Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: LSXWTDVjh0vHyJkD0x7XgEiOTeuUxe+epyQ7Ulx5XEU=
Subject key identifier: BA:70:0C:67:B6:40:13:99:E8:D9:6C:CA:D8:5A:CD:8D:EA:5D:93:0E
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 0197B70F28CEC171BC3A814B2C33301D567D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 1509
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: P51Bu0rYo6QMFLQnKKUxz3+qvFiAWcWXa176NyoL6kY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:28:ce:c1:71:bc:3a:81:4b:2c:33:30:1d:56:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=ba700c67b6401399e8d96ccad85acd8dea5d930e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:26:cc:ee:a3:13:8e:f4:33:e5:91:44:db:97:
b8:29:41:69:12:aa:6e:40:7d:e7:73:7b:ec:e2:44:
33:54:a9:fd:2a:54:53:30:78:45:80:cb:d3:5a:2f:
4b:e8:78:c6:aa:8a:4e:34:67:b2:44:20:d2:3d:ea:
6c:bd:1a:7c:62:52:ee:44:83:29:65:c8:49:dd:13:
44:56:c5:c1:8c:f0:f5:20:82:7b:53:18:6b:ec:55:
e0:77:89:d1:82:f7:d1:e2:4d:ef:74:96:e9:36:1c:
23:74:de:46:25:e9:b0:c2:da:9f:ec:ed:2c:53:45:
da:d7:50:89:40:ce:52:4c:c0:40:ff:ab:0c:23:6e:
df:b2:a4:6b:ba:eb:4b:7b:04:ed:98:13:5d:e0:b5:
7a:44:b5:d5:5b:fa:6e:b1:e0:31:fc:ca:5c:c0:c1:
40:cb:69:52:65:8a:5a:25:ad:c2:83:4a:23:19:e7:
65:99:a8:70:01:4c:c9:7d:b0:36:32:96:f1:2b:e1:
e3:db:9b:2c:bc:3a:0d:9a:ed:1c:63:e8:49:b7:eb:
2b:9a:48:6b:2a:6c:11:8d:72:5b:bd:b8:f6:f8:90:
3c:58:b8:5d:3d:5f:d6:c8:cb:51:64:fa:71:1d:d2:
34:40:97:c6:0b:73:40:51:b7:da:16:4c:15:69:2b:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:70:0C:67:B6:40:13:99:E8:D9:6C:CA:D8:5A:CD:8D:EA:5D:93:0E
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:79:cb:71:ed:99:05:b6:2d:17:d7:86:11:71:5c:16:53:84:
d5:b8:83:4f:92:1e:05:4d:06:5a:c7:13:ac:a5:b3:92:96:f7:
12:b5:b3:90:9a:80:10:4f:f3:8c:b2:d0:a2:8c:f4:95:97:79:
b7:31:e2:67:e1:e7:c2:8d:3f:1f:ce:6d:59:f5:8c:71:ae:8a:
85:d5:e3:98:b4:67:05:04:14:48:01:42:47:d1:2b:ed:5f:d1:
af:10:8b:bd:1a:5d:91:34:a7:5b:e6:32:2d:0b:f7:95:09:24:
a9:2d:52:59:5b:e8:32:e3:85:fe:25:64:0c:76:4f:ba:89:c2:
be:ff:06:b1:af:01:a4:0c:ba:1d:0f:61:aa:a8:f9:1d:7b:c4:
21:02:51:bd:65:b3:d2:6c:49:37:24:5c:80:09:2a:95:a3:57:
b6:4e:a0:30:b2:a4:8c:5a:b6:f4:b7:12:55:a1:3e:6f:d6:64:
ff:3c:1b:e9:72:58:26:18:4e:b4:d2:e1:b2:d4:02:89:bf:a2:
5b:6c:b2:d1:66:54:ff:ef:44:cc:b5:25:55:91:e2:b9:d6:27:
45:6f:b7:cf:f4:f1:a6:5c:9b:79:74:4f:47:06:c7:11:46:5f:
f5:39:fe:07:92:e5:2e:07:2a:45:99:92:c0:21:4b:23:e4:76:
96:08:94:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:37 2025 by rpki-client