Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: OAXH96nLy4eB0mRYniAwOAG6PuwATMNi1+gJHh4m2+c=
Subject key identifier: E1:67:7B:95:DB:15:F4:FE:57:5B:9C:06:45:A5:0D:85:8C:60:07:67
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 0199FDD972B26F9FF83D5B00AF8775A4E5C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 19:01:50 +0000
Manifest this update: Sun 19 Oct 2025 19:01:50 +0000
Manifest next update: Mon 20 Oct 2025 19:01:50 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: k65vuQ6rSh+xHXqMwWlvOlwbJ4YN352j48HVjy6bqC8=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d9:72:b2:6f:9f:f8:3d:5b:00:af:87:75:a4:e5:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Oct 19 19:01:50 2025 GMT
Not After : Oct 20 19:01:50 2025 GMT
Subject: CN=e1677b95db15f4fe575b9c0645a50d858c600767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7c:ce:2c:09:c3:2d:98:bf:57:a8:97:81:c8:
4f:87:e4:8f:e8:20:98:d8:08:6c:51:df:7e:4f:e2:
5c:b4:41:f4:0a:0a:8e:fb:66:12:11:97:ac:fb:c6:
0f:d4:e8:3b:ad:10:6a:65:fd:91:fa:58:ee:5f:ef:
2f:0b:92:84:ad:10:e7:66:fa:1c:6e:73:d2:b7:2f:
4e:d5:d1:c9:74:31:8c:82:63:49:c2:7d:b8:e1:d0:
10:1d:04:e2:38:56:81:6a:9f:c7:d2:dd:1f:2c:a1:
72:16:22:f3:cf:47:f5:49:2a:5f:19:81:de:5f:0f:
5f:c5:02:e9:f8:ec:4f:95:99:68:79:49:82:f1:cf:
fb:b7:59:5d:88:09:ef:0e:74:4b:6f:ac:ad:54:43:
4c:f2:96:2b:ff:63:e1:a8:f5:d3:84:92:23:92:30:
2a:9e:fb:3a:98:5f:07:c7:95:1d:93:37:20:27:34:
28:38:02:c8:54:a5:72:a2:17:7a:cc:67:cb:8e:73:
1b:dd:06:d4:07:51:03:78:b0:0e:7d:b9:91:ac:6f:
8f:0e:00:40:ad:04:a5:40:6b:04:cb:4f:67:6f:64:
58:3f:31:cd:02:4e:9d:c7:51:69:e3:82:fd:2d:48:
5e:85:7f:fd:e2:e1:ed:e1:5b:3e:77:9c:c7:c2:f7:
8f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:67:7B:95:DB:15:F4:FE:57:5B:9C:06:45:A5:0D:85:8C:60:07:67
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:68:63:25:0b:ec:eb:b3:cf:ec:69:57:cf:75:f2:7f:7d:28:
01:82:bf:d1:c6:7c:fd:55:e6:83:79:31:bf:30:78:cf:14:eb:
c8:9b:9d:6a:5e:4f:e3:b0:dc:54:c9:8f:74:4a:41:6f:dc:d2:
10:81:49:ba:6e:5b:86:4f:93:50:80:4e:0d:64:d4:78:1e:f5:
24:21:53:85:8d:22:17:41:be:f5:4b:bc:a8:86:62:26:34:b0:
5b:18:96:a7:00:e3:34:22:41:ab:99:47:e9:95:9b:af:2f:6f:
f4:14:29:63:8a:e7:ef:a5:5f:03:87:b0:c0:9a:b1:e9:af:86:
cb:32:70:b2:71:4e:e0:8a:56:b5:42:73:47:db:66:75:48:5e:
33:13:bd:f1:6f:d9:9f:dc:01:ca:ee:63:a0:18:e4:cb:a7:5e:
e4:dc:72:48:c9:71:e2:09:a0:0f:38:58:5a:c0:31:d8:7d:a3:
37:0a:53:91:6f:21:d8:71:d1:97:5f:c0:68:65:07:e5:10:26:
6e:e4:a8:21:be:dd:c8:a3:e5:41:98:d7:66:8c:e6:e9:61:92:
df:31:79:d5:2d:23:37:47:33:67:de:0c:27:e2:74:b1:4a:5b:
1e:9c:66:e2:4f:04:ea:d0:f9:b8:37:74:04:b2:5c:c4:f7:21:
bb:41:2d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:58:57 2025 by rpki-client