Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File: 46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier: AhFCL1dm7MlfV69SFa+MAytJCxW1pveHWa6ItxGARsI=
Subject key identifier: B2:3E:6B:8E:B4:E8:5A:2A:AE:76:C9:8A:E5:43:7F:65:94:11:C0:FA
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 019858D8C3E7BD1AFD716F96D681C626492A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 01:00:57 +0000
Manifest this update: Wed 30 Jul 2025 01:00:57 +0000
Manifest next update: Thu 31 Jul 2025 01:00:57 +0000
Files and hashes: 1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: 3Wfw6K91ZyeAqvGAMZdZXOW0NpMQtmLYDgoRuQttZ+E=)
2: 9xuRyXwVaekffVcG8_NstMNBt-k.roa (hash: M9/x2Ndgn+GMwlguZER0SDySKrmyfH7+TGAZyq7NYpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:58:d8:c3:e7:bd:1a:fd:71:6f:96:d6:81:c6:26:49:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Jul 30 01:00:57 2025 GMT
Not After : Jul 31 01:00:57 2025 GMT
Subject: CN=b23e6b8eb4e85a2aae76c98ae5437f659411c0fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d4:11:ba:a4:d3:dc:f7:6a:06:72:3e:83:b2:
0b:82:2b:ea:d3:ee:12:56:98:db:a3:84:b1:cb:4f:
2f:90:91:1d:4b:ee:0b:06:b8:e9:d7:7e:ad:21:05:
a4:31:78:fa:10:0f:86:3a:2c:cd:4b:7e:a7:ad:da:
7e:aa:3d:ef:c5:a4:5a:7c:60:8c:60:9c:3e:d9:ec:
84:1b:f3:84:54:ce:46:cb:2b:82:db:00:50:42:bd:
90:c3:23:21:30:b8:7b:58:33:30:6a:96:4f:bf:e6:
ec:58:a0:5b:96:ba:a0:00:4f:63:0b:8b:bd:67:35:
60:d2:8d:10:01:31:a3:e5:78:f5:e8:1d:03:74:97:
7a:d1:19:1a:0b:bc:75:4b:b1:46:a2:b0:09:df:99:
81:5b:7d:b8:36:42:91:73:f5:41:80:71:a5:7c:43:
1d:25:1d:c2:0b:f5:b1:a8:78:47:fc:d5:f6:79:a0:
42:ef:d0:6f:86:b4:5c:32:ef:6c:8a:3f:87:4a:b1:
56:43:be:92:a5:54:e8:61:56:11:25:a3:28:5a:ca:
b9:37:b7:1f:41:39:58:68:36:cd:82:65:69:e9:57:
3d:6a:0c:00:a0:a4:fb:d8:03:0f:7b:bf:44:b9:00:
5d:c6:90:62:2a:52:8e:70:3a:5d:72:c3:3c:bf:ee:
67:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3E:6B:8E:B4:E8:5A:2A:AE:76:C9:8A:E5:43:7F:65:94:11:C0:FA
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:b2:7e:73:6c:56:c8:f3:3f:f2:6f:f7:1f:da:c3:12:ec:68:
db:1f:0d:90:f8:d4:ef:e6:5d:37:5a:b4:04:de:d6:40:44:2d:
0b:2e:ce:8f:10:5c:63:4a:5d:f7:ed:51:7c:96:be:db:1d:2a:
db:1c:f2:47:fa:49:fb:e1:7f:1a:9c:94:3f:c4:2e:35:82:e8:
ee:86:55:a9:35:30:3d:a1:63:cf:70:af:82:5f:86:ba:1b:1c:
b4:1b:01:0e:69:77:f4:df:af:3e:39:5a:6f:73:0d:ed:4a:c6:
1f:50:42:32:ca:12:20:b0:c1:6b:3f:d0:5b:aa:5c:52:82:5e:
ac:f0:91:63:92:82:52:2a:2a:29:6a:15:a6:2d:56:b5:01:41:
c5:dc:66:95:9f:86:11:17:ee:44:90:df:94:3a:5d:74:58:16:
4a:25:15:83:14:b3:0d:33:61:10:64:48:1f:bc:5e:ca:26:83:
4c:86:ba:95:29:fa:a0:9f:82:cb:61:74:51:b0:1f:64:31:e1:
90:9b:c9:bb:d3:4e:3e:75:43:8c:2a:92:a1:e1:4b:3b:01:8d:
29:08:af:90:9b:4d:56:98:04:c1:b2:b9:3d:15:0c:28:c1:35:
23:01:c4:e9:20:16:59:79:9b:a0:5d:8e:b7:23:20:c1:13:62:
bf:95:f9:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 07:54:38 2025 by rpki-client