Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
File: cDE3TrlnkQnpGjjiixe_Jgq506s.mft (raw, json)
Hash identifier: eKsG5lz151jUXfU/OEnCOralqqTMV42oMUQpTHyjpfU=
Subject key identifier: 00:45:8E:A4:9E:28:42:D2:97:A8:D7:AF:C3:83:90:64:38:BE:B2:DE
Authority key identifier: 70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
Certificate issuer: /CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Certificate serial: 019A13BB1D15B71A2D836710B5A30234D829
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
Manifest number: 046C
Signing time: Fri 24 Oct 2025 01:00:20 +0000
Manifest this update: Fri 24 Oct 2025 01:00:20 +0000
Manifest next update: Sat 25 Oct 2025 01:00:20 +0000
Files and hashes: 1: KNBjCM7O7CtpyAC7oAyJVQiXWvw.roa (hash: oazgGiB/ZNKrLVmb4ghoQo5JRdAHa8vVGTxxOx4ALiA=)
2: Q3DzC8Xezd_wUJe_qmHOdRY16z8.roa (hash: UbPlIZy2nFY/zJS4B8sCeti8RZE/Rxf0ELKnlfBMfvg=)
3: cDE3TrlnkQnpGjjiixe_Jgq506s.crl (hash: U+BrjAiA7OOy3SZLwofP665HDvXE8WJ0ieV722+BUiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:bb:1d:15:b7:1a:2d:83:67:10:b5:a3:02:34:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7031374eb9679109e91a38e28b17bf260ab9d3ab
Validity
Not Before: Oct 24 01:00:20 2025 GMT
Not After : Oct 25 01:00:20 2025 GMT
Subject: CN=00458ea49e2842d297a8d7afc383906438beb2de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:bc:02:5c:6a:26:e3:2f:46:46:f6:4d:bb:f9:
a1:59:0a:70:50:c6:82:34:93:f9:08:a1:c4:e5:be:
d7:c9:ac:84:d2:7f:30:b8:77:71:a3:bc:4a:dd:07:
be:3d:4a:62:21:c4:ae:1b:7c:9f:79:40:6e:48:7e:
59:ac:5f:7a:f8:3b:51:3b:10:d1:2b:3b:91:52:03:
40:8f:dc:12:36:a9:e1:c8:b4:b7:34:4d:da:8d:9b:
75:51:76:ac:af:76:37:ae:c2:55:bc:d2:59:e1:c8:
63:9d:9d:d7:29:03:44:f3:06:c6:39:d3:c0:ca:8b:
09:bd:5e:2b:c3:31:f0:be:07:ca:ac:22:b9:11:62:
a6:ed:57:ba:de:66:6e:63:7a:06:c2:6e:89:96:e1:
2b:b4:e5:ba:1c:81:06:a9:ad:fe:42:b9:15:83:81:
60:2b:d1:0c:c4:a3:4b:22:03:f6:18:d9:46:12:9a:
cb:f8:f7:06:46:ad:88:7a:5b:5b:d5:0f:cd:6b:b9:
5c:7d:e8:03:c4:82:2f:f1:b8:91:9d:65:16:e8:01:
ce:1f:13:ac:84:8b:fd:0a:0d:51:12:aa:a0:87:93:
01:a6:47:24:58:c5:0c:83:64:8b:95:67:4d:76:55:
5a:4a:42:e8:55:6e:21:2e:65:68:99:18:88:8a:17:
b0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:8E:A4:9E:28:42:D2:97:A8:D7:AF:C3:83:90:64:38:BE:B2:DE
X509v3 Authority Key Identifier:
keyid:70:31:37:4E:B9:67:91:09:E9:1A:38:E2:8B:17:BF:26:0A:B9:D3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cDE3TrlnkQnpGjjiixe_Jgq506s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d8b73b-5013-43cd-ba2b-2c2180714e71/1/cDE3TrlnkQnpGjjiixe_Jgq506s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:94:b6:af:1e:d3:9d:7a:28:d2:d7:c5:3a:40:78:f4:4d:72:
e5:3b:e7:2d:ce:7b:88:cf:a6:0f:ac:d3:aa:76:8b:ae:39:22:
64:9d:93:e1:36:80:03:8d:bc:95:a2:de:ef:c4:b5:3e:19:25:
a6:58:b4:96:7f:a7:81:31:8d:46:5d:a2:f5:ac:fe:7f:63:c1:
d7:25:00:e6:82:93:e3:b4:03:8e:74:7a:1a:b2:e5:8e:90:51:
f9:cd:ba:0d:67:3a:65:31:76:27:cc:16:3a:fe:22:c8:fb:09:
1e:e0:fe:c2:44:bd:ac:a4:61:b7:31:15:8b:0e:4c:21:5d:ab:
86:fd:30:13:42:af:8a:c2:a4:cc:9b:ec:4e:cb:3d:4e:51:91:
30:bc:c0:92:af:cb:ac:b4:72:ae:66:da:65:a2:e7:b1:90:ea:
bd:84:05:af:03:66:da:7f:63:1b:f9:78:74:41:b7:ed:00:df:
34:32:f5:64:c3:dd:b5:51:df:c1:ec:41:ec:38:af:d1:54:d2:
31:b4:16:49:55:da:59:11:9f:a0:96:ef:35:8d:63:2a:0a:af:
57:41:ed:00:17:87:bc:50:02:a7:4c:47:b6:5c:bb:7d:ee:5e:
92:72:3e:2a:21:72:a5:51:b2:19:cd:5e:72:10:11:d5:3b:03:
24:95:be:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:15:06 2025 by rpki-client