Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
File: RPTFphl4VJskg4j530SdKpXhCgc.mft (raw, json)
Hash identifier: 7BaKAe6F61qXaaFjBl9i6aDZTWe7AoT8OV+jHHSD3pY=
Subject key identifier: AA:1C:C2:8A:A3:17:06:0D:BA:AD:98:C7:C7:98:F0:C9:6A:F0:51:CF
Authority key identifier: 44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
Certificate issuer: /CN=44f4c5a61978549b248388f9df449d2a95e10a07
Certificate serial: 019A4EF4C0EDDBF5485240498717A94B04D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:00:54 +0000
Manifest this update: Tue 04 Nov 2025 13:00:54 +0000
Manifest next update: Wed 05 Nov 2025 13:00:54 +0000
Files and hashes: 1: RPTFphl4VJskg4j530SdKpXhCgc.crl (hash: d6J3U8iIJnJ+/14sxFUQW573MHcI3cKySs+xNfYCD0Q=)
2: ios5KWpmGZUyejt9fTyM20Kq3iQ.roa (hash: ueEa/mQzKdPiJu8mODUSR4ctsWUuOZw5Ht5pcIUfCfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:c0:ed:db:f5:48:52:40:49:87:17:a9:4b:04:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44f4c5a61978549b248388f9df449d2a95e10a07
Validity
Not Before: Nov 4 13:00:54 2025 GMT
Not After : Nov 5 13:00:54 2025 GMT
Subject: CN=aa1cc28aa317060dbaad98c7c798f0c96af051cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:48:14:48:23:e8:7a:6e:f9:04:a8:b8:40:
4b:78:7c:3a:f6:f1:60:84:b9:a2:58:62:07:8d:47:
a8:5f:a6:83:30:7e:1d:5e:75:9b:37:f4:fa:04:04:
7f:f2:a5:a7:fe:e4:e9:3a:dd:fa:6f:f8:84:17:9d:
43:ae:fa:63:2b:e1:84:5e:61:1c:4f:a7:b3:8e:51:
cf:d5:9d:6e:e9:f6:b2:1e:cb:f5:79:b2:f0:a6:05:
c1:bc:cb:50:7f:a8:37:da:66:69:91:83:d2:9f:57:
57:d1:2d:d2:b8:f6:89:db:4a:31:51:3b:ba:1a:04:
94:9a:18:09:bc:03:c6:5d:48:d3:89:0a:da:08:75:
e3:84:c4:11:25:2d:34:06:79:29:c9:13:71:ca:1f:
78:19:8c:ea:0d:a5:c8:8d:91:3f:74:cf:82:fa:fe:
5b:ca:11:12:2a:49:b0:4b:1c:12:57:59:c6:68:04:
11:09:20:b0:e4:50:df:87:0b:7e:ad:3c:b0:a6:7a:
7a:af:90:ae:12:2a:5c:ec:55:1e:6b:7f:54:e0:0d:
f5:7f:f6:3c:8b:81:fe:71:42:63:8e:36:5f:49:c4:
21:78:f1:b3:0a:91:90:5a:6a:be:a4:74:f2:0c:fc:
26:5e:a7:87:95:40:c1:da:64:b6:0f:6f:12:1e:23:
db:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:C2:8A:A3:17:06:0D:BA:AD:98:C7:C7:98:F0:C9:6A:F0:51:CF
X509v3 Authority Key Identifier:
keyid:44:F4:C5:A6:19:78:54:9B:24:83:88:F9:DF:44:9D:2A:95:E1:0A:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPTFphl4VJskg4j530SdKpXhCgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e5c8df-4ef8-4d90-a490-35800e9f170e/1/RPTFphl4VJskg4j530SdKpXhCgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:82:fb:1b:8d:09:97:4c:04:80:63:29:40:b6:ee:a4:9d:d2:
2f:75:22:4c:a8:54:55:77:9d:6f:b5:d1:06:ab:73:90:80:22:
a6:62:99:0f:dd:b2:51:f9:9c:b0:e4:d1:ff:5c:02:37:ee:ba:
72:8a:af:f6:00:7e:39:3d:18:b9:40:22:f5:0f:4f:1d:2a:d3:
f1:e4:ec:ee:05:83:e0:82:02:e8:2f:1e:fb:46:76:dd:d5:7c:
89:98:f7:90:11:17:6c:fa:ed:8a:b7:ce:65:bf:0c:90:c6:82:
9d:2e:7e:39:9a:23:bd:c0:66:b1:a7:2e:5f:55:04:4b:d9:c1:
08:ab:f0:cd:13:4f:b5:38:cf:74:21:ea:06:b3:4d:a0:61:28:
2a:30:9c:05:e4:ea:e0:da:98:07:9f:47:1e:a4:62:63:d9:10:
80:82:95:98:61:8e:0b:7a:1e:42:47:ab:a1:4f:ca:f4:09:12:
65:42:e7:4b:67:5e:da:16:6b:c5:6e:08:22:1e:11:28:4e:80:
6e:4e:6a:81:41:81:30:00:33:c1:26:87:f0:bb:ff:a0:b9:e5:
46:32:6f:db:bb:c4:a5:35:99:ba:22:fb:80:ca:44:45:d9:87:
2b:99:b2:66:f5:33:d3:b6:6b:3d:55:cb:23:6b:76:81:10:f8:
1e:4c:fa:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:30 2025 by rpki-client