Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: OHD8nNNvboxbomc5Dui+eMXo0ksjcs9+Ynkmb1JLU/o=
Subject key identifier: E1:FC:66:45:16:E7:18:A7:27:0C:F2:5E:B5:22:1F:C6:6A:EB:9C:2E
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 019896A6C7B0C4F04734BAF0B202CAD1674F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 1629
Signing time: Mon 11 Aug 2025 01:02:49 +0000
Manifest this update: Mon 11 Aug 2025 01:02:49 +0000
Manifest next update: Tue 12 Aug 2025 01:02:49 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: W+U2AE9L3BWC43TSIhuIPrH2CLl0xwSvGM6W6YGBNS4=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:c7:b0:c4:f0:47:34:ba:f0:b2:02:ca:d1:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Aug 11 01:02:49 2025 GMT
Not After : Aug 12 01:02:49 2025 GMT
Subject: CN=e1fc664516e718a7270cf25eb5221fc66aeb9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c7:79:d0:5d:0d:16:59:7f:ab:96:04:f5:0c:
7c:9f:39:74:e2:6e:83:a1:9b:1c:3b:70:fc:ed:0e:
b6:17:6e:cc:74:da:d7:8b:78:22:66:db:2f:ae:33:
e6:d8:69:6d:2b:66:f8:08:de:0e:7e:aa:16:7c:69:
5f:cf:ca:9c:01:ac:29:2b:db:8b:6b:e2:a4:e1:87:
bc:c5:e9:01:28:6f:c8:48:3b:a2:bc:ae:74:3e:a6:
87:ac:6e:46:50:94:4e:bb:e9:ea:d1:3e:98:46:f7:
0d:d1:e7:95:30:c3:0c:9a:03:6b:63:0e:73:02:5c:
45:d5:dc:bd:cd:f7:23:44:9f:31:73:be:c2:95:b5:
06:a0:2d:c2:a2:da:42:c8:a3:50:8d:8f:9b:21:54:
59:86:19:d7:6d:f2:2f:63:9e:c2:cd:fd:5f:06:f1:
87:34:b5:bc:d5:87:ee:e0:7f:db:a2:1e:a4:a9:7a:
8a:77:54:d8:c1:71:c0:64:4e:8a:23:13:80:85:1e:
39:6f:97:8a:39:42:8e:f8:6c:57:29:66:ed:31:b1:
54:2f:61:82:d6:19:0f:74:8e:e7:8c:77:22:aa:85:
c4:1c:78:4b:1d:78:4f:61:5a:b1:99:44:a1:f5:1e:
c7:c8:d5:dd:64:8d:1c:c1:22:98:e5:96:f9:c6:be:
6c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:FC:66:45:16:E7:18:A7:27:0C:F2:5E:B5:22:1F:C6:6A:EB:9C:2E
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c9:68:b7:81:e7:5b:1b:b6:b0:88:55:81:99:c0:d5:b7:0e:
49:77:e3:3c:50:97:28:89:6a:af:af:84:90:f5:fe:3f:49:f6:
74:64:1a:e6:f5:34:14:49:0d:bc:d0:da:6a:e6:2d:4d:b0:55:
df:52:a9:26:73:c5:a1:a5:70:b0:4b:a5:43:c1:81:88:fa:ed:
8b:66:da:df:96:70:73:f8:b4:0e:cd:04:98:c5:7c:01:05:fd:
b3:ef:ce:0c:3d:8b:88:ac:51:c6:e4:53:1f:06:df:a9:aa:92:
74:48:43:fb:d7:41:f9:45:a2:fd:06:ef:69:15:b0:39:fd:d8:
0d:6c:67:40:f9:8a:bb:01:08:5b:5d:96:c4:34:03:91:62:e7:
79:3b:2a:f4:0d:5b:74:48:9b:bd:f7:5d:7d:40:a8:fc:14:c5:
a9:84:4c:51:a0:45:2a:2a:be:31:d8:44:c3:9c:f0:79:fe:c9:
50:c2:0f:46:03:61:b7:68:16:09:05:c6:93:df:7d:4f:35:58:
0d:7f:18:a9:d3:9e:63:a3:d5:54:a7:12:57:c5:54:d2:e1:09:
b5:8b:2b:24:a2:e3:ec:53:68:70:41:eb:32:0f:d5:30:0f:bd:
3b:19:67:69:5f:72:bb:48:01:92:f6:e1:9e:5c:15:4a:fe:92:
fe:90:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:51:20 2025 by rpki-client