Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: jjqUTpsJuWCm6nsMV86aJwKHjvkdOVoCG4xWYPBfog4=
Subject key identifier: 23:A1:08:D0:B1:48:53:71:06:C1:CD:AF:D4:DA:40:CC:A7:9E:F3:C5
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 01974E8E7D69F75E1B1B4CFF5B838B38A034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 08:00:50 +0000
Manifest this update: Sun 08 Jun 2025 08:00:50 +0000
Manifest next update: Mon 09 Jun 2025 08:00:50 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: DYA1u1b39OwtmDG7wg77T0UQBM+eMwe9vJhWtT4SxBA=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:7d:69:f7:5e:1b:1b:4c:ff:5b:83:8b:38:a0:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Jun 8 08:00:50 2025 GMT
Not After : Jun 9 08:00:50 2025 GMT
Subject: CN=23a108d0b148537106c1cdafd4da40cca79ef3c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:16:b9:52:9e:e8:16:29:40:9c:5a:df:2f:
7d:02:52:16:4d:b3:e1:8a:66:64:4d:38:a6:d6:e4:
7d:2e:a2:2e:8f:7c:82:d6:da:30:b5:39:b8:ba:91:
c3:00:11:ef:c0:3a:2e:ce:0c:c1:5a:da:50:88:20:
b7:15:8f:6e:72:a7:42:ac:49:ae:27:dc:63:e1:df:
83:be:33:06:ca:54:5b:a1:16:72:eb:70:fd:bb:7b:
cd:70:46:98:76:3b:24:9f:bf:dd:fc:dd:54:29:37:
dc:66:f3:af:0c:f0:58:b3:42:02:a4:4d:8c:dc:bf:
f3:88:47:9c:ed:a6:0d:a2:c8:28:e4:07:8b:73:db:
07:b1:85:2d:00:e0:0f:d8:fe:0f:45:ae:d5:1b:7c:
2b:2d:55:7a:24:b1:00:6c:57:90:f9:81:c1:00:ff:
35:df:14:f1:98:83:98:f0:19:af:ff:db:12:9b:39:
0c:0d:9f:39:74:48:31:0a:65:67:76:20:8b:fa:08:
4d:df:8c:77:73:23:53:1a:21:82:6b:40:6b:2e:96:
f3:49:13:8a:56:dc:56:c7:fb:0f:e6:f5:04:1f:c7:
70:c7:38:79:b1:e2:84:57:77:00:0e:ca:8f:93:21:
83:80:fa:83:6d:ef:17:42:33:96:ab:98:94:d8:0d:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A1:08:D0:B1:48:53:71:06:C1:CD:AF:D4:DA:40:CC:A7:9E:F3:C5
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:60:35:f5:43:9d:69:8e:36:7a:8b:18:b6:18:d3:b1:32:a7:
ae:0b:5b:4a:15:78:cd:09:35:07:74:af:e0:a5:91:0d:02:69:
d5:73:17:f3:2b:f4:90:e1:1a:af:1a:9d:02:22:49:53:e5:00:
c7:5c:5c:f4:8c:5b:69:02:59:9f:64:b1:a0:ca:99:0c:de:9a:
60:38:4a:1f:75:d3:65:d3:cd:97:7e:c6:eb:d8:c5:3d:6b:16:
cb:23:0e:da:11:b7:80:19:bd:0e:e8:b2:03:51:df:bc:17:54:
64:db:46:96:6c:38:ee:c1:39:9d:3e:27:24:8b:21:05:fd:8f:
bc:81:fb:32:84:de:69:5f:43:d6:d3:1c:be:60:94:5a:81:58:
51:59:b6:59:c7:19:f5:85:84:c8:1b:87:07:56:c8:65:68:72:
83:41:dd:72:44:16:19:9e:94:21:14:9f:54:a5:88:70:22:77:
90:95:24:dc:13:d7:af:47:fb:a8:75:2b:da:bc:e8:88:a4:0f:
85:d8:73:9e:32:5b:c8:ef:7a:6d:08:c3:79:ed:9e:62:a1:6e:
7d:05:d7:3f:07:89:5c:f2:93:6d:46:77:e5:97:52:c3:89:92:
98:96:d0:2e:ea:14:54:ce:5a:fc:9d:47:e9:fa:51:7c:23:87:
bc:ee:b0:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:00:27 2025 by rpki-client