:a5:af:19:0f:75:35:
4a:85:20:c3:5a:30:00:f7:e9:3b:3b:61:fe:b0:fc:dd:5f:2a:
45:d7:a1:ca:fe:53:81:ab:97:8e:df:da:bb:db:b8:93:48:03:
23:76:dd:b2:4b:53:27:43:fb:dc:0b:97:33:cc:ba:39:78:e5:
81:bd:d7:6f:83:44:98:c8:f1:39:14:f5:53:46:90:ed:e8:1a:
84:f6:b3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:11:27 2025 by rpki-client