Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier: LUhxrpVn0Q2XuVpJeai44hs2AVgrzCv1N1KVHmbQH68=
Subject key identifier: 0A:39:7A:BF:55:4C:B5:BD:5B:30:87:6C:60:9E:0C:A1:FA:7A:81:FC
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial: 0197B7453690105BFB6F7804EEC2CBA730C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:55 +0000
Manifest this update: Sat 28 Jun 2025 16:00:55 +0000
Manifest next update: Sun 29 Jun 2025 16:00:55 +0000
Files and hashes: 1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: tazYHbGjuAX0mf7nDDcrhAyxQoq26yaxBjd8l5e2ogc=)
2: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (hash: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:36:90:10:5b:fb:6f:78:04:ee:c2:cb:a7:30:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
Validity
Not Before: Jun 28 16:00:55 2025 GMT
Not After : Jun 29 16:00:55 2025 GMT
Subject: CN=0a397abf554cb5bd5b30876c609e0ca1fa7a81fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:89:bb:5b:af:1c:be:1d:5c:28:83:ee:83:8c:
ac:89:67:ad:bf:85:e6:ad:52:ee:86:a0:18:8a:a7:
c2:c8:cf:95:bb:6e:43:58:f9:01:e6:ae:b9:64:37:
99:e3:60:43:4f:78:e1:02:c8:40:bd:38:fd:25:13:
17:ce:c6:93:21:22:72:89:18:db:a3:d2:db:12:eb:
07:b2:5e:c6:fd:9a:92:21:88:89:06:cd:d4:0a:6d:
d1:1b:22:d5:7d:5b:df:0f:28:c8:5e:9c:7a:4f:6a:
84:ee:ae:cb:28:7c:d6:b4:3b:fd:59:59:4e:2e:2e:
9f:26:e1:ff:ff:b6:07:3a:a8:2a:ff:b0:c1:f4:85:
b2:ee:9c:89:e4:12:bf:b0:65:ee:9a:3d:e4:af:63:
2d:ff:66:69:08:71:bb:24:49:5c:4d:9a:4f:3e:b5:
f5:1d:0a:c4:91:65:a5:04:db:34:19:c1:5c:a9:0f:
a2:33:40:c9:6c:f5:73:98:d9:9d:e8:e9:fd:59:2f:
a3:f1:a5:5c:a9:98:67:f7:c0:3c:09:6d:52:93:24:
22:50:a0:81:3b:fc:b8:bb:14:b1:a2:82:d2:8d:95:
3b:0e:c2:a7:4a:8f:46:00:b5:a8:a5:d0:bc:a6:13:
c5:86:cd:0b:d9:fa:95:16:4c:03:75:84:d7:09:c7:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:39:7A:BF:55:4C:B5:BD:5B:30:87:6C:60:9E:0C:A1:FA:7A:81:FC
X509v3 Authority Key Identifier:
keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:eb:11:37:df:ba:3e:b0:d8:0e:95:09:0b:74:d1:eb:bc:ce:
f3:2b:dd:8e:36:0d:ef:b4:8d:6e:5a:01:5d:8e:98:17:5e:f6:
3e:43:83:fa:06:4e:89:a3:80:d5:63:a4:6a:52:e8:9c:97:b2:
38:f1:43:a3:fe:6c:82:a7:8a:a2:8e:e4:56:95:df:2d:e8:64:
46:e7:b3:52:b9:1e:3a:ad:d3:d8:23:c3:6b:67:c2:c0:04:37:
ed:c2:96:d3:8d:74:7f:a3:b2:d3:e5:3a:5c:c4:83:c9:19:de:
cb:61:a1:78:a6:a4:50:17:aa:8b:8e:e3:48:be:fa:a5:95:61:
22:48:88:f8:83:4a:23:cd:a8:7d:d4:e8:69:71:34:c4:70:a4:
43:b8:aa:8d:a7:db:17:30:b7:bd:2b:e7:a4:b8:1b:79:a2:a1:
df:c4:9d:55:fa:ab:67:a9:f1:8c:9d:82:59:94:38:17:c4:90:
b7:ce:57:96:f7:24:f0:7d:44:77:2c:30:62:c9:28:4e:27:48:
6c:e9:9d:3a:0a:07:77:dd:07:8e:54:cf:f6:9e:c3:dc:96:9c:
73:17:ca:57:bc:b0:29:c6:30:1e:47:c4:48:52:26:8a:76:15:
b2:28:18:af:6f:97:04:30:df:82:e2:37:78:ef:61:a2:87:42:
e0:f9:f8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:04 2025 by rpki-client