Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: 6N8+NY1eqJcIoTtz1MDrLTLeU4iHgMi328sseL/n3AY=
Subject key identifier: 40:60:FF:7D:0F:5B:4C:32:03:99:5A:F2:B5:05:1E:F6:F7:32:20:F8
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 0196C4273369B5D1BEFB8FC7ABA2071A9FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0A90
Signing time: Mon 12 May 2025 11:00:25 +0000
Manifest this update: Mon 12 May 2025 11:00:25 +0000
Manifest next update: Tue 13 May 2025 11:00:25 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: KPKspipDtCQnvPViRhHCP1a0j7RHWUxGRAVPjU+KsCU=)
2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:27:33:69:b5:d1:be:fb:8f:c7:ab:a2:07:1a:9f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: May 12 11:00:25 2025 GMT
Not After : May 13 11:00:25 2025 GMT
Subject: CN=4060ff7d0f5b4c3203995af2b5051ef6f73220f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:68:14:4b:0a:01:3f:49:0e:8e:63:06:f7:a0:
7a:57:f6:74:2d:92:2b:06:14:b3:97:25:f1:f3:db:
0d:8f:ac:7c:3c:92:d1:86:4a:6c:1c:00:85:5e:38:
cf:70:67:58:06:c8:76:29:fe:a1:86:99:e9:27:f6:
5a:7e:e4:3d:e2:b6:87:7f:3f:6e:4f:fb:64:c7:ce:
43:1f:49:44:31:35:11:c6:29:29:85:d7:cf:d4:98:
18:1f:45:4c:ea:91:21:48:92:14:02:d3:a4:61:68:
4a:a8:a4:a3:a2:76:75:53:e3:1a:14:9b:17:16:b7:
69:6b:00:7d:77:cf:5a:a6:4a:ec:6a:32:9e:54:a8:
19:a4:a1:c9:64:ae:4d:d6:f0:61:35:9a:51:62:8d:
c3:a3:fa:42:b4:1f:f8:19:bf:06:7b:e6:12:32:b5:
ad:10:6f:33:ba:9c:84:93:7c:b8:3d:f8:11:61:9c:
b7:c9:5c:25:ec:cc:7b:a0:30:63:b3:aa:92:cd:28:
da:7a:b8:d5:eb:9c:ec:0b:10:c2:6b:77:ac:88:b5:
d7:9e:0e:3a:46:a4:c5:63:c5:82:07:e2:31:0a:a6:
af:15:93:c2:71:31:fa:75:7e:ac:04:9c:0a:93:63:
80:2e:bb:a5:f8:45:9d:c7:47:a2:b8:16:d9:94:16:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:FF:7D:0F:5B:4C:32:03:99:5A:F2:B5:05:1E:F6:F7:32:20:F8
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:3c:82:34:f9:43:91:d4:a1:51:81:58:d9:de:a8:01:2b:12:
48:62:13:6a:b7:77:9e:a7:87:c4:7b:95:05:72:3c:0e:65:cb:
2e:df:0d:65:4e:4b:86:60:2d:c5:b9:d4:3c:d6:9a:2e:17:4a:
a9:91:57:48:fb:84:dd:b3:97:17:e5:d7:cb:45:2d:37:33:d8:
e5:b5:4c:f4:40:f0:a1:2a:0c:5d:e5:5b:44:ea:8e:c9:0c:35:
ad:c1:c4:2e:43:27:5f:ae:5f:8d:56:e2:57:85:da:4d:f0:b1:
69:78:e7:cb:d5:61:1d:5e:ec:d5:17:1f:30:4a:72:9d:f8:06:
06:5b:a4:22:0b:cc:ed:c1:0e:aa:b2:a6:28:fe:1e:07:99:18:
bf:3d:dd:89:8e:29:4c:15:bd:1f:5f:53:12:a3:fe:d7:ed:15:
c4:ae:77:3a:59:87:10:6d:ee:5e:1f:38:da:16:70:cb:04:ac:
db:a5:fa:c8:78:6d:8e:08:dd:9c:31:a6:b2:6c:96:f1:3b:20:
82:61:0f:82:b0:85:a8:a3:b2:33:0e:32:70:f5:fb:ac:8e:39:
5f:b5:7b:df:4f:b7:fb:75:37:eb:b2:9d:bc:c9:03:0d:df:fa:
d5:c0:34:f3:75:df:d3:aa:8b:8e:e0:d7:79:50:0d:5c:53:cf:
a2:df:af:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZbEJzNptdG++4/Hq6IHGp/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYTg5OGJhMTI1MGM4OTg5Y2M3NmQ5ZjhiNTNkMWRiYzYy
YjI4OTAwHhcNMjUwNTEyMTEwMDI1WhcNMjUwNTEzMTEwMDI1WjAzMTEwLwYDVQQD
Eyg0MDYwZmY3ZDBmNWI0YzMyMDM5OTVhZjJiNTA1MWVmNmY3MzIyMGY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2gUSwoBP0kOjmMG96B6V/Z0LZIr
BhSzlyXx89sNj6x8PJLRhkpsHACFXjjPcGdYBsh2Kf6hhpnpJ/ZafuQ94raHfz9u
T/tkx85DH0lEMTURxikphdfP1JgYH0VM6pEhSJIUAtOkYWhKqKSjonZ1U+MaFJsX
FrdpawB9d89apkrsajKeVKgZpKHJZK5N1vBhNZpRYo3Do/pCtB/4Gb8Ge+YSMrWt
EG8zupyEk3y4PfgRYZy3yVwl7Mx7oDBjs6qSzSjaerjV65zsCxDCa3esiLXXng46
RqTFY8WCB+IxCqavFZPCcTH6dX6sBJwKk2OALrul+EWdx0eiuBbZlBbmjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBg/30PW0wyA5la8rUFHvb3MiD4MB8GA1UdIwQY
MBaAFOOomLoSUMiYnMdtn4tT0dvGKyiQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMt
NzMwMzgzMjExZjI1LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9iNjg4ZGEtNzY1Yy00NDgxLThlYjMtNzMwMzgzMjExZjI1
LzEvNDZpWXVoSlF5SmljeDIyZmkxUFIyOFlyS0pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTyCNPlD
kdShUYFY2d6oASsSSGITard3nqeHxHuVBXI8DmXLLt8NZU5LhmAtxbnUPNaaLhdK
qZFXSPuE3bOXF+XXy0UtNzPY5bVM9EDwoSoMXeVbROqOyQw1rcHELkMnX65fjVbi
V4XaTfCxaXjny9VhHV7s1RcfMEpynfgGBlukIgvM7cEOqrKmKP4eB5kYvz3diY4p
TBW9H19TEqP+1+0VxK53OlmHEG3uXh842hZwywSs26X6yHhtjgjdnDGmsmyW8Tsg
gmEPgrCFqKOyMw4ycPX7rI45X7V730+3+3U367KdvMkDDd/61cA083Xf06qLjuDX
eVANXFPPot+vSg==
-----END CERTIFICATE-----
Generated at Mon May 12 15:51:52 2025 by rpki-client