Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
File: rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft (raw, json)
Hash identifier: p5SD8ZDBKCGqGU/RffjcPb1E5dIXWc3VaYv0tuqlUWg=
Subject key identifier: DD:94:3D:A5:DB:83:C3:0E:1E:F9:62:3D:48:0B:16:1C:80:8F:36:C7
Authority key identifier: AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
Certificate issuer: /CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Certificate serial: 019A50E415576B82BC094001FA291F606DAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 22:01:56 +0000
Manifest this update: Tue 04 Nov 2025 22:01:56 +0000
Manifest next update: Wed 05 Nov 2025 22:01:56 +0000
Files and hashes: 1: T4ejI0o1-ZTfFiV7QKtB9D7UcpE.roa (hash: GaQ0ytKrYJcgBIWcbLoASBPxVTSW9++rXI3zKEi5m5Q=)
2: rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl (hash: TUTkhY/ue4c1F845Ns7aeFRKS7V/01kP1PXsqszV8mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e4:15:57:6b:82:bc:09:40:01:fa:29:1f:60:6d:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aed6ef17e6f95181890e54d000a2ac8ff2d2499b
Validity
Not Before: Nov 4 22:01:56 2025 GMT
Not After : Nov 5 22:01:56 2025 GMT
Subject: CN=dd943da5db83c30e1ef9623d480b161c808f36c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:59:61:ff:d2:d8:a7:e1:11:e2:c7:3c:2f:f9:
7f:51:e2:1c:ae:95:7b:e9:82:a9:a5:d3:df:72:14:
87:6d:ae:67:9d:b3:71:34:b4:78:8b:f1:1b:7b:c5:
f7:56:cd:8d:d4:17:e8:7c:f0:f4:81:6c:46:68:96:
61:76:35:9a:8a:44:b0:c7:18:06:54:d6:fd:8b:6d:
6f:1f:c5:29:9c:d1:d3:b1:d2:c0:f7:e3:7a:70:8a:
05:eb:5e:1a:b7:18:7b:23:ef:a6:f6:5b:92:17:61:
74:4b:8e:cc:eb:61:b4:1e:45:44:4a:8f:23:6c:bb:
e4:bf:16:ec:4f:b1:e6:b6:22:3d:ce:82:b3:ee:fb:
58:75:e2:db:b6:9f:5b:72:43:2d:13:fb:28:51:d8:
af:fa:e5:6b:2f:73:e0:2b:44:95:07:c3:68:c2:cd:
7a:d4:18:80:39:b4:1f:93:c6:19:ff:82:98:cf:31:
5f:fe:ed:6e:19:f0:91:f8:ef:51:11:8e:62:67:3d:
45:0d:d2:dc:9d:32:8b:c7:10:84:df:b2:85:4e:d6:
84:29:7c:37:ca:e6:47:a5:70:31:fa:c7:f5:7e:0f:
3e:da:d5:60:24:7d:93:bf:b1:f6:55:32:07:be:c6:
ab:f0:88:02:85:de:50:f7:8d:a0:cb:5a:dc:e5:55:
05:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:94:3D:A5:DB:83:C3:0E:1E:F9:62:3D:48:0B:16:1C:80:8F:36:C7
X509v3 Authority Key Identifier:
keyid:AE:D6:EF:17:E6:F9:51:81:89:0E:54:D0:00:A2:AC:8F:F2:D2:49:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtbvF-b5UYGJDlTQAKKsj_LSSZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c7ea1f-aa27-4ac8-8ca7-0ae0f1accda4/1/rtbvF-b5UYGJDlTQAKKsj_LSSZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b9:46:ea:48:27:69:1e:77:29:11:f6:66:b6:dd:93:c6:ae:
91:98:80:4d:b9:63:59:d4:45:f2:78:6f:b7:87:65:75:3d:81:
05:44:c5:4b:df:e2:d9:9e:fc:80:f9:a2:b4:d0:15:ba:a0:ba:
60:70:86:45:b2:96:26:39:51:6d:33:34:fa:30:16:a3:e5:1e:
f0:89:a4:8d:bd:2d:c7:3e:8b:36:aa:ad:b9:44:50:11:01:85:
33:47:ca:40:90:98:f1:38:27:19:74:68:e5:3c:66:a7:cf:63:
4b:e0:f7:7f:39:a4:6d:57:54:8f:bf:c4:f6:18:f2:47:cc:12:
75:14:a3:21:f9:93:32:39:0c:25:1f:f3:06:18:b9:86:3c:2c:
6b:ae:39:8f:96:af:8b:7d:03:73:c7:5a:e0:6e:84:47:37:6c:
40:02:b3:ce:2e:5a:cf:9b:6b:0e:a1:90:9e:fb:2b:95:7f:45:
3f:5f:0b:fc:82:e1:8d:5d:3a:39:27:34:26:f5:c8:e2:db:5c:
80:ea:53:33:ca:60:a0:9a:e3:c4:52:18:ec:5e:4c:fb:6e:af:
2c:74:2c:52:6c:c2:45:b3:c0:19:af:36:aa:74:e6:02:54:5d:
d8:fc:b9:a1:01:ef:69:ed:5a:8f:a5:2c:56:d1:85:8a:ea:5b:
dc:50:b8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:30:16 2025 by rpki-client