Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: mrwabSCW2Re78BEDFqikX/QQDjYGsFXV9HLTTSIyUYk=
Subject key identifier: D7:C7:61:68:BF:2F:9B:93:8E:F3:C1:E4:57:96:F6:D5:DA:33:1A:53
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 0199FCC63BDE147A0473F5375A106AF61F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0C3B
Signing time: Sun 19 Oct 2025 14:01:13 +0000
Manifest this update: Sun 19 Oct 2025 14:01:13 +0000
Manifest next update: Mon 20 Oct 2025 14:01:13 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: weYV5ZZzMh/sF77p6hBiYh03uxBnlsrCCR9OO9aUJs0=)
2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:3b:de:14:7a:04:73:f5:37:5a:10:6a:f6:1f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Oct 19 14:01:13 2025 GMT
Not After : Oct 20 14:01:13 2025 GMT
Subject: CN=d7c76168bf2f9b938ef3c1e45796f6d5da331a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bc:6f:c5:e4:2a:7d:ec:48:0c:10:b2:32:46:
5c:1c:00:08:0a:2e:9f:6b:40:25:b8:f9:cb:ca:f0:
df:b2:35:fb:94:87:d3:d1:8c:1c:49:70:74:56:78:
ed:e0:40:18:8d:0f:cf:fb:fa:cc:3a:32:7a:7f:37:
c6:1a:ec:82:5e:12:ac:23:d8:c4:68:0e:4b:55:6e:
d0:98:26:91:4c:76:30:c2:cc:47:b0:de:f4:ce:1d:
75:5a:f7:79:50:86:97:f4:b7:3a:8f:d0:51:c9:2c:
da:83:af:84:51:0e:70:0d:0e:30:4d:ea:4c:d2:95:
db:80:f5:17:e8:c6:2c:8f:e5:5c:f6:af:70:24:3f:
4b:c0:43:57:4b:7e:ae:ce:f1:41:6b:b0:94:69:24:
5b:49:39:bb:1c:2b:6a:a6:c2:a0:09:0b:de:d2:d9:
4f:ce:6b:f9:22:94:32:c2:0b:a6:77:13:a3:47:54:
33:c4:b6:a4:64:c3:c2:2b:b9:03:a5:63:4d:c4:ad:
87:4a:ca:4d:5f:cf:e0:93:b9:b3:1e:25:5f:51:7f:
aa:6e:48:e8:bf:c2:74:8b:47:3a:71:d6:8c:f1:45:
bf:f8:19:fe:bc:04:ee:01:8b:9a:b3:31:83:4f:48:
f0:f3:0a:a9:28:b3:f4:19:eb:88:33:84:94:b1:cd:
a4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C7:61:68:BF:2F:9B:93:8E:F3:C1:E4:57:96:F6:D5:DA:33:1A:53
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:84:63:98:04:d5:d1:c0:78:47:d5:47:41:ec:04:9c:ac:dc:
87:09:eb:6a:26:f9:63:b3:7b:51:ee:77:e7:ef:17:29:7f:4e:
2c:64:68:91:64:84:67:ab:d8:3f:c8:32:da:a1:67:13:79:f1:
93:f6:8f:83:2f:29:80:4a:ee:43:ed:34:50:76:6f:99:18:fd:
50:39:38:fd:50:0b:20:1a:17:c7:2b:a9:6f:fb:e3:ff:9b:40:
5e:7e:c1:1a:e7:28:b9:46:cb:08:d5:9d:34:99:2e:b2:33:3b:
81:df:63:d0:0e:6c:a8:42:a5:d2:57:2c:5b:06:d4:01:71:60:
ad:6a:eb:90:a6:78:93:ed:04:6d:2f:6b:30:ec:02:d4:fa:0f:
9b:85:64:e3:9f:ec:09:07:95:f5:ff:7d:a3:a7:93:d3:22:5e:
27:fd:f6:9e:62:8e:10:88:18:9f:00:94:de:40:f0:fe:90:55:
cd:a3:68:3c:fc:61:a1:31:b7:6b:8c:b0:60:87:e8:40:99:06:
54:ab:4a:f3:63:df:0b:a4:4a:d2:4d:38:0b:d9:0d:f7:60:24:
06:24:57:83:bf:6d:a0:f7:31:4f:13:ef:fc:8e:55:9f:f1:ff:
15:01:7b:38:ee:f6:9d:13:51:4b:df:2b:02:15:b2:5d:da:8c:
f7:b4:4c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:40:41 2025 by rpki-client