Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
File: 46dKvLE4LCK5GtQH_UM5q4uoG4I.mft (raw, json)
Hash identifier: CtWkUxQeJOcDqQI5FQk1BDPxLB0QIEmz+/iX3VYx7sM=
Subject key identifier: 14:82:3D:17:7F:8D:DE:3E:BD:AC:E8:8F:02:46:7D:A0:A8:70:07:93
Authority key identifier: E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
Certificate issuer: /CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Certificate serial: 01976929C8C7FB63600EC0DF266A2846F766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 12:00:35 +0000
Manifest this update: Fri 13 Jun 2025 12:00:35 +0000
Manifest next update: Sat 14 Jun 2025 12:00:35 +0000
Files and hashes: 1: 46dKvLE4LCK5GtQH_UM5q4uoG4I.crl (hash: GGY8sqyA3M6rel62KpK76xJZ+krE6KGgedT3m9Q7q2w=)
2: 9xuRyXwVaekffVcG8_NstMNBt-k.roa (hash: M9/x2Ndgn+GMwlguZER0SDySKrmyfH7+TGAZyq7NYpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:c8:c7:fb:63:60:0e:c0:df:26:6a:28:46:f7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a74abcb1382c22b91ad407fd4339ab8ba81b82
Validity
Not Before: Jun 13 12:00:35 2025 GMT
Not After : Jun 14 12:00:35 2025 GMT
Subject: CN=14823d177f8dde3ebdace88f02467da0a8700793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6c:9f:21:71:07:80:34:f0:95:41:07:96:8d:
9b:2a:55:4f:6d:81:07:99:8b:da:72:a0:cb:de:93:
f6:01:8b:30:51:eb:f5:4f:83:32:97:e8:09:19:11:
f1:f7:55:38:7f:44:25:5c:94:d0:9a:b4:58:13:a6:
b8:13:29:8f:3f:8c:1d:91:3f:3d:80:bd:67:72:11:
f0:13:9d:b0:c0:e9:2c:b7:1c:de:6c:f1:58:a2:97:
da:fe:d7:16:8c:2b:79:8c:db:82:0e:14:20:bf:e3:
2d:4f:e9:27:22:18:45:9e:0a:2c:60:6f:20:0f:47:
3d:d0:7f:78:6e:a6:02:89:70:d0:be:5e:5c:75:02:
e0:20:95:b7:57:25:36:be:34:e0:5c:dd:cb:4c:8e:
4b:4f:ab:bf:56:27:c8:40:6b:7b:00:ba:8b:80:b8:
d8:0f:c8:71:84:c3:fa:4d:1c:d7:3f:36:02:6a:ef:
bd:10:10:c5:a4:fe:53:d8:e4:8b:3d:40:9e:29:43:
17:c5:3e:6a:72:aa:53:92:a9:ee:0c:bb:a5:b3:d3:
ca:bd:39:a9:5a:a7:17:d9:02:0c:e3:f2:f2:9b:b9:
f8:34:d8:73:38:8d:27:43:2d:df:49:e6:4d:f9:69:
4d:56:dc:a6:c1:e9:19:29:ad:8c:bb:50:45:9d:29:
a3:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:82:3D:17:7F:8D:DE:3E:BD:AC:E8:8F:02:46:7D:A0:A8:70:07:93
X509v3 Authority Key Identifier:
keyid:E3:A7:4A:BC:B1:38:2C:22:B9:1A:D4:07:FD:43:39:AB:8B:A8:1B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46dKvLE4LCK5GtQH_UM5q4uoG4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/f91ea8-7eea-44fb-af27-5c086ddc9a26/1/46dKvLE4LCK5GtQH_UM5q4uoG4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:bf:d5:4e:98:e7:dc:84:74:14:34:8e:da:61:8d:61:26:48:
71:7f:3e:a2:f9:6f:76:31:f3:40:37:0a:8d:88:49:16:ab:48:
4b:98:74:2c:2c:21:7f:a4:e7:f3:2e:fa:f6:b0:31:ef:de:7a:
06:51:d7:bf:7c:4a:cb:e5:00:ea:c9:12:13:d7:b0:43:d4:50:
4b:cc:2d:39:9b:b0:b4:56:eb:b3:5d:a7:bc:eb:0f:87:35:32:
c0:df:36:7a:a5:e3:b6:17:e2:bc:73:b9:3f:44:c5:2c:41:a9:
bd:02:4d:38:e8:ae:85:e1:c6:b6:a4:9c:d1:15:e7:67:0f:f8:
b1:2a:f4:ad:f3:69:9b:5d:92:31:e6:b2:67:35:4a:8e:f2:da:
65:d6:1d:84:9d:62:b1:95:3b:d2:0f:00:25:25:c8:af:77:7d:
b6:1e:4b:77:ff:12:68:b9:c0:ef:7a:e1:ba:fc:e4:03:91:ed:
87:23:a5:60:31:04:4f:ec:c7:e8:6d:fc:3a:b4:bb:4c:68:8c:
a2:90:99:86:82:0f:c2:37:c8:c2:a2:ee:9d:8d:62:0e:8b:32:
3e:f5:5b:08:57:bc:17:e6:e2:40:be:fd:f1:58:39:af:57:32:
2b:34:b7:7e:01:ea:7f:ed:0d:03:3a:00:ec:1d:cd:9e:48:09:
1d:17:ad:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:01:48 2025 by rpki-client