Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: Y1Z/LTpoRrvZh01O+kTlZQc5zu7AU+rYvwUl9Zu4Rac=
Subject key identifier: E3:FB:56:B6:6D:77:40:D8:1E:57:87:9D:00:DC:CF:34:3D:65:42:21
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 019A56E4E9ED18E052413D96C0BD030CB146
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 16A4
Signing time: Thu 06 Nov 2025 02:00:33 +0000
Manifest this update: Thu 06 Nov 2025 02:00:33 +0000
Manifest next update: Fri 07 Nov 2025 02:00:33 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: DgniXhjY4b6xsSvELhWZMnhKyuEsCpLeWRo6GfDqwW4=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 21:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:56:e4:e9:ed:18:e0:52:41:3d:96:c0:bd:03:0c:b1:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Nov 6 02:00:33 2025 GMT
Not After : Nov 7 02:00:33 2025 GMT
Subject: CN=e3fb56b66d7740d81e57879d00dccf343d654221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:81:97:c8:6a:e7:24:ba:54:a2:85:96:75:
f8:a0:9c:ca:51:c4:61:cd:3c:75:c0:57:a0:9e:7a:
37:10:a5:d8:5f:90:b0:8c:60:6f:63:78:bf:16:7b:
ac:14:29:fd:e0:e3:59:6e:eb:7a:c3:24:8b:d6:96:
f2:9c:5b:bc:9f:a9:57:3b:c1:dc:59:85:48:e9:c6:
1b:51:39:73:b4:25:64:eb:79:64:e6:bd:dc:cb:d4:
03:9d:49:1c:f0:ce:ce:37:1c:b5:ca:e9:0e:d9:92:
48:8a:20:8e:a0:d3:86:8f:be:25:6a:a2:86:54:55:
7b:bb:35:72:f9:4c:ae:6f:04:75:7f:33:c2:3d:a3:
5a:eb:55:05:bf:46:52:51:10:d0:35:85:0b:f4:63:
33:0a:2d:5c:d5:7c:96:f2:60:51:eb:37:3c:7b:47:
b7:0f:5c:b2:54:e8:ff:b7:c7:57:d0:24:b9:f3:07:
98:37:b0:7b:b3:99:ff:eb:42:f8:67:bd:14:7e:0c:
51:2a:a8:b2:ad:b4:28:f1:72:f1:6f:dd:e6:bc:2b:
38:78:77:0a:ef:a0:4a:e1:11:fc:b6:bc:bc:c4:cd:
dd:0a:e3:44:a4:bf:99:7c:89:3b:a0:d8:66:52:36:
12:15:b6:7a:b1:9d:65:80:39:f2:b8:f7:03:a1:3e:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:FB:56:B6:6D:77:40:D8:1E:57:87:9D:00:DC:CF:34:3D:65:42:21
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:b8:c3:3c:e3:89:e9:90:a5:00:3b:0e:b4:98:70:19:e3:
e3:39:06:58:d8:29:82:6f:99:a0:e3:a7:35:43:89:f8:2b:0a:
8c:af:d1:75:f4:5f:05:16:15:c2:1d:fa:3d:b0:6d:bb:64:af:
f7:b1:d8:af:9d:05:a5:65:db:dd:52:ca:c2:3a:bc:2c:6c:af:
c7:c2:b7:37:69:e7:8d:ea:16:10:2d:2f:c9:3e:06:fc:bd:67:
60:96:0b:69:0f:6c:df:54:5f:27:ae:94:c8:88:eb:a1:5d:a7:
80:c6:ec:d5:f7:73:ce:64:ae:f6:37:ae:88:21:34:95:8c:50:
0d:74:ed:4a:36:bf:37:0a:0d:35:eb:51:2b:05:21:1a:cd:a1:
14:fc:1a:05:46:e1:9b:bd:d1:84:22:74:9b:33:86:d0:7f:cf:
a8:5d:41:eb:8e:e0:95:94:4f:92:14:85:50:e9:f0:84:88:1f:
80:37:c3:c5:34:7e:7e:ad:5a:6c:fd:f7:61:d2:e5:fb:85:a1:
0f:d5:57:70:fe:b7:8c:45:57:0e:13:07:67:a4:bc:4c:d3:f5:
d4:d8:05:e7:a3:a9:16:d5:d4:e0:40:67:d0:e9:96:e6:55:58:
3d:d8:d0:8c:71:5e:db:db:c4:4b:d4:2f:3d:3c:ef:5d:5a:2d:
eb:51:0a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpW5OntGOBSQT2WwL0DDLFGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzYWM2MzVmZDQ1ZjU0NzFjNmMyYzNmZTQ1ZWYxYmI0MzM4
YmMyNzkwHhcNMjUxMTA2MDIwMDMzWhcNMjUxMTA3MDIwMDMzWjAzMTEwLwYDVQQD
EyhlM2ZiNTZiNjZkNzc0MGQ4MWU1Nzg3OWQwMGRjY2YzNDNkNjU0MjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+6Bl8hq5yS6VKKFlnX4oJzKUcRh
zTx1wFegnno3EKXYX5CwjGBvY3i/FnusFCn94ONZbut6wySL1pbynFu8n6lXO8Hc
WYVI6cYbUTlztCVk63lk5r3cy9QDnUkc8M7ONxy1yukO2ZJIiiCOoNOGj74laqKG
VFV7uzVy+UyubwR1fzPCPaNa61UFv0ZSURDQNYUL9GMzCi1c1XyW8mBR6zc8e0e3
D1yyVOj/t8dX0CS58weYN7B7s5n/60L4Z70UfgxRKqiyrbQo8XLxb93mvCs4eHcK
76BK4RH8try8xM3dCuNEpL+ZfIk7oNhmUjYSFbZ6sZ1lgDnyuPcDoT7yMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOP7VrZtd0DYHleHnQDczzQ9ZUIhMB8GA1UdIwQY
MBaAFOOsY1/UX1RxxsLD/kXvG7Qzi8J5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAt
MWQyMzQ4ZGJkMDM2LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy8yZjg3MGUtMmJhNS00Yjg4LTkxYTAtMWQyMzQ4ZGJkMDM2
LzEvNDZ4alg5UmZWSEhHd3NQLVJlOGJ0RE9Md25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2y4wzzj
iemQpQA7DrSYcBnj4zkGWNgpgm+ZoOOnNUOJ+CsKjK/RdfRfBRYVwh36PbBtu2Sv
97HYr50FpWXb3VLKwjq8LGyvx8K3N2nnjeoWEC0vyT4G/L1nYJYLaQ9s31RfJ66U
yIjroV2ngMbs1fdzzmSu9jeuiCE0lYxQDXTtSja/NwoNNetRKwUhGs2hFPwaBUbh
m73RhCJ0mzOG0H/PqF1B647glZRPkhSFUOnwhIgfgDfDxTR+fq1abP33YdLl+4Wh
D9VXcP63jEVXDhMHZ6S8TNP11NgF56OpFtXU4EBn0OmW5lVYPdjQjHFe29vES9Qv
PTzvXVot61EKJw==
-----END CERTIFICATE-----
Generated at Thu Nov 6 06:11:13 2025 by rpki-client