Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: YPEM2IBj6ZAD+5bfJ5T+tRCmk+6PgQuHCpngQ9HRyw0=
Subject key identifier: 1D:B5:92:67:F0:C7:43:1D:34:3B:31:A6:85:9E:01:98:47:B5:2C:69
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 0198D6CD7AE9BED71754A7428167C375921D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 159E
Signing time: Sat 23 Aug 2025 12:00:47 +0000
Manifest this update: Sat 23 Aug 2025 12:00:47 +0000
Manifest next update: Sun 24 Aug 2025 12:00:47 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: Jpt1qik72gMLnM8/8q15We3ntwEOgmKGHNA4Sk3k6ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:7a:e9:be:d7:17:54:a7:42:81:67:c3:75:92:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Aug 23 12:00:47 2025 GMT
Not After : Aug 24 12:00:47 2025 GMT
Subject: CN=1db59267f0c7431d343b31a6859e019847b52c69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:20:7c:1e:a7:d7:41:2a:d6:04:fa:85:3f:
3c:ef:46:36:24:e1:b3:5f:07:37:8d:d7:9b:94:f5:
1b:24:47:bb:18:d7:bb:6f:35:09:14:78:6a:bc:0d:
b5:58:46:16:f7:3f:d0:d3:30:51:a2:93:1c:28:f1:
dc:a9:fc:8f:59:51:97:40:94:d6:17:1b:53:ab:94:
c9:ac:96:4d:b9:bf:1c:cf:d6:9d:d0:62:75:62:db:
db:a3:ee:29:02:51:31:2a:a8:85:ec:2d:61:6b:8e:
c6:5d:af:99:28:e8:c1:26:b4:07:55:78:58:86:ef:
82:dc:a3:f7:ba:67:13:56:22:6d:89:95:ac:28:55:
44:1e:54:fc:71:63:fb:ae:f4:86:0f:16:d0:33:ac:
b5:73:ec:22:d5:ea:f1:17:4e:aa:87:db:4e:f6:42:
0d:0b:31:ea:72:41:13:9a:d1:01:5f:d8:25:75:75:
c0:ba:38:4e:a3:5d:13:da:b6:bd:f1:cd:67:8b:b7:
fd:d2:a8:b2:3c:32:d4:ef:1b:c7:15:8f:07:35:e6:
43:ec:0c:b2:19:a2:46:09:ee:38:80:b5:27:1c:a6:
39:0f:ba:c8:c3:44:3f:90:44:7e:a8:b0:24:23:b0:
0c:7d:72:b6:22:13:57:d2:56:f3:86:30:5c:d8:de:
48:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B5:92:67:F0:C7:43:1D:34:3B:31:A6:85:9E:01:98:47:B5:2C:69
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:88:fe:77:49:b1:ad:17:cb:2c:56:fc:8e:57:4e:ca:2d:1e:
14:36:9b:c6:f5:d2:16:27:e0:6c:de:23:a1:82:30:60:7a:e1:
74:04:f2:d9:6e:55:5e:6c:4a:15:28:84:85:47:56:49:59:ba:
37:b0:0c:ab:f4:b4:cc:20:69:18:8e:e1:93:50:76:cf:6c:f5:
c8:f6:1e:a3:cd:81:3b:33:91:9b:31:f3:b6:e0:04:f6:4c:c1:
4d:f4:d6:97:7a:8e:98:da:66:e1:46:43:1d:4b:89:3e:d4:e6:
b7:80:12:db:24:c4:05:09:19:a9:2c:73:bb:f7:f7:79:08:b5:
01:49:6c:28:c9:9b:fa:ec:65:10:96:a8:5c:1a:25:3f:25:43:
1a:9d:4a:5e:52:e4:b8:20:17:cf:b3:e0:60:8f:21:de:07:b9:
a0:e7:d1:56:2d:e8:4a:51:d7:dc:62:93:c3:06:d5:32:94:b8:
25:41:df:27:cc:e0:ab:cc:8d:79:9c:be:55:ee:04:19:a2:d7:
26:e8:c0:df:f5:c5:79:80:09:65:70:b0:ef:b2:9e:d7:de:b8:
36:aa:dc:96:cf:0a:65:16:1c:fd:b8:7c:21:a8:b8:08:24:3b:
1a:2d:0a:f1:43:2b:f1:2c:58:15:79:f4:60:01:1b:c4:52:e4:
d8:0d:3a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:20:44 2025 by rpki-client