Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
File: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft (raw, json)
Hash identifier: jktwXnOM+wbVtTKDTqXzsMv8SUO105nzB0mcGVLPPM4=
Subject key identifier: 46:E3:64:A8:2D:D3:16:95:79:85:0B:F1:8F:99:45:DE:F7:77:BA:92
Authority key identifier: 1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
Certificate issuer: /CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Certificate serial: 066FD947DE86D1CC597F6FF515919F5F5D4131FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
Manifest number: 8B
Signing time: Sat 23 Aug 2025 00:02:05 +0000
Manifest this update: Fri 22 Aug 2025 23:56:58 +0000
Manifest next update: Sun 24 Aug 2025 01:04:58 +0000
Files and hashes: 1: 1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl (hash: ob4PNyKQXER7gzaR31R+6y5DlKM9H5Rfh/77fUynibI=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6f:d9:47:de:86:d1:cc:59:7f:6f:f5:15:91:9f:5f:5d:41:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac46aafd15eee0b1fe6072e4f0ddf271c03ee51
Validity
Not Before: Aug 22 23:56:58 2025 GMT
Not After : Aug 24 01:04:58 2025 GMT
Subject: CN=46E364A82DD3169579850BF18F9945DEF777BA92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:24:cb:68:50:87:a5:5b:fe:00:a7:0a:aa:ff:
db:52:79:24:11:3e:ba:4d:5d:b2:74:b6:64:b7:2b:
af:76:5f:44:53:9d:13:f6:1e:16:e2:16:90:06:81:
de:e4:57:09:8d:95:3c:4a:68:ac:6a:ed:8e:c9:dc:
24:44:ca:f6:bd:95:df:40:b1:d9:2f:6c:37:37:01:
d8:87:83:9c:d1:ea:b9:f0:e1:38:11:b6:b0:58:02:
d6:19:6e:6d:87:3f:68:2d:99:26:2d:06:81:a0:97:
85:a0:25:2e:ab:0a:06:19:7f:13:70:b7:03:d9:0c:
14:38:a7:b1:49:47:a1:b6:f3:8c:db:1c:f5:69:28:
20:ef:69:4b:b6:e2:4a:83:73:4f:a0:4a:32:78:61:
69:a4:54:e4:b9:1b:53:0e:dc:93:1c:04:68:ee:8a:
19:e9:06:e1:22:09:23:da:56:63:3f:4a:66:23:54:
18:24:f0:e7:a2:0e:a3:4e:11:b5:0b:57:15:f4:3b:
c8:9f:27:4c:c9:3e:59:e3:28:15:85:79:aa:02:0c:
a5:c7:2f:52:ba:5d:f3:60:e9:1b:1a:e8:69:42:0a:
a2:9b:a8:36:40:d7:14:80:be:91:27:93:41:f0:24:
f7:c1:e5:0f:5e:84:bd:1c:64:b5:c9:10:67:2b:8b:
a2:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:E3:64:A8:2D:D3:16:95:79:85:0B:F1:8F:99:45:DE:F7:77:BA:92
X509v3 Authority Key Identifier:
keyid:1A:C4:6A:AF:D1:5E:EE:0B:1F:E6:07:2E:4F:0D:DF:27:1C:03:EE:51
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsRqr9Fe7gsf5gcuTw3fJxwD7lE.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1eaf1f6b-2081-467a-8039-f1f969b4fb66/0/1AC46AAFD15EEE0B1FE6072E4F0DDF271C03EE51.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:0c:c5:8d:bb:b0:2e:3f:87:1c:31:1a:ea:86:66:92:28:6d:
13:26:8b:5b:61:6b:98:37:45:c3:fc:6f:16:8b:b7:7e:02:1d:
b6:99:52:52:15:fc:e9:e5:bb:8f:4b:1d:b8:44:c0:fc:84:bd:
0d:03:9b:52:0e:a0:79:f3:ab:e7:d1:c9:b0:57:e9:cc:6b:68:
6a:56:41:44:c7:19:7b:c0:b2:c8:a9:d7:e1:93:89:c1:25:7d:
17:9f:61:3c:23:d0:fb:c7:df:81:cf:83:d8:2e:bd:05:57:15:
85:1e:e5:80:0b:c8:b8:95:31:a7:9a:d7:f8:7c:7a:93:52:fc:
83:02:56:33:10:98:0e:d2:c9:51:3d:be:1a:08:98:5f:14:bb:
87:e7:a8:31:96:80:e7:de:cf:22:aa:b8:20:89:f0:12:b7:6e:
2f:cf:80:d5:60:56:27:ac:25:e5:4b:d1:42:4a:50:a4:a2:a5:
ae:57:9d:d9:1a:2e:06:d6:dd:90:1f:54:20:68:6e:5d:71:11:
a0:f2:49:16:f2:b3:52:39:a0:ce:83:ff:4f:9a:db:97:e4:f7:
b2:6a:ae:3e:7e:4b:bd:5c:24:d3:8c:30:78:17:08:90:d8:a3:
55:0f:31:1f:3d:1d:88:61:6a:89:fe:9d:34:98:1e:7e:ab:03:
0e:99:2c:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:24 2025 by rpki-client