Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: /Vt/umZ9YRApkCVmZoP+cFnesllDyZK+Ae21XMtFwuw=
Subject key identifier: 68:5A:8B:38:BC:B8:70:4F:44:80:A7:C8:F0:2F:CB:C7:B5:51:0F:80
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 0197B77C774BD5164B1650A072219B8899A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0B0E
Signing time: Sat 28 Jun 2025 17:01:16 +0000
Manifest this update: Sat 28 Jun 2025 17:01:16 +0000
Manifest next update: Sun 29 Jun 2025 17:01:16 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: XcC2YNYyqhv8uOB6HdTu0W7bhqUv5pgsUhg7oo3CKik=)
2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:77:4b:d5:16:4b:16:50:a0:72:21:9b:88:99:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Jun 28 17:01:16 2025 GMT
Not After : Jun 29 17:01:16 2025 GMT
Subject: CN=685a8b38bcb8704f4480a7c8f02fcbc7b5510f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:a3:85:b5:67:d7:51:99:e0:33:72:8c:d7:
36:4c:f6:49:e8:95:a1:28:0e:b4:3b:9d:13:79:21:
12:38:71:cb:ef:c1:c6:9c:d2:73:1d:19:56:e4:0a:
64:b6:3f:64:86:47:59:09:9d:61:79:78:ae:35:81:
d0:93:26:23:83:4e:f8:46:fa:9b:9f:ac:b6:c6:f6:
cf:d2:ec:73:db:b6:ac:80:ae:02:47:4f:6a:07:ef:
64:f5:48:d8:d3:20:05:ae:4f:c0:0e:7d:57:d5:d1:
04:be:eb:77:25:1f:69:7d:10:42:a1:01:91:36:d0:
0c:f0:e4:1b:3f:6b:da:de:78:e7:9a:52:7f:3a:0d:
9a:ee:1c:be:42:87:ec:52:20:6d:75:32:ab:ef:30:
9a:65:5c:d9:11:b6:f0:6e:8c:ef:db:81:13:fe:97:
63:88:a4:4d:50:b8:35:b1:2e:c6:7e:f7:13:09:2a:
3e:c0:7a:81:fc:c8:5e:5d:f3:67:67:00:23:80:3f:
04:9f:d1:e1:e3:40:2d:7b:79:86:34:80:35:76:1a:
10:12:ab:3e:0e:e8:15:46:58:ff:1d:84:fe:e5:37:
1f:de:32:03:df:af:78:a9:63:f5:d5:c4:b5:41:e4:
b0:89:16:1b:cb:55:0d:b5:10:c6:a2:f0:03:ce:2a:
9f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5A:8B:38:BC:B8:70:4F:44:80:A7:C8:F0:2F:CB:C7:B5:51:0F:80
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:6d:11:26:0a:76:0e:2c:02:7e:7b:a9:73:57:9a:82:b6:e2:
19:ce:94:0e:4b:a2:ab:6f:0a:22:40:b4:46:c8:3d:6f:6d:d7:
9b:c1:17:82:d5:d6:72:be:43:12:18:73:ae:40:ae:27:de:e9:
b3:8e:fd:97:34:c0:73:70:2a:da:ca:6a:b4:eb:d2:e9:ac:ea:
1e:14:71:c6:15:9b:35:9b:0f:e5:c6:07:bf:ca:d1:b6:fe:4f:
39:01:6b:e9:08:61:99:81:2c:c6:c5:8d:99:07:da:54:c0:c6:
20:1b:61:f4:19:1a:8a:0e:36:ff:e5:73:9e:3b:4d:95:5d:01:
dd:f6:d3:0a:5e:d0:1d:d3:da:6c:5c:1c:8d:5c:b6:4c:86:c3:
ab:58:9f:a0:05:2f:fb:28:91:78:e8:bd:7d:e3:c2:dd:bd:c8:
d0:fb:82:89:71:41:12:39:d0:37:bf:2a:c7:ba:80:f8:8e:6a:
4b:fd:ef:e5:52:11:9f:15:56:ae:40:07:17:e4:d4:4b:06:a4:
61:dc:84:e0:c0:81:b7:b4:7e:59:bb:3c:fc:f1:cd:27:58:14:
2a:c7:64:2a:c5:c0:3c:37:6d:2b:f9:86:38:a3:e4:71:87:09:
ff:86:c9:32:c1:55:65:83:dd:a9:69:30:8c:ee:d7:2e:63:ca:
14:f2:c3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:42 2025 by rpki-client