Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: 03YJG/7wxlle+pgJKD0FyginLChho2AjRH4AphA6JKs=
Subject key identifier: 22:8D:FC:96:0A:C2:A0:34:07:E3:24:99:B4:4D:51:B1:BE:7B:62:72
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 0198D516286AE40B450EDB6FD65174BED39B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 0735
Signing time: Sat 23 Aug 2025 04:00:55 +0000
Manifest this update: Sat 23 Aug 2025 04:00:55 +0000
Manifest next update: Sun 24 Aug 2025 04:00:55 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: NIdiIYdrshNdGmX734S9T3/MPWFAOab9aewZ0NxncjU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:28:6a:e4:0b:45:0e:db:6f:d6:51:74:be:d3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Aug 23 04:00:55 2025 GMT
Not After : Aug 24 04:00:55 2025 GMT
Subject: CN=228dfc960ac2a03407e32499b44d51b1be7b6272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:a4:77:94:af:76:ff:9e:ca:99:21:c6:49:
6b:be:b4:f8:05:05:e5:68:8b:c7:90:11:f7:4a:1d:
c9:79:76:af:58:ec:fd:ce:d7:16:07:f1:b9:be:e2:
02:d7:3a:19:f7:4c:49:8f:5b:4b:47:26:a4:af:dd:
ea:f3:93:fd:33:b9:33:90:24:9e:4b:d4:77:cf:b4:
2a:f0:5b:ce:fa:e7:85:29:01:27:af:ca:49:56:dc:
dd:1c:41:52:27:d2:ad:44:80:80:e8:08:90:99:3b:
cb:c9:c9:34:38:2e:21:ce:f1:18:8e:b5:2b:70:49:
a7:da:a7:28:a9:01:8d:08:35:9f:d1:b5:83:ab:ba:
c5:54:0a:f0:e3:32:cf:14:9b:4b:9f:aa:7f:a5:c8:
98:ce:6c:93:9a:6c:ae:73:de:af:b9:cc:ef:4f:01:
c4:d7:e9:e0:e2:9e:75:2d:90:8e:7e:d1:32:c0:07:
a2:c2:34:af:7a:75:cf:a6:20:b5:7c:be:b8:de:e4:
e4:66:6c:d0:d0:84:51:7d:0d:1a:8a:60:20:cd:63:
11:45:7e:a5:be:d8:e7:21:5d:e7:01:34:4d:d3:c0:
29:75:0b:85:37:bc:f2:2a:71:c4:df:82:5f:9e:b5:
34:50:d1:5f:60:04:07:87:23:16:ae:80:45:55:0f:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:FC:96:0A:C2:A0:34:07:E3:24:99:B4:4D:51:B1:BE:7B:62:72
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:4a:ac:3d:8a:81:1e:6f:64:96:4c:76:be:7b:cd:41:b0:68:
14:fc:ed:82:47:83:ca:c6:eb:a3:e9:c3:24:b3:7c:56:7d:7b:
3e:3f:95:f9:cf:bf:83:99:23:bb:65:9e:45:ce:cf:9c:f4:4c:
7d:52:ad:a0:0a:bb:09:e7:94:e1:3e:73:80:c7:01:3b:fa:69:
ef:e9:b5:f2:b4:d8:56:cd:a7:32:e8:64:32:01:35:f0:57:2a:
97:f3:92:9b:75:4d:30:bb:45:9f:41:ab:e5:0f:db:ed:dd:a6:
f8:fb:aa:b6:a3:31:06:1e:49:f8:19:d3:cd:07:60:0b:c2:1d:
94:25:de:a8:5f:7b:37:b9:2c:61:50:dd:e1:cd:ce:77:97:f9:
bc:ec:f3:6f:3a:95:93:31:26:ec:74:10:fd:8d:f2:0e:29:2f:
15:13:94:0b:05:1c:bc:dc:eb:b8:d8:b9:fa:ad:77:c2:db:ed:
0f:b2:dd:4c:f0:2a:f6:97:85:ec:32:b9:8e:3f:3b:89:23:0a:
56:38:28:72:18:c5:f7:f8:c1:d8:b1:cd:7b:8a:4c:21:a6:4c:
cd:2b:36:b3:f7:5c:a2:8d:6b:bd:d5:b4:a6:c8:bb:18:9a:42:
bf:75:ce:76:5c:5b:53:7a:9c:1e:0d:9c:bf:53:c6:db:77:3c:
f8:21:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:07 2025 by rpki-client