Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
File: 46ttsqw26Ykzq5momk2cFp6l77s.mft (raw, json)
Hash identifier: 2+UGDVIRHTpHr9nu/r2Kl7SDt7EtzYqgIRfvWnlgSIE=
Subject key identifier: 35:55:A6:35:03:67:3C:19:58:46:9D:B8:79:6A:65:7C:FB:D7:EF:66
Authority key identifier: E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
Certificate issuer: /CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Certificate serial: 019A7225CDCEFE2E69DB0CCE57B302A051AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
Manifest number: 1601
Signing time: Tue 11 Nov 2025 09:01:11 +0000
Manifest this update: Tue 11 Nov 2025 09:01:11 +0000
Manifest next update: Wed 12 Nov 2025 09:01:11 +0000
Files and hashes: 1: 46ttsqw26Ykzq5momk2cFp6l77s.crl (hash: xIBLKlTxIw+6UUZNK9RRpaK791qSarXEROmKZIlb8Rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:cd:ce:fe:2e:69:db:0c:ce:57:b3:02:a0:51:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ab6db2ac36e98933ab99a89a4d9c169ea5efbb
Validity
Not Before: Nov 11 09:01:11 2025 GMT
Not After : Nov 12 09:01:11 2025 GMT
Subject: CN=3555a63503673c1958469db8796a657cfbd7ef66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:7d:42:ad:57:54:fc:a3:cf:b7:a1:06:a0:75:
be:b1:62:8c:48:36:cd:33:88:a6:89:bc:04:b0:a8:
1b:5e:ee:28:f6:36:46:6f:fa:f4:01:0d:79:41:cb:
78:09:4f:e3:f6:76:4e:c7:bf:56:c5:75:36:9a:9f:
e7:84:56:b0:c1:27:c8:34:8f:ce:e1:94:58:8a:16:
85:a4:54:b7:0e:86:a3:6a:6a:3a:6c:d0:7f:05:9c:
a6:b8:ef:bf:d6:25:3d:06:78:0c:c7:49:31:c9:3b:
55:ad:bb:41:77:40:8d:97:aa:62:dc:bb:72:5b:1a:
e8:33:73:53:1a:aa:63:40:ad:76:64:56:7a:d9:18:
ec:08:f4:af:d6:36:b4:1b:4b:33:51:51:e4:14:5f:
85:6f:e1:e3:ca:a7:f2:80:74:2d:d3:04:85:33:35:
31:65:d3:17:13:61:96:d2:fb:81:2e:f0:2e:54:fa:
6c:4a:b3:e0:91:25:1c:c0:8c:c6:d9:97:d2:05:4b:
6e:ce:a4:3a:2b:5b:40:c5:fc:95:9f:d5:3f:32:29:
87:d4:2e:d5:e3:2c:5a:2c:04:36:97:ef:1b:da:a8:
7e:06:25:e6:de:e8:e1:5e:44:72:51:9b:2e:51:cb:
e3:3a:a3:ef:1a:8e:1a:50:8a:df:ba:9e:da:9d:a7:
1e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:55:A6:35:03:67:3C:19:58:46:9D:B8:79:6A:65:7C:FB:D7:EF:66
X509v3 Authority Key Identifier:
keyid:E3:AB:6D:B2:AC:36:E9:89:33:AB:99:A8:9A:4D:9C:16:9E:A5:EF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46ttsqw26Ykzq5momk2cFp6l77s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ed01aa-15fa-43a6-8a15-f26f50834f29/1/46ttsqw26Ykzq5momk2cFp6l77s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:93:07:bf:8e:a2:14:50:26:2e:65:34:2a:e4:a7:2f:dc:28:
3c:5c:d4:20:e2:b2:68:97:81:65:7a:40:be:51:ed:b0:6e:6f:
f5:ea:2c:67:f8:25:4d:aa:14:78:38:74:ec:d3:d3:4f:6e:68:
06:81:07:9a:8a:1b:80:c1:38:35:71:ae:16:a6:c3:9e:5b:9b:
7b:8b:36:b4:2b:7e:21:ca:4f:52:15:40:2e:96:34:85:a9:3c:
fd:61:64:47:02:5a:ce:b8:68:8a:bb:ae:0f:8e:00:4d:e6:ee:
d9:78:e2:78:db:04:64:d0:b6:95:91:1b:2b:1e:78:95:05:14:
de:8c:df:8c:44:58:89:a7:7c:16:0e:e1:a4:9c:2c:3d:f6:f5:
6a:9d:c2:cd:c6:5f:23:49:75:dc:87:fb:8c:b6:6b:86:f8:ae:
54:bf:c6:1f:b8:e0:52:ea:d8:a7:ec:6f:56:36:f6:a2:c9:e6:
8c:41:ad:36:33:5d:c5:78:e6:53:97:55:8c:fe:46:91:fb:dc:
2f:5d:4e:e7:8e:e8:f0:c1:3f:fa:67:c1:1c:e6:4f:4e:34:e6:
65:64:c8:03:36:ee:ef:a3:bb:dc:b3:3f:a1:e5:0b:59:87:06:
f7:3e:47:0a:bb:1b:0c:4d:4d:53:74:e3:d5:53:d2:2d:6a:69:
2d:78:1d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client