Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: qnIY2VeZYEiHj33+N9/gdAblOTsExekNKGIApT8+r9w=
Subject key identifier: AB:58:B1:BD:05:C6:63:67:6D:50:43:DC:A4:79:90:D2:30:28:CC:2E
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 01985B353659BF8F248AEEDC1F7849C296FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 155E
Signing time: Wed 30 Jul 2025 12:01:10 +0000
Manifest this update: Wed 30 Jul 2025 12:01:10 +0000
Manifest next update: Thu 31 Jul 2025 12:01:10 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: W99bRWAjhKuJvUI2n6TFNRWc7drwNSUARG7JSuKLLk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5b:35:36:59:bf:8f:24:8a:ee:dc:1f:78:49:c2:96:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jul 30 12:01:10 2025 GMT
Not After : Jul 31 12:01:10 2025 GMT
Subject: CN=ab58b1bd05c663676d5043dca47990d23028cc2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a6:e5:fc:cc:72:cf:7b:22:1a:e5:63:7f:b7:
c4:f6:74:16:9f:c2:23:79:fd:bc:f7:db:f1:77:61:
0b:b2:8f:00:7a:28:8c:8f:49:15:b2:aa:00:4e:bf:
cf:82:35:56:a6:49:19:2e:db:82:40:ad:d3:78:59:
55:0b:cd:32:d5:83:d3:a3:be:c9:22:33:79:35:b0:
0c:ca:2b:a4:93:76:55:c4:92:d0:5f:46:d4:65:d9:
41:a8:72:23:8c:23:76:44:91:ec:98:75:cc:2d:45:
d6:a8:29:5a:b3:3b:b2:4e:4d:3d:0b:57:21:51:4d:
d3:7e:dc:b7:ca:52:7f:48:e2:e1:71:e1:e0:64:3d:
8b:4c:e7:23:e0:64:0f:7a:06:9c:46:9e:1b:e5:85:
be:d8:0e:1e:5d:3b:c8:d6:3e:e6:a1:19:af:a8:70:
4b:8d:11:58:ff:fe:be:d6:f7:01:2b:4a:3d:3b:1b:
b3:f5:56:db:7f:bc:d7:77:63:f0:e9:3f:28:60:0d:
67:98:71:6b:f0:d6:8b:93:6e:88:32:23:77:7a:48:
17:26:1c:88:46:f3:0b:ef:57:d7:d5:cf:fe:26:c2:
e6:1e:7c:f6:66:7b:36:49:3f:99:b1:62:5b:ef:48:
dd:19:7e:66:d5:70:d7:07:0e:18:2f:36:8a:dd:db:
16:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:58:B1:BD:05:C6:63:67:6D:50:43:DC:A4:79:90:D2:30:28:CC:2E
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:34:6d:f9:dc:b3:8c:be:82:5f:f8:27:04:f0:b4:ae:43:90:
9d:c4:31:38:cc:91:6a:04:f1:c2:53:1c:8e:11:47:ae:66:2f:
98:7b:c8:cd:1f:db:38:7f:35:9b:61:8e:fc:66:85:54:e7:a0:
9f:d4:7c:c1:2b:6b:fa:83:ec:3e:72:1f:fa:62:8f:0d:70:55:
71:85:ac:19:53:34:44:08:7a:f8:f9:bf:b0:95:a4:68:8b:55:
0f:3c:69:7f:7e:bb:e5:9a:44:d2:87:3d:55:3b:ad:b3:71:db:
67:62:f1:2b:22:7c:61:ad:be:ee:ee:47:5d:b8:c8:e9:eb:89:
27:d9:ba:0b:fb:ff:95:13:4d:02:5e:fa:bf:c3:2c:bf:d5:ce:
23:72:0c:0c:f4:09:03:dc:cb:97:2d:51:69:7e:ca:7e:b4:1f:
59:73:a3:38:9b:e7:3c:87:5e:80:30:83:c2:bf:34:24:b0:b9:
24:ef:97:c9:52:5b:f4:3f:fa:f0:d9:7e:aa:c3:a5:9a:fb:57:
9e:e7:d2:17:16:ef:0e:b7:c0:54:b0:d2:04:e5:04:0e:fc:37:
67:12:2e:05:d3:7c:d4:67:52:df:30:64:55:8a:c1:b2:d9:d4:
4c:ad:33:45:52:12:3d:90:7d:44:e0:db:87:0c:c8:ea:f1:54:
c3:3e:4c:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 16:10:32 2025 by rpki-client