Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: SeNc+OWZe1GOF23D0gPwy8zsiqrlQLXXxECm2aQKatg=
Subject key identifier: A0:CD:04:CE:80:55:41:C5:F5:26:D5:EB:97:ED:57:97:01:20:5A:BC
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 019769CE825E4CBC6F42E54BC11212339DA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 14E4
Signing time: Fri 13 Jun 2025 15:00:30 +0000
Manifest this update: Fri 13 Jun 2025 15:00:30 +0000
Manifest next update: Sat 14 Jun 2025 15:00:30 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: VED4tSmSTxBAyPs5OZjal250gED1jEYossGsbFQmBOc=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:82:5e:4c:bc:6f:42:e5:4b:c1:12:12:33:9d:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Jun 13 15:00:30 2025 GMT
Not After : Jun 14 15:00:30 2025 GMT
Subject: CN=a0cd04ce805541c5f526d5eb97ed579701205abc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7b:73:23:73:c5:5e:95:5a:ca:c1:a5:f6:26:
c0:00:ed:48:ba:b2:e4:47:11:4f:67:91:9f:0e:52:
5d:37:9f:3c:1e:4f:57:53:b9:61:ca:44:e3:11:71:
4f:18:19:8e:03:7d:d3:2a:fa:84:04:1c:02:62:d9:
5d:e8:0c:c9:7a:22:72:ac:1d:bc:c3:eb:a4:15:46:
30:41:da:fc:77:e1:86:dd:94:e6:67:3a:5b:dd:77:
74:df:62:84:5b:80:6e:ec:3b:48:74:4f:43:b9:97:
f3:0a:aa:0f:9b:5e:9a:d8:d2:52:02:2c:7c:f5:5e:
a3:89:09:66:72:b0:5b:13:fb:97:a5:57:e8:a9:f6:
45:45:15:55:87:ad:2e:08:31:2a:70:6a:8a:24:63:
3c:c5:67:cc:ee:51:78:f9:10:6e:8c:aa:02:89:0a:
9e:44:d5:23:ba:87:97:e7:04:a3:d7:12:c9:d8:d3:
a4:27:1b:11:0f:67:33:2c:c7:a1:a7:a0:20:5e:30:
53:4f:37:19:5d:a8:fe:11:65:ef:61:38:f6:bb:75:
5a:a6:03:12:6b:13:8c:1e:a7:b3:c8:86:22:82:4a:
2b:fe:a5:6d:a4:cf:d9:0a:25:cd:8a:b6:a4:4c:86:
1b:21:4b:00:ed:d8:9a:8a:50:78:6f:ba:15:34:5f:
e8:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:CD:04:CE:80:55:41:C5:F5:26:D5:EB:97:ED:57:97:01:20:5A:BC
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:49:fa:bd:f2:a1:02:d2:ae:ba:df:93:06:08:ba:99:d4:cb:
7c:a5:e1:a4:9d:76:13:9b:52:c8:93:ea:b9:03:c0:c2:fd:c2:
3b:3d:47:e8:cf:ae:98:ac:80:f9:3c:46:23:f0:a9:24:6d:9d:
6b:b9:e5:a2:3a:08:98:6a:e1:6c:58:74:fe:6d:85:c6:b6:6c:
1e:f3:de:0c:be:ab:54:7c:b8:10:17:ad:f0:32:53:eb:5e:a8:
cd:72:b1:de:a8:89:3f:eb:12:75:4f:bf:7b:48:ea:c2:d7:0e:
2e:04:9a:9e:e6:f5:86:32:8a:c6:b2:29:bc:a3:b1:04:69:61:
78:dd:c8:a8:76:71:82:8f:57:04:3f:4d:f9:42:1f:ee:3a:71:
ef:c9:d7:b3:fa:be:0d:f4:53:91:dd:e3:15:05:84:6e:cb:f1:
73:bd:b5:30:05:a1:6d:58:92:4c:55:b3:9e:15:ef:93:9d:ab:
05:67:35:70:72:41:f9:e9:1b:87:5e:86:b1:06:f6:32:73:72:
94:f0:80:a8:5c:21:92:20:65:aa:e2:4d:15:43:fa:f0:7b:c8:
c5:34:87:81:86:f5:a4:2b:41:62:8e:5e:6f:38:d3:e4:18:dd:
7a:ca:ce:35:33:60:a9:95:a2:7d:9d:8a:a3:d0:c3:c3:eb:88:
64:f0:d8:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:58:19 2025 by rpki-client