Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: 07puAXdAh1WfD3kv3KhRGab+w6ZYsC7E7Zv3CSdCqNs=
Subject key identifier: 16:77:38:C9:39:1A:05:97:7B:CE:A4:A9:83:B7:11:79:A0:E5:57:A1
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019A7225B116E35B6C51FEC4E3BF567B9F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 1673
Signing time: Tue 11 Nov 2025 09:01:03 +0000
Manifest this update: Tue 11 Nov 2025 09:01:03 +0000
Manifest next update: Wed 12 Nov 2025 09:01:03 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: E+OeRC2pVZ9p2TQPTVndPEPCPJJdsXlfCedOb+7fYS0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:b1:16:e3:5b:6c:51:fe:c4:e3:bf:56:7b:9f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Nov 11 09:01:03 2025 GMT
Not After : Nov 12 09:01:03 2025 GMT
Subject: CN=167738c9391a05977bcea4a983b71179a0e557a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bd:36:5f:be:dd:ba:2f:3a:e2:46:14:8b:8e:
c7:13:4f:ff:2b:8f:0c:39:1c:8c:1e:46:38:c4:ad:
bf:58:4c:78:4d:99:80:ee:eb:4c:ff:1b:8c:81:33:
b4:43:86:92:0c:f0:2c:75:89:ed:24:70:6c:c8:97:
15:b1:b8:4c:1d:18:e8:b5:3d:d7:9d:e5:33:f2:13:
8e:8d:4b:04:65:0d:df:ae:78:9e:85:a3:36:50:c1:
69:b1:b5:6b:63:e7:a8:fd:02:16:4a:ef:3f:3c:ef:
68:de:9e:b9:be:67:df:84:07:c1:d0:06:38:da:f6:
3f:74:37:60:54:6c:74:7c:81:10:2b:e1:d9:dc:88:
2e:0b:d1:3f:4d:47:04:a6:46:82:32:c0:31:38:f0:
b6:3d:43:45:58:50:0c:3c:c6:2c:88:fb:29:a6:83:
a7:23:99:6a:98:99:a7:b2:ee:30:67:af:92:8f:a9:
d3:15:d5:84:24:86:41:48:8d:d4:c1:15:45:ff:b2:
a1:5f:db:fc:9e:61:99:1c:02:76:c6:82:82:27:b7:
e1:19:0c:8c:eb:c2:08:3e:80:08:78:aa:16:84:61:
42:d9:d8:8e:79:b1:e0:92:1d:e0:c4:47:4e:e3:60:
36:4c:03:d9:9d:e2:a9:14:bf:79:01:3d:71:1f:61:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:38:C9:39:1A:05:97:7B:CE:A4:A9:83:B7:11:79:A0:E5:57:A1
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fb:46:c4:fd:4b:e4:1b:48:12:13:a9:3f:d7:73:3f:61:1f:
96:c0:d2:eb:08:85:7a:5e:16:c6:cd:6e:55:3c:04:98:b7:53:
dd:bd:a4:9e:14:01:ef:16:40:3e:a8:0f:db:9e:ca:8f:02:3b:
63:0c:56:26:a3:5e:b1:54:af:e5:5a:34:ae:e2:d0:3e:34:5c:
92:e1:81:bf:61:c8:8f:0e:b2:f6:64:3b:8c:11:9c:03:6b:bb:
3b:3f:b6:9b:c5:1f:05:b5:91:54:48:67:1e:a8:96:bb:42:bd:
e9:70:54:9b:7d:cc:04:11:7d:f0:7a:6b:5b:21:40:b4:3b:53:
2a:46:75:0c:1b:ec:49:1c:a7:59:a1:31:b0:0e:72:19:ac:b1:
eb:d7:15:04:96:94:c9:f0:93:26:c4:6a:77:64:0e:31:20:ee:
08:9b:b4:4a:5b:38:48:1b:33:89:10:86:39:85:1a:d5:ba:e1:
7b:d2:8b:12:32:fc:6f:ab:25:d6:40:b1:3d:e9:46:14:f6:34:
e8:6f:5c:6c:cc:b2:cf:e6:87:c5:85:27:29:b1:70:ec:37:e7:
d0:11:64:b3:33:77:ab:1e:1f:b6:34:12:cd:6d:a2:27:1a:e1:
a1:d1:7b:d1:f1:ab:8f:7f:b0:68:4f:5c:bc:8b:09:d7:e7:08:
23:ce:8a:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:49:34 2025 by rpki-client