Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: LZEKlYsKOp+3CKUL+/R6ZnFkD1zKHdkMa866PkJ//S4=
Subject key identifier: B0:1B:49:8E:64:32:3D:19:2B:9D:D7:84:E1:4A:0C:EC:11:95:2B:E3
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 0199FC21BC1E3225B7EDE0C6D6B1B9CBF568
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1675
Signing time: Sun 19 Oct 2025 11:01:33 +0000
Manifest this update: Sun 19 Oct 2025 11:01:33 +0000
Manifest next update: Mon 20 Oct 2025 11:01:33 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: VvKjM3jlyn+NmqFBZSt2HOTf210eOPPBmdpZDht9G+Y=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:bc:1e:32:25:b7:ed:e0:c6:d6:b1:b9:cb:f5:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Oct 19 11:01:33 2025 GMT
Not After : Oct 20 11:01:33 2025 GMT
Subject: CN=b01b498e64323d192b9dd784e14a0cec11952be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:77:f9:38:f3:ce:1b:b7:45:09:5f:eb:bd:65:
b2:e9:86:e8:ca:3b:6f:fe:4b:e8:b4:f6:c9:ca:2e:
52:e4:f1:82:6b:cf:fb:80:54:ad:1d:4d:b9:48:ae:
fe:6e:30:db:f4:4c:a8:e3:1b:a1:92:01:f2:cc:a9:
33:b7:05:28:3a:1d:46:b2:a1:b4:49:db:3c:46:c3:
e5:e1:12:b6:14:26:fc:16:13:f5:8d:05:26:1e:53:
a7:2d:b5:59:2b:c6:0e:97:e6:c2:92:21:82:b0:b5:
1a:98:f3:f0:0f:18:d9:ae:9f:50:b3:81:a7:53:03:
9c:0a:fc:2d:fa:6e:39:c0:e3:2f:24:1b:09:b5:6d:
db:41:64:0d:fe:4c:32:30:58:1c:78:0b:84:5c:0b:
43:29:41:f6:45:9a:4e:1e:15:50:fc:e3:b9:2c:6d:
60:7d:6b:04:54:f8:e1:28:d1:d0:76:5c:51:55:ae:
87:60:52:65:88:58:05:ed:93:3a:a5:9d:51:db:73:
32:d4:72:7c:2e:f4:0d:55:f2:9f:24:e7:93:99:e4:
91:d7:0b:5a:ed:b3:0d:5c:01:78:88:18:8c:b3:d0:
6f:1b:39:06:b2:5c:a4:77:39:52:d1:21:47:5b:24:
9d:45:6c:a2:d6:24:bf:dd:6f:ad:00:9e:cb:9a:d6:
ba:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1B:49:8E:64:32:3D:19:2B:9D:D7:84:E1:4A:0C:EC:11:95:2B:E3
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6c:83:a3:60:cf:9d:b5:fb:45:24:23:ac:fc:4f:54:86:1c:
11:32:72:86:e7:ad:73:b2:e9:e6:2a:a2:aa:1b:96:eb:f5:b8:
b2:7c:f5:13:0a:ba:08:c0:6f:91:0d:88:8b:e3:4c:1b:31:47:
88:fd:a8:f2:8d:34:61:99:2b:12:ef:25:3d:db:df:8f:19:34:
ea:9b:65:ea:36:02:fe:cc:bb:76:e5:32:82:f5:4e:1d:46:b8:
8b:1a:19:59:b7:fa:43:2e:31:5b:bc:20:e9:53:6a:9c:4c:0b:
80:aa:73:06:d0:48:57:8d:e0:5f:cf:99:c5:b2:b6:6a:36:45:
55:d5:45:e7:ff:64:eb:22:75:af:c0:77:4a:05:60:2b:e6:f5:
5c:70:31:75:2a:03:5c:92:86:d0:16:5d:ce:1b:6c:31:8a:f4:
3d:3e:fc:d5:0e:72:8e:c6:3d:60:24:a5:97:f9:92:56:ab:1f:
74:eb:05:25:ed:71:08:97:92:e1:47:74:39:a6:c5:3e:8a:68:
57:7c:98:25:5d:4f:8b:1f:59:eb:3f:d5:63:d2:41:d3:79:bc:
bf:63:aa:d8:f6:95:d0:af:60:c2:12:c1:3e:49:6c:7b:10:7f:
d7:57:56:6b:3c:70:6e:d6:5e:00:dd:91:8a:8c:4b:35:e0:31:
7c:64:b8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:15 2025 by rpki-client