
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: xRbaScmkCzp4480gHnmgSIuMDIkhtUsGDI3kHT86e2c=
Subject key identifier: 22:42:DB:AF:2F:9B:EC:E0:72:69:34:0F:5E:96:64:A1:9A:B7:A3:3A
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 0197C64AD5D0B99E175B298D2C12C4C78963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1550
Signing time: Tue 01 Jul 2025 14:01:22 +0000
Manifest this update: Tue 01 Jul 2025 14:01:22 +0000
Manifest next update: Wed 02 Jul 2025 14:01:22 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: x7ZWMgLtw2YAK3wUZS8CMlCMkLaeSZ6Z4hcq9WUghjc=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:d5:d0:b9:9e:17:5b:29:8d:2c:12:c4:c7:89:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Jul 1 14:01:22 2025 GMT
Not After : Jul 2 14:01:22 2025 GMT
Subject: CN=2242dbaf2f9bece07269340f5e9664a19ab7a33a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c8:e1:0f:f7:d8:6b:bf:1c:af:e6:b8:ac:32:
85:1d:b6:f5:39:a6:7b:35:df:cb:b5:ad:29:e7:f0:
5e:bd:59:63:a3:5b:fc:f9:0e:78:8c:44:ff:40:83:
6a:57:75:c8:04:4b:7a:52:be:39:43:11:36:9f:6c:
d3:ed:f6:16:b9:d7:25:60:44:cf:b6:3d:8c:dc:5a:
fb:91:e5:8b:02:a5:1b:24:ba:b5:6f:d6:14:02:ba:
80:85:00:79:12:f5:b1:3b:6f:f2:f4:b2:fd:26:7f:
04:48:f3:41:24:4f:8e:9a:37:29:04:aa:bf:de:3e:
8a:4d:ca:3e:14:30:3a:f2:9a:a4:4c:b6:f8:8b:50:
01:57:c9:e6:90:f7:14:93:c4:9e:47:1d:f2:0d:23:
88:63:12:48:51:be:09:48:da:88:3f:9a:ca:e6:99:
3a:dd:a2:c3:c0:6f:26:3a:97:34:b1:61:85:18:e9:
53:2b:6d:35:e6:eb:7f:eb:c7:04:dd:f8:61:70:9d:
02:bb:60:98:48:e8:a6:28:e7:89:09:b8:0f:3e:4f:
9c:91:9a:8c:80:ed:a2:78:00:f7:ea:c0:f0:34:c8:
9a:67:f0:c0:97:ca:b9:19:33:80:55:18:82:c5:55:
68:c2:22:40:76:f6:09:33:89:3a:02:60:b7:43:96:
9e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:42:DB:AF:2F:9B:EC:E0:72:69:34:0F:5E:96:64:A1:9A:B7:A3:3A
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:3a:d9:c6:08:08:f2:1c:de:e1:e6:cf:59:e0:06:50:ac:f2:
b5:c8:50:0d:e7:10:bc:88:9a:e6:9a:2c:6a:c2:65:5d:fc:a0:
b4:c9:ce:50:9d:b9:99:1c:10:43:ca:f4:55:76:f9:75:84:51:
1b:86:b4:35:bb:51:9c:94:01:76:16:17:f7:dc:aa:96:52:3c:
f2:c9:ad:7e:65:80:eb:c0:aa:06:6b:87:6c:0f:c5:23:03:f9:
f5:fd:5d:60:fb:54:51:8b:6c:58:6e:29:46:d7:6d:30:c1:f9:
8b:36:f2:2f:4e:65:87:bb:22:81:3d:9d:e0:75:67:96:45:08:
50:a0:db:a0:76:ef:ad:40:20:e8:f2:a8:cc:76:8e:24:4f:6d:
70:f3:62:72:b6:10:0b:2a:8a:30:9b:5a:87:fc:cb:1b:4b:c9:
1a:25:c1:62:5e:25:a4:81:e2:f5:b5:af:c4:c5:44:dd:57:26:
01:a3:a0:29:a3:87:16:ad:dd:26:ae:fa:34:52:96:1d:78:d1:
47:a3:a9:8e:12:9f:aa:2b:91:2e:9c:bd:c8:db:d9:7d:44:d8:
23:02:36:cc:24:2b:22:1e:23:1f:5b:c6:00:5c:60:3c:ff:aa:
71:75:7f:cd:90:cb:70:7a:e4:66:be:22:b8:4f:ca:10:1b:60:
e4:66:7e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 15:18:13 2025 by rpki-client