Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: DwzX6kthWqZgW7R0WBumNJEfNSj2hxobWZax/r0nGw0=
Subject key identifier: AE:0F:3A:40:27:F0:B3:A2:0B:73:56:06:C1:F6:DB:A9:C6:E3:E9:A1
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019A041183F1B015337A0AF744F91CD84B66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 163A
Signing time: Tue 21 Oct 2025 00:00:47 +0000
Manifest this update: Tue 21 Oct 2025 00:00:47 +0000
Manifest next update: Wed 22 Oct 2025 00:00:47 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: +b/Tl3Hy222/6EYmW7aXqAVxwYrAoIzvXgLm2EhuHhU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 22:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:04:11:83:f1:b0:15:33:7a:0a:f7:44:f9:1c:d8:4b:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Oct 21 00:00:47 2025 GMT
Not After : Oct 22 00:00:47 2025 GMT
Subject: CN=ae0f3a4027f0b3a20b735606c1f6dba9c6e3e9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:81:0d:de:8c:56:68:0f:f9:6b:7c:df:54:55:
ba:ad:6f:94:6d:4b:4e:4d:fb:3e:c6:ac:cd:f4:02:
18:4c:fb:0c:91:38:da:84:a5:3f:93:fd:11:d7:14:
d2:b4:40:85:a2:66:54:41:18:7c:53:97:27:e8:8e:
bd:42:53:1d:8b:84:6d:39:0a:b5:50:68:1b:3f:7a:
d5:d9:8a:35:96:1b:b4:a6:56:22:b8:a4:71:9d:55:
0c:bc:94:f0:f9:06:79:b0:b4:47:6c:13:7b:c6:6a:
02:c1:56:4e:42:f0:4e:8a:90:30:8a:52:31:fb:e7:
99:b9:b0:99:41:ae:76:9e:91:45:d8:19:e8:a6:65:
81:62:16:0e:e9:1e:8d:0a:97:7b:ad:9c:5f:6c:f6:
a8:9b:64:f8:58:59:2c:1d:56:a4:eb:fb:7b:fd:62:
f1:3a:25:8d:ef:7f:a1:f7:ed:92:b7:eb:6f:74:48:
9d:78:31:27:38:13:29:37:83:23:f4:a9:8a:20:15:
e1:d2:31:b2:38:72:9b:7b:e2:25:6a:77:38:f7:e9:
3a:44:2d:68:b6:3d:86:2f:02:b7:d7:d4:03:4c:d6:
19:87:51:c3:35:a3:fc:92:4c:ec:07:ef:d0:5b:9f:
d7:02:dc:7d:2c:ee:1a:91:e9:d4:cb:43:c1:9d:50:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0F:3A:40:27:F0:B3:A2:0B:73:56:06:C1:F6:DB:A9:C6:E3:E9:A1
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:aa:5c:5a:3a:44:37:ac:f4:50:dc:47:07:8c:68:1e:39:b1:
99:30:6d:80:9a:97:6a:99:80:73:95:cd:df:34:71:5c:68:9f:
ce:10:2f:e2:69:21:98:ed:9a:56:7b:7c:7f:70:cc:ec:97:8b:
d4:8e:8d:54:2d:14:e1:9e:e9:84:99:3b:b8:9d:36:53:0a:33:
3a:c6:6b:84:19:46:27:3b:44:c5:f1:85:0c:44:1d:af:08:c8:
78:f6:28:db:0e:c8:6f:00:37:18:28:ad:93:4c:96:9a:c8:44:
c4:5b:73:33:4a:7c:88:1c:56:e4:2f:8a:cc:03:ca:26:46:ee:
40:b5:df:d9:3f:3a:35:54:3d:e7:8b:e3:b5:bc:d4:70:8d:91:
e3:8e:07:24:a1:13:bb:bf:20:c1:ed:e4:32:f6:36:07:e5:33:
b6:20:cd:7b:14:57:6a:51:68:f8:d6:88:bb:13:df:70:7f:e9:
5e:88:6c:fd:85:fa:55:9e:87:f0:cf:86:79:70:10:3e:ca:52:
d1:7d:b0:41:95:6b:19:b6:5f:a9:ac:07:2c:6d:e2:73:40:55:
a6:f4:de:5d:7b:8a:35:c6:97:96:b6:c4:87:56:58:79:55:4e:
77:43:b0:e2:76:e0:69:70:f8:90:7b:bf:f8:5d:88:ae:38:cd:
b0:e7:7f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 21 01:37:16 2025 by rpki-client