Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: B+WgB+PQsXnJdTeYX9EiGhv1pOP2vuwoYTP2Tt88mLg=
Subject key identifier: 5B:1E:EE:FC:28:4F:01:BC:B2:77:AE:DB:8C:50:FE:AC:3E:C0:41:E9
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019A022300200440168F2255CB71E4277F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 1639
Signing time: Mon 20 Oct 2025 15:00:39 +0000
Manifest this update: Mon 20 Oct 2025 15:00:39 +0000
Manifest next update: Tue 21 Oct 2025 15:00:39 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: xNdRcmGzXGDYZoMyRJQSpDPzLW3rRsqU/MJhbsqrsRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:23:00:20:04:40:16:8f:22:55:cb:71:e4:27:7f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Oct 20 15:00:39 2025 GMT
Not After : Oct 21 15:00:39 2025 GMT
Subject: CN=5b1eeefc284f01bcb277aedb8c50feac3ec041e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9c:09:63:6c:c6:95:f0:e8:ea:78:a3:26:2b:
36:43:bd:d9:09:03:80:b6:2e:fb:b5:d7:49:3a:37:
d4:9b:ab:80:da:7f:62:6b:9f:fe:43:f5:bb:6a:2f:
d3:6e:3c:0a:ce:69:d7:54:4a:04:35:e9:56:8d:0a:
5e:36:b1:d0:48:0e:64:7d:a3:81:aa:f3:41:d3:bf:
3b:bd:e4:99:62:fe:db:ce:16:b5:65:56:92:9f:2a:
08:35:fb:86:f0:24:30:a6:de:27:33:2a:0d:1c:19:
83:41:f7:52:ab:64:0e:a0:af:a0:fd:48:d8:4f:6f:
3e:55:32:73:07:d3:a9:8d:d2:6b:ee:36:5b:8b:84:
2b:fa:b2:b7:28:3a:76:5b:dc:39:ed:e6:86:29:22:
0f:71:7d:81:f5:48:d8:25:5a:57:3f:4b:ff:a8:62:
ec:1f:e9:35:cf:ac:af:76:d3:6d:29:0b:73:8c:ce:
4c:32:31:bb:83:7c:0e:4e:43:0a:4e:e9:8d:62:56:
6b:d9:6a:4f:f7:7c:05:d6:96:e2:ee:b4:da:22:c4:
1b:44:02:12:37:25:8a:e4:77:20:ff:f3:79:31:96:
b3:8e:06:89:b6:39:63:cd:08:3a:c2:cd:d5:2c:35:
a1:01:4f:d2:dc:34:50:69:88:0d:18:ba:65:7e:e0:
c4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1E:EE:FC:28:4F:01:BC:B2:77:AE:DB:8C:50:FE:AC:3E:C0:41:E9
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a5:10:7e:bd:e8:40:0b:54:87:ba:6d:16:6a:8e:9f:9c:23:
f0:c9:61:1d:1d:06:ea:e2:c5:b7:31:4e:03:d4:bb:c8:e8:36:
23:49:86:96:86:41:a4:59:71:67:16:bc:d9:ef:f4:51:97:54:
a6:f0:c2:e7:0b:b7:d6:49:34:61:ee:16:5e:47:b8:78:c1:fa:
14:51:20:b2:f7:bc:e3:b5:dc:de:a8:53:1b:0e:d5:05:b0:88:
70:3b:8e:9d:42:2d:e8:ef:29:a0:fc:b8:74:71:64:b3:cd:2b:
f9:45:17:3c:fb:1d:61:6c:74:9c:50:05:ec:fd:5f:b1:de:17:
4e:61:65:95:e3:80:43:33:b5:23:85:4f:75:3a:5f:1c:62:54:
09:25:7c:a1:5e:43:bd:fd:cd:55:10:36:b5:f5:eb:a7:a5:1f:
ac:90:d1:b1:1d:b6:3f:4f:56:1f:bb:e6:44:5f:f7:e1:05:0e:
68:e7:fd:33:40:67:1d:8e:6d:ba:34:06:4d:5d:15:44:c4:3b:
bd:1f:d2:77:23:fc:1d:9c:f2:c4:09:f0:8a:74:c5:1f:b6:8c:
e2:fa:99:f2:d7:59:54:cd:eb:85:84:fd:ce:ff:49:35:1b:23:
67:13:ce:ba:73:47:11:75:ee:c6:3b:0a:12:47:b7:da:d4:f7:
a1:9d:13:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 20:59:35 2025 by rpki-client