Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier: cr1TZ5xpS+6CkRERn/LhbVZSHGBpXU/5lweQe1jbZd8=
Subject key identifier: D8:38:36:87:EF:D0:23:05:8B:AC:CD:15:C2:83:1F:A7:11:B2:EE:A4
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 0198D40497B20E077266631E91A9EBAA683F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number: 1648
Signing time: Fri 22 Aug 2025 23:02:07 +0000
Manifest this update: Fri 22 Aug 2025 23:02:07 +0000
Manifest next update: Sat 23 Aug 2025 23:02:07 +0000
Files and hashes: 1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: LS/ecV1C3ovjlVWdqiVr9oyMUyj5EiV8q4cPp0EXwo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:97:b2:0e:07:72:66:63:1e:91:a9:eb:aa:68:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Aug 22 23:02:07 2025 GMT
Not After : Aug 23 23:02:07 2025 GMT
Subject: CN=d8383687efd023058baccd15c2831fa711b2eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:8b:0a:7b:f8:16:7c:b7:fe:d7:63:af:b8:
c2:94:4b:ee:7c:f2:ff:14:47:c4:68:58:db:3b:9d:
fd:3b:3c:23:cc:62:55:64:d1:20:20:b9:81:9a:81:
38:03:84:0b:77:e6:ca:06:ff:60:22:17:fa:35:3d:
f8:ce:de:c3:70:81:7f:01:90:dd:a3:9c:87:80:8f:
c5:15:08:c4:a3:86:59:2a:fd:05:36:fd:0a:59:ff:
d4:ec:a6:9d:db:24:6a:c2:67:ff:73:68:48:e4:87:
a1:87:93:f1:a3:bb:99:9e:83:bc:c7:1b:f3:5e:66:
8e:8d:8a:67:24:d9:9d:28:8c:f1:ce:a3:50:29:d1:
14:90:c5:28:58:72:be:fe:0b:d1:a3:4c:42:a5:4f:
9f:b7:a7:40:a5:13:5b:01:7c:96:55:e8:35:3d:f1:
f6:1f:5b:d3:79:53:fb:c9:62:dd:11:15:03:25:6c:
ca:9e:59:2d:6b:fa:85:84:87:62:a7:2c:eb:2a:df:
9d:29:32:4a:21:57:36:5d:12:dd:ca:69:f8:69:84:
72:e8:e0:77:a2:9b:9e:17:16:78:61:b4:b4:27:6a:
b1:22:55:ba:06:00:75:03:e6:5c:9c:e0:48:f8:28:
30:19:d5:20:bf:22:f1:02:e6:d8:c4:03:73:a7:c9:
62:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:38:36:87:EF:D0:23:05:8B:AC:CD:15:C2:83:1F:A7:11:B2:EE:A4
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5e:c1:07:f7:cc:b1:a0:53:07:7f:ad:80:c5:20:52:f2:34:
71:69:2c:b6:8d:24:80:8c:69:2c:18:75:84:5a:0b:3c:19:44:
cd:8f:01:24:80:83:25:eb:21:06:2f:3d:64:55:1c:65:f1:a9:
a9:de:e4:b0:f5:c3:9f:28:c8:55:97:25:26:a1:35:13:5d:5b:
94:f1:7a:ff:84:ec:93:18:78:f4:33:66:08:38:5a:92:f9:8f:
d9:23:74:df:07:d2:18:b7:d0:b7:15:2c:87:42:cd:74:f6:b8:
eb:9b:f7:2c:99:e2:b1:42:83:50:a1:d6:16:0f:83:a0:7f:66:
53:c9:02:a7:d8:b4:1e:ab:1d:44:bd:0c:fc:f8:ca:d0:8b:d9:
51:59:a8:43:5c:f4:79:32:fe:e2:77:bb:86:c2:ea:67:44:fa:
d2:87:87:e3:2c:d7:8f:bd:ce:b4:2c:69:17:2b:f5:49:5c:59:
57:00:71:61:59:27:e7:7c:15:bf:0a:5d:ea:60:30:50:e6:10:
16:c7:e4:79:e7:93:82:dc:9f:e3:f8:40:95:51:1c:82:0c:ea:
b3:9f:62:0c:d2:d9:3a:c7:3d:04:46:c8:66:aa:63:e8:4a:0a:
4d:0c:59:52:d6:3a:be:52:87:ab:37:42:46:cf:c5:e7:a8:56:
4e:25:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:39 2025 by rpki-client