Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: i5CGo7EEtL31+idSVkio4mV67usKyZ5GTaBXV1D7/lA=
Subject key identifier: 47:C1:5F:24:34:55:EA:0C:CC:AB:52:77:E6:C4:55:DB:E7:56:2E:E8
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 0197B74538D6F63A8B145432CF9E2673867D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 06A1
Signing time: Sat 28 Jun 2025 16:00:56 +0000
Manifest this update: Sat 28 Jun 2025 16:00:56 +0000
Manifest next update: Sun 29 Jun 2025 16:00:56 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: DPwpqLMciJCqSggeuNzJ3XyhAQp9BTq6NnLhudnU3ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:38:d6:f6:3a:8b:14:54:32:cf:9e:26:73:86:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Jun 28 16:00:56 2025 GMT
Not After : Jun 29 16:00:56 2025 GMT
Subject: CN=47c15f243455ea0cccab5277e6c455dbe7562ee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:02:d1:ba:99:fb:19:ff:b7:bb:28:76:50:4c:
31:71:ee:44:a1:33:c2:85:c6:d8:3e:67:24:f4:94:
ea:b6:56:a5:30:83:16:26:73:1a:6c:f6:fa:5e:49:
26:4c:e1:5d:4b:4d:8d:d1:7d:e9:50:d3:1c:c2:46:
5a:62:ea:4a:fb:56:b4:1d:7f:76:2e:b7:b6:13:b9:
07:eb:80:7d:86:38:c8:16:c8:de:d8:bc:5d:6f:cb:
c3:67:72:87:a2:28:ff:44:7f:13:f0:95:38:a1:b1:
cc:46:65:1d:99:61:6b:a5:48:d6:aa:3a:9e:e4:f9:
a4:1b:73:c6:a5:21:3a:fd:71:ce:28:7f:9f:81:ea:
b4:df:ee:43:c1:16:81:1b:9c:26:20:ff:d0:6a:45:
aa:ce:de:62:86:43:03:78:dd:7d:44:0d:eb:e4:6d:
0a:81:37:5a:d8:44:fc:ce:35:9e:6f:d3:bd:3b:98:
f8:a5:6e:62:6c:8d:ed:b7:8a:b7:0a:6f:37:c2:24:
85:56:9f:c5:ae:90:ac:b6:0a:34:98:bc:22:4e:06:
74:9c:59:7f:db:3e:cb:d1:46:9a:f4:b3:a3:6a:0f:
60:64:5c:50:ba:b1:db:6f:ed:5d:ad:62:dd:93:9c:
ef:a1:2a:66:f9:50:2b:53:30:56:48:0c:20:bc:25:
74:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C1:5F:24:34:55:EA:0C:CC:AB:52:77:E6:C4:55:DB:E7:56:2E:E8
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:f6:48:e8:1a:06:94:cb:b3:3b:88:e4:16:78:2d:ae:74:57:
0c:ab:d4:79:66:f1:af:a3:4b:05:1e:e7:c2:1a:c2:11:3a:44:
5e:c3:46:3b:94:fe:5d:70:9b:1f:34:1e:0a:d9:75:ad:4f:98:
d6:5a:9d:0e:3e:a8:90:9b:3c:c2:62:c5:5c:45:a8:18:b0:c6:
71:a5:33:f4:82:b6:df:33:59:2f:a1:6c:62:6f:62:96:22:79:
9b:4a:dc:e3:a5:85:80:ea:35:93:37:3f:e9:26:e1:ef:52:6e:
38:24:47:1e:b4:da:2f:75:2f:dd:b8:60:cf:98:48:14:e4:57:
22:8e:75:9f:a8:46:5e:27:01:33:94:69:aa:6a:c9:89:cf:cf:
6e:a8:ce:c4:bc:bd:d0:ad:4e:6a:64:5f:38:f0:38:8c:80:13:
7d:7a:30:ba:29:85:19:67:82:45:c5:1f:63:9c:a7:63:df:f5:
f9:61:11:92:53:50:b9:72:a1:17:c4:5e:34:c9:c2:11:49:1c:
66:db:43:22:60:40:e7:9b:99:b5:d1:36:ed:83:ff:a1:16:7c:
8b:95:93:19:f2:1c:46:cd:42:67:eb:1f:61:19:4e:56:a0:c0:
2f:5c:91:ba:32:e2:e5:fe:2c:c2:d1:7c:ec:00:44:0c:b7:3b:
65:24:ae:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:44 2025 by rpki-client