Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: UKIja8IornFuIbUXrPebLWA88WVCYXYDmbb7xTNvFPo=
Subject key identifier: C0:19:E0:48:ED:48:74:F8:28:FE:FD:88:9B:65:FD:CB:7B:F5:DD:11
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 0198D473D912EC967D303083FBFF1394AA9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:38 +0000
Manifest this update: Sat 23 Aug 2025 01:03:38 +0000
Manifest next update: Sun 24 Aug 2025 01:03:38 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: mmD1oWsS4GWfbPBmdpdA3nz4zmwRzInHrmiR6LWY5eg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:d9:12:ec:96:7d:30:30:83:fb:ff:13:94:aa:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Aug 23 01:03:38 2025 GMT
Not After : Aug 24 01:03:38 2025 GMT
Subject: CN=c019e048ed4874f828fefd889b65fdcb7bf5dd11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:09:af:14:ae:0b:61:82:07:e2:74:01:f3:02:
23:d2:e0:ab:b5:36:ff:77:93:b9:63:f3:79:e1:99:
53:30:43:e2:09:8d:0c:fe:9e:90:44:f9:2d:7e:65:
40:f0:21:9e:dc:8d:04:03:92:34:33:2a:38:4e:0e:
4d:f4:08:4d:4e:cf:9f:3e:93:07:3a:1d:f8:72:69:
33:ca:b7:90:fc:13:66:d5:d8:59:c7:2c:a8:0b:00:
93:5a:25:0a:a8:e6:c0:5e:9e:41:c5:b4:93:35:38:
3e:82:38:9c:3e:76:02:89:17:04:4a:03:f3:12:d5:
f4:14:1d:f6:a0:70:4b:bc:43:a1:f9:b3:b3:1d:e0:
91:3d:d7:db:d0:24:de:5f:fe:f3:e9:19:b9:1b:ca:
9d:4e:3a:12:17:c5:e1:e0:e8:a5:7f:77:cf:d6:69:
ff:9c:29:44:74:2b:26:b7:6b:a6:93:9f:ad:be:24:
15:3f:84:70:b4:f6:9d:07:a1:0b:16:05:b9:2b:27:
a8:bd:ab:6f:4f:36:03:94:83:54:c2:f6:e9:8b:c9:
ba:dc:a8:4c:5a:d8:82:af:45:00:eb:e7:f6:e4:91:
c5:07:b1:ef:99:31:16:7a:71:08:d9:89:c5:48:08:
26:da:63:14:5c:32:45:fe:4b:66:6d:6c:7e:de:b2:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:19:E0:48:ED:48:74:F8:28:FE:FD:88:9B:65:FD:CB:7B:F5:DD:11
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:de:c8:8b:1f:74:48:ec:7d:73:38:61:2d:f1:cb:bd:da:f1:
c2:ee:3a:72:a0:cb:b9:88:3f:28:14:7c:dd:7e:ee:ee:58:71:
94:79:75:47:c5:65:99:0c:ba:20:1c:dd:3c:99:9f:ce:fa:58:
1f:3d:3b:90:50:4a:85:c4:9a:69:f6:03:9a:be:16:b2:d1:17:
39:59:99:01:48:fb:82:a5:52:cd:9b:f5:0b:6a:70:ab:ec:08:
ea:08:8f:1f:30:4a:35:e2:fb:81:3c:27:e3:55:29:71:0b:74:
4c:85:6a:7e:e1:27:23:35:64:1f:75:23:f6:bf:8e:6d:ae:49:
c1:bb:fe:92:c7:16:22:73:a8:07:12:cd:84:64:fc:29:7a:b1:
cf:9b:4a:f2:de:4a:34:cd:c2:c1:ad:f8:33:94:5b:48:e6:79:
dd:04:67:7e:13:ed:58:07:c8:bd:6a:2f:4f:e6:1a:f4:c0:1b:
33:73:34:f4:47:96:4e:4b:af:67:64:46:ac:f2:c9:fd:07:4e:
24:f2:6e:76:78:bc:89:f1:0e:ac:2c:60:74:83:48:65:8f:f4:
4c:c6:75:79:54:86:6c:85:b1:5a:ff:3a:f3:1c:c0:dd:5d:1b:
32:44:eb:04:14:e9:c2:4c:62:19:ca:ea:71:ae:16:fe:13:dc:
b6:30:48:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc9kS7JZ9MDCD+/8TlKqbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw
YjIzZDgwHhcNMjUwODIzMDEwMzM4WhcNMjUwODI0MDEwMzM4WjAzMTEwLwYDVQQD
EyhjMDE5ZTA0OGVkNDg3NGY4MjhmZWZkODg5YjY1ZmRjYjdiZjVkZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQmvFK4LYYIH4nQB8wIj0uCrtTb/
d5O5Y/N54ZlTMEPiCY0M/p6QRPktfmVA8CGe3I0EA5I0Myo4Tg5N9AhNTs+fPpMH
Oh34cmkzyreQ/BNm1dhZxyyoCwCTWiUKqObAXp5BxbSTNTg+gjicPnYCiRcESgPz
EtX0FB32oHBLvEOh+bOzHeCRPdfb0CTeX/7z6Rm5G8qdTjoSF8Xh4Oilf3fP1mn/
nClEdCsmt2umk5+tviQVP4RwtPadB6ELFgW5KyeovatvTzYDlINUwvbpi8m63KhM
WtiCr0UA6+f25JHFB7HvmTEWenEI2YnFSAgm2mMUXDJF/ktmbWx+3rJz4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMAZ4EjtSHT4KP79iJtl/ct79d0RMB8GA1UdIwQY
MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt
NWViNzVjMjMxOGFhLzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh
LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeN7Iix90
SOx9czhhLfHLvdrxwu46cqDLuYg/KBR83X7u7lhxlHl1R8VlmQy6IBzdPJmfzvpY
Hz07kFBKhcSaafYDmr4WstEXOVmZAUj7gqVSzZv1C2pwq+wI6giPHzBKNeL7gTwn
41UpcQt0TIVqfuEnIzVkH3Uj9r+Oba5Jwbv+kscWInOoBxLNhGT8KXqxz5tK8t5K
NM3Cwa34M5RbSOZ53QRnfhPtWAfIvWovT+Ya9MAbM3M09EeWTkuvZ2RGrPLJ/QdO
JPJudni8ifEOrCxgdINIZY/0TMZ1eVSGbIWxWv868xzA3V0bMkTrBBTpwkxiGcrq
ca4W/hPctjBIXQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:03 2025 by rpki-client