Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: suxKs6BlmGRIKtQ+oLZAdW6Q0vG69bgF1yqFZ/zSwQg=
Subject key identifier: 37:5F:69:A2:B4:43:B4:7F:A8:97:E9:D1:48:DD:E4:13:AD:2C:CA:2F
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 019A4F99501CA533D18BCE062A87480B7D58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 07F9
Signing time: Tue 04 Nov 2025 16:00:38 +0000
Manifest this update: Tue 04 Nov 2025 16:00:38 +0000
Manifest next update: Wed 05 Nov 2025 16:00:38 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: GC1dqT3G3x2iJrsRFpYOtCzYqD6J77rCnsIE4QTP9xI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:50:1c:a5:33:d1:8b:ce:06:2a:87:48:0b:7d:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Nov 4 16:00:38 2025 GMT
Not After : Nov 5 16:00:38 2025 GMT
Subject: CN=375f69a2b443b47fa897e9d148dde413ad2cca2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:41:7f:ea:25:70:fa:1a:1d:77:c9:32:b4:91:
51:6f:cd:cf:5f:5a:78:70:1e:fc:27:57:3a:10:9d:
3f:69:9b:87:7d:5b:9a:e9:6d:ab:f7:f7:e7:51:78:
63:ed:89:d5:92:c6:75:f5:f2:42:83:9e:fa:cb:f3:
5e:05:f5:79:77:7b:53:d1:6b:7b:11:73:37:f9:77:
a5:8b:6a:bc:24:fa:60:e3:06:60:b8:c4:ff:0f:a7:
be:9c:66:18:00:b1:cc:9a:da:5b:53:df:31:27:1a:
17:96:58:d0:4a:be:a8:20:a9:2a:d0:48:7c:20:94:
08:12:b6:e6:a6:12:13:07:21:98:89:50:d9:bc:f3:
72:77:87:2b:00:18:d4:a6:05:03:61:15:b0:e6:04:
9a:c0:a7:7f:c6:d8:7f:1b:61:2f:94:ed:37:40:0d:
8b:1b:24:f4:ca:87:d2:1b:fa:1a:94:a7:84:52:f7:
dc:3d:5b:ec:46:89:4e:1e:a4:13:46:69:85:99:03:
72:86:60:1d:44:c7:8d:b6:1f:40:4e:2a:bd:82:ee:
c4:ee:ec:3d:ea:a7:af:2a:d6:13:1a:c5:1e:23:af:
f5:cf:2d:bf:e8:40:b5:1f:25:67:c9:4b:24:9e:c4:
21:fe:6f:c1:ee:e6:9f:51:42:0b:03:1c:17:e4:1f:
cc:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:5F:69:A2:B4:43:B4:7F:A8:97:E9:D1:48:DD:E4:13:AD:2C:CA:2F
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:93:5c:f9:4a:ce:06:f4:3f:48:d1:f3:71:b6:94:6e:82:73:
95:66:0c:ed:28:37:b8:c0:ec:3e:26:1a:72:fb:42:89:f7:5a:
67:31:04:d7:96:15:e3:6c:a9:cb:eb:3f:e2:5a:56:ff:d5:2b:
98:94:6a:1f:ae:20:ff:fd:87:78:50:00:5b:0b:c7:f7:63:c0:
30:59:8e:4b:f9:9e:cc:6f:f5:15:ee:01:b5:2f:b4:2d:ad:b7:
30:a9:7e:d8:ba:52:9f:0d:e8:2e:b3:8e:20:83:4d:85:e0:f0:
30:04:e0:5f:ab:30:84:81:fc:19:15:23:35:4e:f2:d2:a8:72:
bb:c7:fc:0f:c5:b6:10:e0:e5:f9:2c:53:d7:72:19:17:7f:f9:
03:13:a3:9c:3b:c5:2e:7c:1f:b1:d4:a1:1f:9d:c5:dc:67:cc:
1b:74:a5:a7:d9:2b:72:ec:cb:8c:74:0a:a3:f4:d8:71:e5:fb:
8e:9c:ec:83:51:92:14:6f:25:4a:2a:cf:88:18:d3:b3:96:2c:
73:d5:df:81:b9:5e:69:1f:8e:84:d4:8e:ac:4e:70:e6:02:11:
d0:ac:11:87:01:3c:bb:e4:68:94:37:9a:5e:0a:89:ef:7b:e7:
8f:7d:24:fd:75:52:39:b0:bf:ef:69:6d:93:ec:57:a4:0a:60:
95:33:00:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:19:43 2025 by rpki-client