Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: NA9sg64GETmDrEsWRjJGtWbmwqDQ4qXj6c5iZVHqmBU=
Subject key identifier: E3:2D:5C:A3:10:B8:DB:DC:DE:D1:66:AB:14:89:E8:FF:C9:13:ED:07
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 019A706E54D646E2A5D834275599CB80A392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 080A
Signing time: Tue 11 Nov 2025 01:01:10 +0000
Manifest this update: Tue 11 Nov 2025 01:01:10 +0000
Manifest next update: Wed 12 Nov 2025 01:01:10 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: QDjqgwiYk0UgBMHJHdW4b6jKbbwQWODaKL7xI00Tu54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:54:d6:46:e2:a5:d8:34:27:55:99:cb:80:a3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Nov 11 01:01:10 2025 GMT
Not After : Nov 12 01:01:10 2025 GMT
Subject: CN=e32d5ca310b8dbdcded166ab1489e8ffc913ed07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:68:0e:7d:12:bd:f0:99:34:13:4e:b1:9b:2a:
88:7c:92:9b:5c:44:02:d7:e0:72:f4:f4:ce:53:bb:
c5:af:49:51:1f:76:44:95:d7:cd:0d:c0:e9:2a:28:
8b:97:d3:b9:bd:84:af:b6:a6:01:c8:48:a4:f0:9f:
cd:a9:1b:c5:34:46:ca:1a:c9:1f:39:2d:d2:05:c2:
64:77:91:91:c4:f7:a3:38:ad:b8:f4:a0:2e:4c:d3:
ef:69:f9:30:46:73:e3:f0:e1:87:c6:c3:21:ac:36:
7a:9d:f8:c9:cc:07:d7:91:66:e7:48:5b:0e:b8:b2:
f9:49:1f:35:81:1c:ce:d5:47:27:8c:9d:8d:a3:5e:
47:05:38:80:20:51:da:82:60:33:67:53:1c:44:e1:
d7:cd:37:08:b0:f5:b2:ca:79:c0:af:a6:cb:a5:7e:
df:5a:df:ae:ef:cc:b4:93:52:a9:65:0b:ae:88:8c:
22:96:cc:48:a0:26:9b:48:bb:84:6c:ed:bb:ed:3f:
ac:e3:16:5d:97:81:e2:ff:11:75:bd:40:60:95:a1:
99:9e:e6:4d:e8:5c:86:5b:71:59:84:c1:3a:8f:39:
4e:ec:51:ab:3c:1a:c2:60:13:5e:b4:4f:af:31:66:
0b:f1:b0:c6:49:e1:60:15:b9:f4:20:1b:96:6b:93:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2D:5C:A3:10:B8:DB:DC:DE:D1:66:AB:14:89:E8:FF:C9:13:ED:07
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:20:49:45:00:b4:7e:7a:06:47:95:1c:e5:ad:32:73:c3:7c:
4e:2e:71:f1:ae:4f:07:aa:48:58:aa:d2:39:9f:3c:d0:ee:e8:
70:93:0c:5f:e4:bd:f4:a6:75:a5:5a:7c:2c:d9:2d:0a:02:28:
fe:2a:c0:5b:00:32:ff:d4:8d:41:41:d2:24:cd:ef:81:53:d3:
80:5c:75:80:c5:a8:4b:70:d7:7b:29:57:79:d5:d3:e5:3a:28:
07:44:4a:07:54:29:d6:e7:7e:26:4f:0c:aa:ed:99:9b:22:81:
c8:85:4d:ef:aa:70:28:9a:e2:01:07:ce:47:b3:44:1f:2b:4d:
03:3d:5e:9b:05:5e:ee:e0:c8:8e:66:f4:b3:e2:9f:0f:d3:94:
61:b9:28:c6:40:c0:33:e1:81:e0:94:05:21:4a:c0:62:c1:d0:
77:8c:d4:5e:45:19:58:f2:e9:fa:f1:4c:f3:c2:40:53:b5:a8:
c5:a5:ac:33:76:9d:0f:fe:bf:ad:8c:32:27:32:f7:49:c0:27:
0f:64:1e:0c:f0:e0:b0:de:b5:3a:b0:88:6c:e5:98:bb:0e:60:
21:b8:1c:f2:e5:6c:54:f5:4b:fe:8c:24:34:40:cb:dd:e8:b1:
88:99:71:2b:8b:6c:8c:56:4a:15:11:de:e2:dd:0f:29:20:77:
58:b4:ad:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:51 2025 by rpki-client