Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: e4OAks6nePlN7fTODvliY+WtK57MjAA+S2QBW2pgftI=
Subject key identifier: 72:7E:EA:0A:A9:4E:3E:FF:FD:A5:5C:28:D7:E6:D2:4A:D5:CF:30:0D
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 019A20D233D21D2F2D55A9188D9D9B8CB9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 1688
Signing time: Sun 26 Oct 2025 14:00:38 +0000
Manifest this update: Sun 26 Oct 2025 14:00:38 +0000
Manifest next update: Mon 27 Oct 2025 14:00:38 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: 6ewOqd4qBaC5wBVr2AHc1L+tIPfRDTqx8z23okRxGqM=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:d2:33:d2:1d:2f:2d:55:a9:18:8d:9d:9b:8c:b9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Oct 26 14:00:38 2025 GMT
Not After : Oct 27 14:00:38 2025 GMT
Subject: CN=727eea0aa94e3efffda55c28d7e6d24ad5cf300d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:1b:25:3d:d2:07:8b:05:c0:7e:d9:d2:e8:8a:
99:9e:ce:b4:61:09:d9:1d:02:aa:a3:bf:bd:4b:a0:
78:3c:06:5c:1e:96:48:41:c2:a9:32:dd:9d:61:07:
3d:a1:7c:06:ac:81:cc:2a:32:05:12:3b:87:ac:13:
d2:a5:87:87:41:35:5f:11:72:13:cf:22:60:3b:fd:
57:5d:b2:2e:9f:10:b5:47:a3:5f:1f:89:5f:4f:4b:
b1:88:5c:a8:45:ea:4e:5b:cd:c5:b7:41:b0:9e:ef:
4d:ab:c2:98:21:c2:66:df:50:08:a4:21:6f:9e:fa:
be:6a:c2:0f:7c:47:1e:6e:5d:51:27:7b:4d:94:2a:
4e:d8:0b:69:c2:e8:24:97:3a:9e:33:40:03:f8:3d:
5f:fb:7a:0f:1e:9a:d9:4f:1a:84:07:6f:fb:0b:64:
14:d6:6d:7d:95:8c:6c:f9:66:ce:c6:88:7c:5e:9b:
3c:61:ad:29:94:ef:d2:87:2a:aa:d4:57:42:c8:9e:
1b:de:07:15:f7:8a:80:e2:4c:52:6f:53:1d:88:81:
2d:2c:90:3a:2d:6f:53:b2:a3:ab:3b:0f:1a:43:7c:
0e:f7:8f:c7:ad:25:89:af:1c:3d:1d:e1:37:1d:9b:
bb:b9:a5:7d:44:23:3c:5a:cf:1b:11:97:31:6a:c8:
0d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:7E:EA:0A:A9:4E:3E:FF:FD:A5:5C:28:D7:E6:D2:4A:D5:CF:30:0D
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:0a:0f:4e:41:c7:6e:a3:36:e8:8a:d9:07:93:11:13:1b:71:
e1:9a:8b:bf:74:3f:a7:92:21:89:de:9d:e7:e8:16:2c:bb:06:
10:d3:41:64:a1:d6:fa:31:52:d9:90:19:d7:e4:e2:68:35:a4:
78:b9:17:fd:e6:d0:ae:9d:87:0f:70:77:e0:86:b3:64:4c:51:
10:5d:ee:8c:53:60:7a:56:a6:54:fd:36:c6:1f:1c:a9:b8:7b:
b1:68:4e:36:e9:75:05:2d:18:27:15:1c:cc:88:e0:de:cc:a0:
72:54:3c:fc:11:76:6f:9f:ad:03:20:ee:f2:f3:ed:8c:36:28:
bd:f6:1d:16:18:6a:85:ca:1b:44:8c:f6:3a:fd:ae:f1:70:db:
6b:ae:11:1e:86:8d:d8:a1:83:5e:1c:f9:46:29:e7:52:e6:41:
b8:52:91:9d:60:db:2e:f1:32:fe:5e:76:dc:f2:8c:3d:d2:8d:
f1:8d:b9:17:c8:25:1a:be:1b:2c:4b:1a:30:82:15:a6:ec:9c:
c6:38:c2:46:c8:49:db:b6:60:d1:75:fc:dd:a4:96:c4:de:b6:
cb:3c:45:1e:e7:5c:9c:fe:7d:2b:e6:27:31:f1:3a:68:24:57:
fa:06:74:9b:23:35:d8:69:d1:fe:7e:0f:55:0b:6b:f9:8b:0b:
ad:c5:99:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 20:46:17 2025 by rpki-client