Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier: xFYpzkhs9H7Ydd94pp4PlbfWW14pnXG2pictouwVg50=
Subject key identifier: 45:04:95:93:09:C5:95:E6:00:C4:BF:25:0B:26:08:20:15:A8:5F:5F
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial: 019A71B933B2736910E1B81C3AD43D96300D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: +MbaG9s0ustytVYIS+KSbbw1f5VoCNbEQ9x1fHm2A9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:33:b2:73:69:10:e1:b8:1c:3a:d4:3d:96:30:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=4504959309c595e600c4bf250b26082015a85f5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:d7:f0:35:ad:64:8e:31:26:fe:a4:e1:d2:
da:7a:7f:e8:a5:3a:4b:26:58:23:91:d4:f8:69:a1:
0a:73:bf:a6:21:bf:48:ec:af:99:ee:1a:c5:3f:33:
e7:ae:1f:b3:93:66:da:9b:2e:ec:92:9e:97:2b:1e:
d8:f1:a6:52:31:d9:8e:96:4e:eb:fd:ab:08:50:5c:
cc:da:dd:7f:da:85:ba:18:61:b1:80:f0:d4:aa:c7:
24:f9:c3:15:e8:7c:16:ff:18:3b:a5:ec:2b:03:89:
4f:49:a8:3e:96:9a:fe:5a:3c:41:97:4b:5d:cc:11:
7c:03:76:ef:43:d0:2a:04:3b:a5:c5:59:ef:4d:14:
89:1a:53:6d:0f:ed:93:61:25:78:5e:17:30:32:db:
dd:d0:7e:8b:0b:4b:8a:35:58:f6:4b:0f:e4:38:b0:
9f:6d:fb:a7:0d:41:26:dd:36:13:f6:6d:b0:ba:ef:
35:2e:67:0d:4e:7a:1f:ca:65:ed:f6:ec:21:bb:d3:
82:81:10:d7:eb:1b:4b:06:3a:e2:44:bb:72:5d:15:
73:b7:02:9c:c8:c7:16:1e:3c:c0:12:36:9c:f3:b8:
d2:77:28:54:26:02:b9:15:71:29:32:af:d0:d0:0c:
11:8b:d3:d9:87:5c:77:16:74:f4:0e:c7:da:3a:9c:
7a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:04:95:93:09:C5:95:E6:00:C4:BF:25:0B:26:08:20:15:A8:5F:5F
X509v3 Authority Key Identifier:
keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:fe:95:b8:53:3b:98:3b:c0:34:2d:15:ec:af:5a:1c:fb:df:
10:a5:fe:bf:74:74:f9:94:a6:41:40:1e:05:98:54:b2:87:48:
03:c0:4e:e6:95:dc:e9:21:5f:d9:cb:14:c6:d5:06:2e:a2:66:
c4:b4:b7:e9:81:58:1e:a8:fc:a7:37:e1:95:f1:b8:c6:28:c1:
7f:5f:4a:80:df:c9:94:04:80:c5:18:f7:05:7e:e2:10:57:4b:
fe:a6:01:ea:cf:1e:dc:48:98:c3:36:59:f9:74:64:07:7e:0c:
ce:66:63:4f:b9:a3:78:4a:2a:5f:fd:d1:fc:fa:b6:3e:35:c3:
d0:48:87:6f:7a:42:fb:b4:37:d1:da:b8:95:f2:5e:d9:6a:76:
f0:0a:a2:46:d6:cc:80:01:68:c4:b8:f9:a2:97:d1:2a:59:63:
0f:7c:a7:be:fb:27:c8:f5:f7:f3:9e:4f:e4:14:3f:e0:c7:7a:
30:6e:27:b8:b9:82:1e:c8:1c:82:62:b2:17:82:90:7d:7d:b5:
8d:06:f3:17:66:85:a8:da:9b:6f:df:43:0c:cd:de:66:86:17:
74:f7:ca:b6:e9:ca:c3:f7:d0:27:1f:c9:92:13:f5:2f:5e:53:
40:18:92:cb:a0:48:96:58:fc:5a:8f:26:16:6b:92:50:d3:0e:
0f:f6:1a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:39:10 2025 by rpki-client