Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: 60NVhV1dkXfx8GGjdAecJSfjl8Tb8+IntjS7LmZpaRE=
Subject key identifier: 60:A0:9C:02:79:BD:20:85:CC:EC:36:58:55:22:58:FF:F3:68:52:C4
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019921B16C4EE9801EF253B892CFA122801B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 01:01:39 +0000
Manifest this update: Sun 07 Sep 2025 01:01:39 +0000
Manifest next update: Mon 08 Sep 2025 01:01:39 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: WyRX9arDLRWq+Hi0g9xdrUJbQOB3EyCxoupzZ5k67GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:6c:4e:e9:80:1e:f2:53:b8:92:cf:a1:22:80:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Sep 7 01:01:39 2025 GMT
Not After : Sep 8 01:01:39 2025 GMT
Subject: CN=60a09c0279bd2085ccec3658552258fff36852c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:db:c1:7a:49:29:b5:54:54:fc:08:f4:cc:
ec:60:94:be:5b:20:df:d0:cb:68:8f:c4:0b:92:d4:
c3:38:78:5f:48:69:30:b6:c3:4a:8b:f0:b2:8c:d3:
f0:d0:97:86:01:0d:d2:b3:87:d6:b0:f5:e0:a2:de:
b9:dd:a0:24:ca:ab:06:0c:f1:7b:9e:b9:0f:d1:2f:
75:a9:20:a3:2d:ba:f4:f9:23:08:16:dc:82:c8:22:
fd:9f:fd:21:60:70:40:4d:b5:be:f8:65:62:8f:d5:
9f:bc:50:82:2d:5d:40:49:35:7e:79:13:24:1d:2f:
8f:aa:f6:0f:76:06:31:85:66:ab:fb:7e:95:23:f3:
cb:58:10:88:53:95:29:6f:93:a4:a9:47:c8:a7:cb:
7d:a1:fc:d0:5a:ea:0e:c0:84:ec:72:49:e8:b3:b3:
70:98:84:88:a6:4b:a4:6d:ae:f2:d9:fb:0d:ee:4e:
5d:0c:63:d7:eb:42:da:e4:9e:15:d0:bb:58:f3:39:
76:80:0a:fd:ee:c6:f2:57:c2:79:9d:e9:05:fe:75:
1d:69:3b:ac:fb:7f:75:38:72:a7:09:db:1c:26:e4:
66:ec:80:64:cf:85:fc:91:dc:96:fe:ae:98:bf:62:
77:f2:8c:dd:32:ca:98:d9:a7:2c:2d:80:45:49:98:
cc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:A0:9C:02:79:BD:20:85:CC:EC:36:58:55:22:58:FF:F3:68:52:C4
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:9a:ac:2b:81:f5:87:4c:69:8e:31:5d:9a:27:41:99:f0:fd:
c0:b9:13:22:4e:98:e8:16:0a:cb:da:bc:a5:45:01:ca:2e:2d:
e5:15:c7:0a:dd:67:e1:dc:a2:68:0d:fd:72:61:80:35:e6:7e:
2d:62:c7:b8:59:50:95:83:80:1a:9d:f4:44:67:af:b2:6a:b3:
f9:d3:f2:2a:a8:d9:fd:30:ba:2f:fc:c8:59:7f:0d:57:69:4e:
59:e5:d9:ca:d5:69:14:78:15:f7:da:9b:86:20:86:41:d1:7b:
1b:ed:24:55:89:0e:46:95:4c:63:87:d2:94:92:d1:58:9d:a1:
e6:0d:ae:f2:c4:e7:c4:8c:dc:52:e1:a6:93:62:d7:dd:9d:ca:
d4:d3:2f:c2:4a:bb:76:a6:97:17:58:fc:d9:73:3d:75:24:9d:
84:a8:18:fa:87:97:54:50:36:db:fa:8c:29:67:1f:ee:df:cd:
86:53:20:f8:68:20:5a:33:1b:12:32:12:6e:bd:0a:26:03:d2:
da:fd:b3:1a:c9:f5:c7:7e:61:c0:db:65:8c:40:52:4b:fe:74:
7e:63:87:b3:5a:14:87:e2:d5:1b:06:30:c3:0e:01:b3:ce:c3:
c4:70:45:2d:84:10:56:40:9c:b3:7b:0c:33:58:d1:4e:aa:25:
12:23:c2:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsWxO6YAe8lO4ks+hIoAbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw
YjIzZDgwHhcNMjUwOTA3MDEwMTM5WhcNMjUwOTA4MDEwMTM5WjAzMTEwLwYDVQQD
Eyg2MGEwOWMwMjc5YmQyMDg1Y2NlYzM2NTg1NTIyNThmZmYzNjg1MmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEnbwXpJKbVUVPwI9MzsYJS+WyDf
0Mtoj8QLktTDOHhfSGkwtsNKi/CyjNPw0JeGAQ3Ss4fWsPXgot653aAkyqsGDPF7
nrkP0S91qSCjLbr0+SMIFtyCyCL9n/0hYHBATbW++GVij9WfvFCCLV1ASTV+eRMk
HS+PqvYPdgYxhWar+36VI/PLWBCIU5Upb5OkqUfIp8t9ofzQWuoOwITscknos7Nw
mISIpkukba7y2fsN7k5dDGPX60La5J4V0LtY8zl2gAr97sbyV8J5nekF/nUdaTus
+391OHKnCdscJuRm7IBkz4X8kdyW/q6Yv2J38ozdMsqY2acsLYBFSZjM/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCgnAJ5vSCFzOw2WFUiWP/zaFLEMB8GA1UdIwQY
MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt
NWViNzVjMjMxOGFhLzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh
LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlJqsK4H1
h0xpjjFdmidBmfD9wLkTIk6Y6BYKy9q8pUUByi4t5RXHCt1n4dyiaA39cmGANeZ+
LWLHuFlQlYOAGp30RGevsmqz+dPyKqjZ/TC6L/zIWX8NV2lOWeXZytVpFHgV99qb
hiCGQdF7G+0kVYkORpVMY4fSlJLRWJ2h5g2u8sTnxIzcUuGmk2LX3Z3K1NMvwkq7
dqaXF1j82XM9dSSdhKgY+oeXVFA22/qMKWcf7t/NhlMg+GggWjMbEjISbr0KJgPS
2v2zGsn1x35hwNtljEBSS/50fmOHs1oUh+LVGwYwww4Bs87DxHBFLYQQVkCcs3sM
M1jRTqolEiPCGg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:42:38 2025 by rpki-client