Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier: f5/MtsSwusRpZZZvX+3h37NZodt36RhILizDqmP9D5Y=
Subject key identifier: C6:D9:BE:BC:F0:27:A3:DF:0D:EA:CA:23:47:FF:B0:75:09:86:16:3C
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 0199FB7C87BAF075C54E83D842BB9CCFE953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number: 16E1
Signing time: Sun 19 Oct 2025 08:01:06 +0000
Manifest this update: Sun 19 Oct 2025 08:01:06 +0000
Manifest next update: Mon 20 Oct 2025 08:01:06 +0000
Files and hashes: 1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: vaoaz6G0F54i6fKpczeBDMPt73GrdmUZOqz/2lV1j7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:87:ba:f0:75:c5:4e:83:d8:42:bb:9c:cf:e9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Oct 19 08:01:06 2025 GMT
Not After : Oct 20 08:01:06 2025 GMT
Subject: CN=c6d9bebcf027a3df0deaca2347ffb0750986163c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8c:1c:96:4d:d0:2d:08:bf:c6:32:fb:fa:39:
d9:8a:73:56:30:8e:4e:27:93:24:7c:c0:c4:c1:96:
ac:07:3e:4b:8a:8b:ed:f9:21:7e:24:93:44:14:8c:
83:1f:47:bb:62:0d:40:09:ae:ed:09:0d:ee:e1:c9:
02:3c:50:fc:a5:0d:5d:5d:bd:5d:53:90:f5:90:ea:
16:c2:4f:dd:29:ca:7a:2f:52:0f:1b:26:cf:23:85:
25:c3:51:5a:c0:19:d2:fc:40:97:68:a9:93:4b:13:
3f:ba:2b:5b:b4:72:eb:e9:f2:d6:44:fd:5e:d5:10:
ff:a6:74:ac:93:d7:68:b4:34:3f:86:f2:e0:b9:89:
75:c7:e7:8e:95:4b:bb:b3:90:f6:ca:4d:20:b2:28:
6d:8a:bc:0e:2a:bb:ce:0e:b8:64:9b:ba:15:a2:42:
48:f5:e0:2e:0a:e7:71:6f:40:fc:ea:01:73:8c:d2:
00:19:9b:34:48:37:07:4e:41:25:ba:94:83:df:f4:
c4:0c:c0:01:40:f8:37:37:c8:f6:27:97:18:2a:50:
a7:49:7f:47:e9:6c:b2:c7:b1:e0:12:bb:b3:d3:cf:
4c:f9:4c:3c:44:20:08:40:72:26:30:02:fc:71:65:
87:aa:86:ed:ac:25:ac:55:55:3d:33:d5:41:8f:ce:
4b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D9:BE:BC:F0:27:A3:DF:0D:EA:CA:23:47:FF:B0:75:09:86:16:3C
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:96:c2:5d:1f:ff:5e:59:13:a8:8f:c0:37:b6:27:90:85:8b:
92:3e:c5:d5:e8:e4:c2:be:24:5e:9e:33:5a:55:8f:e2:e8:a1:
6f:96:00:e2:6a:dd:8e:3b:7f:fa:f2:55:e4:6c:e2:3b:3a:0e:
a6:98:e3:d0:13:97:0f:6b:a6:f2:b2:81:dd:57:90:9a:a6:4c:
fe:40:59:ce:6e:56:7d:4f:fb:e9:7a:b2:63:0f:9a:3e:d5:71:
d4:8e:cd:af:3a:36:ff:7f:67:41:39:f4:16:fb:89:ac:4b:e9:
fd:7c:60:54:d9:db:15:5f:eb:52:5d:66:ef:33:c9:bf:31:8f:
be:00:01:c2:eb:a1:10:5f:e0:57:58:09:75:05:44:57:48:74:
e9:eb:9b:77:dd:47:a9:66:4d:cb:5b:11:3e:4b:db:71:c2:15:
5f:29:2b:b0:f1:e1:72:91:a9:41:49:e2:16:ce:ef:88:33:7b:
32:23:92:29:1e:8a:1d:03:c4:94:41:3f:d9:bd:3a:08:51:50:
6a:03:f1:e8:a9:27:d1:37:be:47:e2:a3:29:13:6a:dc:77:0c:
3f:78:27:c9:0d:a6:64:80:08:ab:4d:3b:0f:e0:05:1f:06:b1:
d2:3a:17:48:de:07:ee:b0:c3:4a:e3:c5:5d:eb:d6:8d:e0:99:
30:e5:95:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:59 2025 by rpki-client