Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: uK+uqr1xcsfTQCFM3SnK0PMvVa3WpyetlsyhTW/bG3A=
Subject key identifier: E2:DB:C7:EB:EE:3D:81:9B:C3:FA:7E:79:F2:BD:33:45:0D:72:14:B5
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019A71B7FE1E621B63B9BE9CDC50D770C4FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:14 +0000
Manifest this update: Tue 11 Nov 2025 07:01:14 +0000
Manifest next update: Wed 12 Nov 2025 07:01:14 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: GEKggTUTbPF1vzatEXQfn0ajeZDUT5P1aD278hf9W18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:fe:1e:62:1b:63:b9:be:9c:dc:50:d7:70:c4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 11 07:01:14 2025 GMT
Not After : Nov 12 07:01:14 2025 GMT
Subject: CN=e2dbc7ebee3d819bc3fa7e79f2bd33450d7214b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:42:ef:d2:45:72:e4:98:b3:ca:35:85:dd:
a1:9c:ee:2b:9e:2a:65:d5:15:07:b9:9b:cb:96:5f:
10:64:49:b6:f5:f3:7c:ff:56:8b:4e:00:59:16:89:
f4:80:33:43:d1:db:c3:dc:ad:25:cd:cb:f5:1c:21:
8c:f0:e6:a0:b5:6e:0f:90:5b:01:40:1d:55:b5:c3:
b9:2e:f1:89:96:38:68:b0:35:61:bc:78:39:38:a1:
fb:07:e6:85:90:b9:2e:73:a5:37:f7:66:4b:8e:6f:
61:cb:9d:cc:3d:ab:24:42:b9:3d:1f:c3:64:11:49:
f0:df:23:55:b6:98:25:5b:9c:98:c5:78:cc:8b:31:
ac:52:70:b0:f4:c0:34:ba:e0:af:66:24:3f:3a:48:
f2:8d:e2:3f:61:74:f3:1d:03:f1:da:cf:04:c9:ee:
cf:87:bc:d1:50:54:e4:64:5a:01:9b:60:19:0b:9b:
c6:1c:2f:1f:48:1c:77:48:d4:b3:c9:cd:15:1d:a5:
e6:13:b4:74:56:6c:d8:31:9b:7d:33:ab:43:cc:1a:
3c:30:21:b9:22:5e:65:63:44:51:48:93:3d:65:ba:
36:02:e0:8f:94:4b:9a:9f:89:f8:ca:d2:ad:0e:9f:
fd:38:af:a3:20:ee:a8:b0:43:33:6c:9b:0e:2f:9a:
d7:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DB:C7:EB:EE:3D:81:9B:C3:FA:7E:79:F2:BD:33:45:0D:72:14:B5
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:f5:cc:0d:32:53:ff:9c:67:a4:b2:3c:29:fc:19:89:5d:63:
ed:d4:0e:a0:8a:68:72:cb:4a:01:81:b9:86:a2:aa:b8:3f:df:
20:75:b7:6d:da:1a:f6:e9:26:3b:a1:52:6e:18:33:ef:26:b9:
ba:95:cf:77:8c:a2:22:2d:7b:f9:64:80:03:3c:62:fd:ed:b9:
5a:b3:c7:5a:93:37:ac:dd:5e:5b:41:7d:78:26:cc:3a:16:04:
66:05:54:3b:14:27:87:ff:00:ed:a2:55:eb:05:61:c4:23:3b:
4e:78:52:3b:bb:1c:5c:94:a1:d7:16:76:41:69:86:0f:88:f9:
2f:c2:7c:ea:d4:3d:8c:f8:d5:35:59:ff:8e:42:09:00:1f:f0:
be:3f:30:96:3f:d4:0d:d5:82:ab:90:40:56:46:e9:f4:c8:e2:
28:0d:e6:b5:2c:6e:ab:f5:c7:a6:44:7b:e8:3f:bc:f7:1d:5c:
7e:ec:09:a6:27:5f:6a:13:3e:c1:27:2e:9b:19:e4:e7:f4:69:
70:c8:37:a9:0d:10:2b:d9:49:51:af:70:45:81:6f:d5:53:a2:
c5:cc:84:5d:bc:1d:f8:c2:d8:b7:78:2a:a0:6c:91:84:dc:3f:
f1:03:6c:1f:1d:71:7c:b2:34:3f:c4:ba:3a:da:ed:0f:88:d1:
c3:34:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:46:15 2025 by rpki-client