Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
File: 46xjX9RfVHHGwsP-Re8btDOLwnk.mft (raw, json)
Hash identifier: uphlqHj2lYnes8Af0MP72p/f9iU184enlebktDlvnwc=
Subject key identifier: D0:C0:BC:9C:A2:BD:CE:61:18:4E:A9:0C:FB:F4:58:48:70:AA:8B:67
Authority key identifier: E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
Certificate issuer: /CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Certificate serial: 01967831B0B3D1ABCE1B5200A0D565283A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
Manifest number: 14A3
Signing time: Sun 27 Apr 2025 17:00:44 +0000
Manifest this update: Sun 27 Apr 2025 17:00:44 +0000
Manifest next update: Mon 28 Apr 2025 17:00:44 +0000
Files and hashes: 1: 46xjX9RfVHHGwsP-Re8btDOLwnk.crl (hash: Lo1P/+xwc0VNX6C2lfFrsosI6y6zmBThVmTwEajti28=)
2: kM9y4GrDXnCdNW0cB_r7lGW0ZiE.roa (hash: zTejL3tH1JMvgJP62ZpXEO3alzMxsTDuTLqKj9I1/dA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:78:31:b0:b3:d1:ab:ce:1b:52:00:a0:d5:65:28:3a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ac635fd45f5471c6c2c3fe45ef1bb4338bc279
Validity
Not Before: Apr 27 17:00:44 2025 GMT
Not After : Apr 28 17:00:44 2025 GMT
Subject: CN=d0c0bc9ca2bdce61184ea90cfbf4584870aa8b67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8f:16:21:bd:d1:2b:08:6d:71:f5:eb:23:5b:
fe:4e:c2:d2:53:f1:1b:95:94:b2:b4:ca:80:e2:59:
4e:14:08:74:6a:79:83:e2:e3:9a:d5:fc:29:dd:36:
85:8f:4d:3f:8a:cd:75:21:1f:95:a0:1d:51:2b:54:
67:4f:ec:db:7d:12:e8:a1:58:af:9d:4a:3c:da:24:
49:c9:9d:0f:ae:5e:b1:6a:78:fe:dd:f2:a9:6a:24:
f7:74:f2:87:ea:42:f3:92:22:8a:37:d3:1e:f5:8e:
51:70:14:19:69:5d:89:85:ce:f9:39:db:46:c9:b5:
85:9a:a8:fd:a3:6a:52:96:a8:26:8d:f7:86:33:d6:
94:56:f2:78:d9:ac:3a:50:3d:69:a4:5a:6f:8d:6a:
0e:ea:8c:12:33:2e:b6:8a:f3:25:ae:91:fb:f5:e4:
b6:0a:7a:b6:cf:f6:91:1d:cb:a9:8b:04:f9:c6:8b:
bd:e9:04:8c:f8:06:0a:11:27:c9:ed:10:86:e7:86:
6d:8f:c9:35:ec:14:e6:85:2a:1f:e4:31:bb:95:13:
df:35:6d:ce:60:86:28:49:58:ef:f5:a6:d8:96:cc:
b6:de:8f:49:c0:d7:1a:08:13:08:cc:5d:c4:89:eb:
27:05:b0:6d:40:1f:6e:b4:5b:77:d6:4a:4a:27:1b:
ab:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:BC:9C:A2:BD:CE:61:18:4E:A9:0C:FB:F4:58:48:70:AA:8B:67
X509v3 Authority Key Identifier:
keyid:E3:AC:63:5F:D4:5F:54:71:C6:C2:C3:FE:45:EF:1B:B4:33:8B:C2:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46xjX9RfVHHGwsP-Re8btDOLwnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/46xjX9RfVHHGwsP-Re8btDOLwnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:ee:29:50:4b:ce:c7:c6:e8:31:9a:b2:9a:09:db:4b:57:e7:
33:79:17:53:60:7b:a3:f7:80:07:d1:1c:a1:da:93:9a:a4:34:
2d:0f:d1:a5:2f:f1:77:2b:f5:b4:9f:2b:cb:cd:e2:39:ab:37:
33:1b:f7:85:5d:d2:10:38:1d:3f:32:29:d3:75:77:6f:30:9b:
de:ee:97:51:dc:80:ea:7a:2c:55:71:a2:b9:d1:0f:02:98:fc:
27:72:f8:4d:86:58:85:95:3c:e0:a8:a2:41:58:4f:55:dd:58:
86:20:64:46:4f:fd:62:0f:2c:98:07:95:b4:b4:a5:2d:b2:15:
52:20:72:75:fe:b3:8e:1a:82:c8:ef:ca:c2:b0:57:3c:45:dd:
0b:09:77:61:88:0a:08:85:9a:db:29:f1:67:33:6e:e4:26:1d:
f8:e1:80:94:ab:7a:2f:7f:80:cb:b5:b9:94:bb:cf:22:c9:d2:
06:ed:50:67:65:43:48:f8:4d:e0:c6:ec:c8:48:1e:22:86:7b:
c3:16:dd:9c:c0:6e:2b:78:35:be:48:f0:5e:66:64:8e:77:3c:
0a:87:3e:ee:28:32:6f:36:db:b2:93:ef:c3:e9:f8:5c:72:e2:
01:93:2e:77:24:d7:8c:1d:0c:43:d3:4e:a8:c1:de:ab:78:d7:
9d:c2:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 03:36:49 2025 by rpki-client