Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: xm7x20UpqdXGc3ntZIsTcEw4GwQ5aPyORhB4Td/KTak=
Subject key identifier: BA:AA:F6:30:E9:21:9C:31:FD:59:73:4C:62:10:E5:66:E2:41:C1:0C
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 019874507D6CDCF891E7F0EA4C3E15DAADF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 156E
Signing time: Mon 04 Aug 2025 09:01:28 +0000
Manifest this update: Mon 04 Aug 2025 09:01:28 +0000
Manifest next update: Tue 05 Aug 2025 09:01:28 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: HeL+KWcAal3usl9EOvjiFbbdWQRNSt/CnpaXuEgosTw=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:7d:6c:dc:f8:91:e7:f0:ea:4c:3e:15:da:ad:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Aug 4 09:01:28 2025 GMT
Not After : Aug 5 09:01:28 2025 GMT
Subject: CN=baaaf630e9219c31fd59734c6210e566e241c10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:43:73:04:c3:30:55:00:f5:6a:42:22:d8:fd:
9f:05:05:68:3f:b6:cf:f4:6e:1d:e4:32:d4:83:aa:
c8:89:cc:c0:d5:8f:8d:f1:6e:8f:4e:ab:6c:b6:d4:
ea:47:8a:f3:97:b3:7b:23:0a:aa:2e:20:15:b8:49:
66:e0:00:28:c9:73:c9:7b:a4:3b:b1:88:f0:42:b8:
51:21:25:c4:24:18:35:96:77:36:7f:27:65:e6:0d:
35:6d:82:84:d6:f2:86:37:0a:87:c6:94:21:1c:3e:
0f:d8:07:08:bb:e7:28:85:6b:d4:21:d5:36:1f:af:
e4:e8:cb:40:89:5d:48:4f:3d:d9:25:65:ae:3e:b7:
49:0b:8c:31:47:a4:9e:2b:4b:cb:95:9e:ca:fa:56:
15:2a:5d:e7:30:14:45:e7:e3:00:da:75:16:e8:e1:
33:11:a8:25:d6:61:c1:af:b5:4f:10:0e:e0:8a:50:
7b:93:6c:1b:86:01:04:03:28:40:21:ec:00:1e:21:
6b:db:0e:89:ad:66:44:e9:d1:c0:95:e2:08:56:fc:
d5:bd:5c:02:d3:be:7d:34:87:a1:7e:52:69:d7:8c:
90:59:c5:4b:c1:f4:6d:24:2a:17:2f:ed:7c:ee:57:
e9:e3:64:3f:ae:d1:95:94:4f:b5:da:b8:60:c2:ca:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:AA:F6:30:E9:21:9C:31:FD:59:73:4C:62:10:E5:66:E2:41:C1:0C
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:27:34:73:b1:7c:b0:8c:3b:28:48:33:cf:c0:1a:33:13:a3:
6e:0d:7a:34:7d:82:62:6b:68:42:45:ce:40:81:24:41:74:ee:
73:82:be:e5:be:9a:f3:a3:2d:af:96:fc:b0:fc:8b:f7:dd:dd:
e9:61:da:03:93:ba:d7:c2:e6:0c:8d:76:81:df:0b:b8:01:8a:
7d:5e:50:2a:e0:fa:94:6c:00:75:19:03:13:ad:aa:ea:58:79:
c5:ff:3e:41:fb:a7:b0:92:18:d6:9f:96:07:8c:bd:0c:88:45:
77:bd:60:4d:cd:b5:39:33:85:bb:e9:3c:3c:ba:96:e5:fe:65:
f2:25:9c:2b:6c:e1:89:c8:54:eb:44:6d:54:19:ea:6a:50:6a:
56:8c:bb:5d:65:fb:b1:7d:b0:eb:33:94:80:3c:f1:7f:fe:a7:
16:c1:59:52:46:f0:a9:74:c5:58:17:d6:2a:8a:dc:76:53:a7:
a9:3a:60:bb:27:83:2c:29:87:32:2c:fd:ad:91:36:e7:f9:8e:
f9:fd:8b:3a:cf:fb:cd:cf:85:4b:b8:fd:c5:36:04:55:99:7c:
0c:16:d4:2b:4a:40:74:a3:08:fc:47:23:f4:8d:89:80:16:aa:
bc:57:53:e0:75:8b:21:96:36:11:90:84:2f:41:24:98:e9:28:
a7:e0:96:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:02:14 2025 by rpki-client