Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
File: RjadxdpeTnDHNbI1cE2evFglk0k.mft (raw, json)
Hash identifier: LTdNjc0an+CjDr0sdzWiwtFDrR2NyBzaqaKkZddPZIQ=
Subject key identifier: FE:76:79:4C:9E:88:47:16:B0:DD:F5:69:5C:8E:ED:E9:17:9F:A5:17
Authority key identifier: 46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
Certificate issuer: /CN=46369dc5da5e4e70c735b235704d9ebc58259349
Certificate serial: 019A05FFEEBAB7B7E4E78E3CD1CA72A4A1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
Manifest number: 163E
Signing time: Tue 21 Oct 2025 09:00:50 +0000
Manifest this update: Tue 21 Oct 2025 09:00:50 +0000
Manifest next update: Wed 22 Oct 2025 09:00:50 +0000
Files and hashes: 1: 3yPa4BQmuQtptzt1inGpjbsFSZE.roa (hash: HLxtGU596QkfMOxVWmb+kQTalFdGbEcgND/sUsANLeo=)
2: RjadxdpeTnDHNbI1cE2evFglk0k.crl (hash: bXhbkhO2isDEqqDnuSs3BHCXoYJvxNLEhFcvW4tAICs=)
3: ixKyOCrozUgfgF7gZjbgd74b7D8.roa (hash: 3ZudSa89cqvRuz+AlsHNzxSkAK3mpz40E5GR+nCuQeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:05:ff:ee:ba:b7:b7:e4:e7:8e:3c:d1:ca:72:a4:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46369dc5da5e4e70c735b235704d9ebc58259349
Validity
Not Before: Oct 21 09:00:50 2025 GMT
Not After : Oct 22 09:00:50 2025 GMT
Subject: CN=fe76794c9e884716b0ddf5695c8eede9179fa517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:36:3f:90:c4:89:e5:16:0c:16:22:a8:52:d5:
36:93:08:10:61:bb:86:0b:40:61:b0:46:3d:27:66:
8d:5d:26:a1:4f:9a:3a:5a:ec:44:94:08:15:ed:78:
eb:3f:ca:8e:0f:2c:e6:47:c3:1a:7e:d8:1a:ed:28:
34:ca:ef:f5:f4:78:36:e2:75:45:59:72:4f:9f:1b:
1a:a4:e1:47:02:a5:d4:f0:4c:cd:43:72:ad:f2:f1:
53:30:2d:6f:26:06:f5:ce:a3:f5:4e:07:47:38:0f:
9e:a6:4a:67:d7:6c:9c:ce:e2:6a:c2:8c:12:77:d0:
2c:d1:67:26:db:f8:87:12:7c:14:70:6a:1e:84:c9:
d2:f7:6d:80:7e:d3:1b:cd:77:bb:ea:e5:fc:6c:96:
14:86:af:22:5e:15:fd:50:1f:17:d9:90:45:54:75:
cd:a3:9c:c3:53:05:b2:86:f1:85:26:30:2a:9e:d3:
28:0e:38:de:ac:b2:16:44:6f:b1:f7:d6:f8:83:fe:
9a:cd:8d:89:3b:6e:51:f2:fa:c9:cf:45:df:d4:6d:
2d:d1:9f:a3:f0:cb:aa:3e:3a:34:ad:cc:c8:33:42:
53:85:53:9c:39:11:e5:65:e1:07:cd:cd:e2:19:91:
e8:63:29:43:46:d6:71:31:82:0d:42:65:51:c9:bf:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:76:79:4C:9E:88:47:16:B0:DD:F5:69:5C:8E:ED:E9:17:9F:A5:17
X509v3 Authority Key Identifier:
keyid:46:36:9D:C5:DA:5E:4E:70:C7:35:B2:35:70:4D:9E:BC:58:25:93:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjadxdpeTnDHNbI1cE2evFglk0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fe69b2-0abb-4e55-8b38-a91634d2a808/1/RjadxdpeTnDHNbI1cE2evFglk0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:64:2f:71:58:68:57:71:fc:72:46:44:d2:f1:7e:ee:23:a4:
ab:ea:d2:5f:30:81:1d:e5:6e:b5:c1:4b:53:d9:94:00:56:19:
79:a6:f6:8b:31:9e:12:80:e5:e0:49:8d:b9:4f:6f:64:5e:6d:
31:67:27:b3:09:7c:b0:72:6c:a9:2d:62:bd:2c:c3:54:df:98:
2f:79:52:ba:0b:dc:dd:6f:5f:f1:0b:b8:fc:dd:27:08:6d:7b:
a4:10:ac:68:3a:67:8c:3a:e7:53:c3:9b:d1:0e:81:2c:12:f0:
4e:5c:c2:f0:df:14:d7:8b:0b:8c:19:c6:1c:3a:b7:f7:a0:f8:
fc:3c:4f:40:d3:24:9c:88:96:bb:7d:bf:d2:1c:02:62:ec:2b:
1b:ec:53:99:b1:4a:ca:3c:0e:c5:d5:ae:5d:0d:1c:80:34:25:
b8:ad:44:bf:b2:94:a2:4b:30:b9:6d:95:b3:e7:a1:0f:e5:51:
b1:b0:7f:07:cb:a8:08:11:15:17:43:7f:72:f1:98:fc:61:f6:
a1:4b:2b:ad:b6:78:b8:8f:a9:40:3f:b6:e8:0e:88:e0:70:7f:
aa:b9:82:50:1f:1e:71:2f:4b:ed:56:56:6b:ae:bc:9f:29:11:
7c:9c:51:88:9b:71:52:2c:96:6a:1f:c7:d0:bd:a1:47:73:7a:
1e:18:13:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 14:07:31 2025 by rpki-client