Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: RrcJJ7ffW8mUbNLA01j5S6LG2jKlrP2ByCFJZkQJv8M=
Subject key identifier: EC:22:63:AE:FC:7E:91:29:08:3E:72:32:02:A8:6D:31:D3:93:01:53
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 01976BBD647604875DF2649444788521C235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 14E2
Signing time: Sat 14 Jun 2025 00:01:03 +0000
Manifest this update: Sat 14 Jun 2025 00:01:03 +0000
Manifest next update: Sun 15 Jun 2025 00:01:03 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: TnNKyXTXQxvOU9cu/hd3nN3Q0iYA5zfh0s2c29IgwZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:64:76:04:87:5d:f2:64:94:44:78:85:21:c2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Jun 14 00:01:03 2025 GMT
Not After : Jun 15 00:01:03 2025 GMT
Subject: CN=ec2263aefc7e9129083e723202a86d31d3930153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7f:14:76:77:2c:e6:65:ad:7b:da:c5:47:60:
c6:a6:43:3d:0a:e5:37:a4:4a:7c:4c:4b:0d:c5:c6:
e5:3b:ca:c2:6c:59:56:59:68:91:e1:2a:92:03:95:
56:ee:a6:77:83:38:3f:04:ed:b2:5e:eb:c3:ad:2c:
60:2e:d5:51:67:39:8b:cf:48:e6:07:5b:15:1f:8c:
bd:a7:48:03:4a:7a:b5:68:9e:f9:5e:61:d1:83:77:
1e:87:a0:94:1b:03:96:5f:e8:57:0d:95:bc:a8:6b:
30:f5:21:bc:17:e6:7a:35:bb:b6:a1:0c:02:ed:50:
67:5d:28:4b:42:1f:7e:f0:09:0d:bc:90:64:83:b1:
8d:b3:64:5e:b7:4c:25:fc:ee:16:c5:3a:b6:1b:6b:
c6:aa:6b:32:6b:9e:68:63:80:f1:67:56:88:c6:88:
3c:24:55:a1:cb:51:07:4a:81:03:4b:65:41:20:9f:
c5:be:ee:f7:7b:a9:97:6e:2e:93:31:d9:16:ae:95:
db:01:3c:45:48:45:5b:6d:71:56:2f:bd:1f:b8:6f:
39:89:c7:02:7c:61:e9:a6:56:5c:fa:e8:b5:5d:da:
22:c5:c5:c2:33:a5:b8:62:b2:51:6c:df:67:02:04:
04:49:f8:c3:17:7f:d0:05:e3:25:fa:d9:44:a1:9a:
21:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:22:63:AE:FC:7E:91:29:08:3E:72:32:02:A8:6D:31:D3:93:01:53
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:99:d9:f4:45:3b:39:ca:dc:17:e4:6a:8b:9b:7d:2b:bd:5a:
54:33:fc:ff:af:cc:c7:a1:b6:ca:b8:e8:43:bf:3e:85:7c:97:
94:9e:a4:aa:68:6d:ac:a5:ed:7e:b4:48:a3:6b:ad:b6:9b:da:
1c:31:30:ae:de:a2:3f:4c:f1:21:7a:27:71:f3:61:34:17:57:
b5:92:1a:9e:db:19:31:c4:14:b6:9a:ac:76:ee:1e:bd:93:86:
26:e8:9e:06:b4:ff:b8:8c:73:57:df:ad:d6:38:c1:c6:94:36:
6d:8f:ac:b7:af:6a:af:a2:68:b3:be:dd:84:f7:29:92:20:56:
0a:e3:6b:ca:a2:73:31:a4:ac:cc:7d:15:36:46:2d:ce:5c:70:
ec:56:9e:22:04:44:23:83:5e:51:a7:f9:8a:a4:50:db:74:9e:
4e:be:f1:e3:10:f2:02:a8:1b:5b:bd:68:59:10:da:a8:41:5d:
91:36:b3:bf:31:54:36:60:0c:4a:9c:eb:a5:ac:2b:17:a2:20:
9e:cb:7a:ce:95:e7:9b:f0:08:7a:c8:5d:49:c9:61:8c:a5:c8:
25:ac:eb:6d:93:0e:5b:fa:cb:b1:b3:c7:39:bf:cb:05:d5:d5:
6d:46:fe:c0:ff:19:ba:09:5c:58:1e:39:e5:78:8a:b3:98:2a:
32:6f:ff:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:37 2025 by rpki-client