Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
File: 46GMDHrbmEtfd5d-CAComlHvu2M.mft (raw, json)
Hash identifier: zGAh6+5/a+CBi7kBVHqp3nMkvaY4fLDYEQCs6otMcEk=
Subject key identifier: 0B:68:9D:05:67:4A:97:81:32:29:5B:F7:13:8E:B2:31:8F:04:CF:B0
Authority key identifier: E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
Certificate issuer: /CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Certificate serial: 01976BF46AAF0560C6CA732143267AC852A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
Manifest number: 067A
Signing time: Sat 14 Jun 2025 01:01:09 +0000
Manifest this update: Sat 14 Jun 2025 01:01:09 +0000
Manifest next update: Sun 15 Jun 2025 01:01:09 +0000
Files and hashes: 1: 46GMDHrbmEtfd5d-CAComlHvu2M.crl (hash: m5f+qM6sTbHM7D0HJR4Nmogn4bS38/JY9/JHrPQ3dzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:6a:af:05:60:c6:ca:73:21:43:26:7a:c8:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a18c0c7adb984b5f77977e0800a89a51efbb63
Validity
Not Before: Jun 14 01:01:09 2025 GMT
Not After : Jun 15 01:01:09 2025 GMT
Subject: CN=0b689d05674a978132295bf7138eb2318f04cfb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ff:b5:e9:53:7b:1c:0b:fa:f4:0e:21:9c:e3:
e3:24:14:d1:f4:c6:48:44:ea:0b:14:a2:fa:0b:f1:
5b:2b:de:56:81:03:42:8b:1d:81:5c:4a:54:9e:d3:
00:3e:13:5b:2c:b4:0f:4d:1f:b8:44:06:1a:5b:18:
8b:01:51:61:d3:78:58:0f:af:6a:86:63:0d:a5:3f:
4d:12:68:7a:33:8d:d8:b8:8d:98:89:4a:b3:ae:80:
95:ff:37:73:f0:7a:1c:15:9a:56:22:f8:4f:70:a8:
20:bf:f3:63:00:cf:55:63:5a:06:05:1b:b6:5d:5f:
95:e6:ba:fe:c1:3e:2b:d1:44:ca:fa:9b:c0:6b:21:
16:46:86:3c:4a:8a:a4:3f:f1:67:03:a3:f9:30:69:
7a:d7:e4:ae:69:60:c2:df:ad:13:3f:6c:2f:3f:9e:
99:7f:f8:b0:bf:87:d1:33:3c:b4:51:f4:e5:4b:96:
ce:a1:70:c3:ee:c9:72:4a:f8:18:d1:8d:27:fa:7e:
d8:cc:ca:8b:65:40:f3:9e:be:c9:f7:3d:b4:08:e3:
68:45:01:69:91:fa:fd:77:16:8e:63:0d:8b:bc:c6:
88:2c:07:ed:44:b9:de:32:9f:c4:3d:3a:fc:81:cb:
65:e7:5a:38:cc:b5:bc:3d:f0:be:bf:41:ce:9b:c3:
38:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:68:9D:05:67:4A:97:81:32:29:5B:F7:13:8E:B2:31:8F:04:CF:B0
X509v3 Authority Key Identifier:
keyid:E3:A1:8C:0C:7A:DB:98:4B:5F:77:97:7E:08:00:A8:9A:51:EF:BB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46GMDHrbmEtfd5d-CAComlHvu2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d99f2f-cee1-4024-8208-bcf30260ce60/1/46GMDHrbmEtfd5d-CAComlHvu2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:0f:37:8e:ef:d3:6c:79:34:3e:ec:8d:b2:99:95:84:40:49:
58:7e:c2:9a:b6:2f:ff:a6:6f:d4:e5:4f:ca:cd:ff:05:0a:fd:
75:3a:2c:fe:e6:66:b4:52:7f:ef:ee:1e:29:77:cc:fa:22:75:
51:63:c7:a4:6a:3f:30:58:28:94:54:92:72:f5:9d:5f:5d:41:
4f:4e:b0:67:2f:b6:19:21:b6:0f:fd:2f:06:3b:cc:30:ab:2b:
ae:1b:da:9e:1d:05:88:6b:40:16:05:aa:a8:03:d0:0e:1f:e7:
f0:c5:e8:a1:2d:3b:ff:0d:a8:5f:b0:7b:19:88:5d:43:79:14:
71:28:a6:af:ed:86:19:64:55:5d:42:a6:ff:9d:21:95:ab:a5:
70:03:17:82:29:e1:78:74:91:04:c2:f4:1a:ed:7c:43:95:7b:
c3:3b:bf:0c:4b:64:9e:f6:3c:fb:59:e1:83:28:5a:3b:cb:89:
8c:b1:cb:fa:3f:9a:0c:12:b2:59:05:86:9a:fa:4d:6b:22:e2:
d8:15:7a:3d:81:e5:bb:cd:b7:54:aa:bb:f7:f7:0f:5a:95:ce:
cf:9c:5e:56:cc:83:ec:eb:8c:99:d3:a8:0f:89:bd:81:e0:87:
51:49:ed:9a:b3:ff:1c:8b:b5:3c:41:25:88:18:aa:8c:c1:9d:
77:bc:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:12:43 2025 by rpki-client