
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File: 46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier: kH0iY0mL+CPYlZOLRG5hPulB6BeksRzmsTelzJ338hA=
Subject key identifier: AF:26:64:5F:CE:3A:21:AF:A7:C2:D0:FD:50:73:5F:27:34:B1:47:0D
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer: /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial: 019748F9DC60E7F4E8AC8571E3B999002C5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number: 145E
Signing time: Sat 07 Jun 2025 06:00:23 +0000
Manifest this update: Sat 07 Jun 2025 06:00:23 +0000
Manifest next update: Sun 08 Jun 2025 06:00:23 +0000
Files and hashes: 1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: ZyGabgEm8Kih+kkHjHp+ktrTnpHRObQPZ5R2nAWgshI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:dc:60:e7:f4:e8:ac:85:71:e3:b9:99:00:2c:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Validity
Not Before: Jun 7 06:00:23 2025 GMT
Not After : Jun 8 06:00:23 2025 GMT
Subject: CN=af26645fce3a21afa7c2d0fd50735f2734b1470d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:36:9b:d8:0e:aa:cc:50:8b:b4:db:eb:66:51:
7f:30:1f:82:15:a8:0d:56:e3:ba:c1:d3:d8:5e:41:
5f:34:16:90:d3:6c:d4:19:50:76:4f:cb:ab:a5:51:
dc:ec:f4:40:ac:f6:8c:89:23:80:21:82:4d:30:26:
a3:79:b1:00:56:c0:db:bc:f3:a1:c8:9f:b4:fd:27:
87:95:7c:af:63:d7:20:c5:9c:e0:ed:cb:21:b6:a1:
c3:f4:09:f4:22:fa:a7:3f:61:1b:57:80:db:58:df:
d8:71:60:75:99:8c:6e:fc:57:ae:8d:5c:67:e1:4e:
7e:70:05:bb:0e:f2:0a:15:bd:d4:cf:b8:a2:e0:55:
13:56:35:54:c0:e9:29:67:bc:60:b5:21:78:3a:e5:
7b:57:01:18:54:c7:8c:cf:d7:66:32:95:7b:ae:45:
0f:fd:5d:36:24:b5:c5:f0:bc:e3:1a:0d:20:86:b8:
d2:8b:64:e9:9c:3d:10:fc:99:80:db:e4:05:d2:92:
c3:55:b0:d1:d9:7e:d4:36:63:bc:16:a3:91:4a:70:
79:64:50:57:7c:36:a4:23:b1:e0:8a:66:98:60:ed:
92:a3:73:a7:27:a9:bd:45:58:e2:0d:39:6b:3a:25:
36:f9:57:ab:0f:21:12:1d:d5:7c:26:44:85:a2:c0:
28:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:26:64:5F:CE:3A:21:AF:A7:C2:D0:FD:50:73:5F:27:34:B1:47:0D
X509v3 Authority Key Identifier:
keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:af:8d:08:aa:11:83:90:5c:6f:78:36:d7:d7:ba:6f:08:f7:
fa:82:c9:ae:d2:45:42:63:f1:c1:2d:4c:78:00:4a:c7:c7:03:
37:81:f8:83:ef:bd:61:b7:b2:b7:27:ff:25:c4:48:1f:8b:c2:
ac:c2:52:0d:4d:e4:80:74:3c:f7:33:48:48:bd:47:a3:82:1e:
80:ef:07:99:ec:9f:e1:85:29:4c:43:eb:d1:1d:2e:33:0d:94:
40:09:44:7f:59:ea:01:e9:20:f7:77:57:c7:c4:b2:4f:e0:79:
5b:23:9b:20:73:7c:bf:13:45:ba:52:df:7f:dc:77:2b:a1:14:
db:fd:38:03:d8:44:72:2c:80:b8:bf:55:09:38:65:43:d1:5a:
03:c5:9c:44:8d:27:38:64:6a:ac:0f:5d:b7:cc:20:3d:8f:46:
b8:87:bf:a7:0b:d5:95:0f:6d:b7:64:4f:89:15:bc:4d:d2:b5:
a0:ad:e3:31:a6:43:6a:d9:f7:79:25:b2:e0:f1:af:0b:93:d1:
7b:24:1b:18:d5:35:40:57:5c:f8:ef:e2:5a:47:f2:52:22:93:
b5:26:14:0e:08:19:14:c3:aa:cf:da:b6:de:2f:50:a1:61:86:
e6:67:5f:eb:43:14:42:07:63:a2:ea:d5:66:f8:dc:1a:19:60:
fe:ba:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:57 2025 by rpki-client