Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
File: RTGtRuC5wBDNKIXmACwaW5PNURI.mft (raw, json)
Hash identifier: BYkPJi6nLxyFIBSSw+ydmwg62GfDv4LZRF+s0nmnOzk=
Subject key identifier: D4:7B:6C:02:9A:B4:C1:9C:F9:C7:2A:7F:3F:85:94:8A:18:1D:AB:22
Authority key identifier: 45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
Certificate issuer: /CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Certificate serial: 019A4D73BCA75F07F8E591ABD5F960A247D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
Manifest number: 1660
Signing time: Tue 04 Nov 2025 06:00:21 +0000
Manifest this update: Tue 04 Nov 2025 06:00:21 +0000
Manifest next update: Wed 05 Nov 2025 06:00:21 +0000
Files and hashes: 1: N4NMmlfe9DF5a3SAVtfSEbM2wfQ.roa (hash: 8UZlWmjB6Dnz8NNshRUlMhAJBpkzaL1ZPtLOI64Gvsw=)
2: RTGtRuC5wBDNKIXmACwaW5PNURI.crl (hash: VvAs/WQLo+GmQ0ld3jIIPEDtX83V1AFL/hxhGXc48TM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:bc:a7:5f:07:f8:e5:91:ab:d5:f9:60:a2:47:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4531ad46e0b9c010cd2885e6002c1a5b93cd5112
Validity
Not Before: Nov 4 06:00:21 2025 GMT
Not After : Nov 5 06:00:21 2025 GMT
Subject: CN=d47b6c029ab4c19cf9c72a7f3f85948a181dab22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:65:4c:e9:43:ea:0d:f1:03:b7:a7:7c:41:
48:5d:3b:1d:e1:f4:7f:c6:3a:29:f8:7d:30:db:a3:
56:b3:17:ee:ca:58:85:e2:49:78:5b:46:9d:50:c5:
d0:dc:64:ce:71:01:93:0c:21:54:53:e6:78:d3:a0:
af:84:77:95:c1:e1:15:52:2b:a8:f1:b4:c5:94:f6:
52:a7:2f:1e:61:81:0d:84:12:40:55:0b:2a:ab:ce:
fd:3d:ee:cd:0b:c7:38:57:44:dd:c1:9e:ec:ce:59:
d4:9e:a0:91:01:5f:fb:d9:a0:33:64:bc:6b:3f:1b:
92:e5:77:0c:29:b1:e4:02:4f:60:d4:3a:05:00:20:
3d:06:99:1d:79:0a:35:9f:e4:29:e4:0f:7e:68:90:
d1:bb:fa:b1:03:0e:78:aa:74:9a:bd:7c:d9:22:5e:
21:9c:39:9b:92:0d:81:2e:6c:d4:be:79:18:18:a4:
2b:b2:6a:33:c8:19:8a:c8:bc:71:cd:b9:05:83:6e:
88:e4:64:2d:27:04:10:b5:ed:6e:4e:26:c1:9d:0d:
2d:b3:b7:4b:0b:f2:44:06:50:05:98:7d:b0:5b:77:
bd:23:9f:95:d6:44:4d:97:15:2d:79:13:69:a2:5d:
f2:b0:25:8d:a5:19:a6:e3:ee:5f:cd:d6:a2:38:df:
8d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7B:6C:02:9A:B4:C1:9C:F9:C7:2A:7F:3F:85:94:8A:18:1D:AB:22
X509v3 Authority Key Identifier:
keyid:45:31:AD:46:E0:B9:C0:10:CD:28:85:E6:00:2C:1A:5B:93:CD:51:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTGtRuC5wBDNKIXmACwaW5PNURI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/8eb453-a3eb-4500-a7e0-32de5858ba6c/1/RTGtRuC5wBDNKIXmACwaW5PNURI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8f:29:5d:dd:3c:a9:d1:ec:6d:bb:c9:53:8b:39:0c:43:97:
a6:cb:2f:2c:86:2a:72:df:ad:99:d6:ea:0d:8f:6f:93:68:df:
2b:be:c8:e2:80:e2:a0:52:e6:8a:5a:67:8d:3a:59:92:86:be:
64:4b:dc:13:5a:18:32:67:f6:ad:63:ba:49:b8:15:e2:2a:00:
af:35:fe:4f:89:12:3e:37:2f:73:41:be:85:1d:83:50:56:8b:
de:b6:11:59:18:30:d2:12:93:ff:eb:76:ab:a3:fa:f6:01:13:
b8:e3:5e:df:40:3e:b5:a2:dc:55:af:06:14:07:32:ba:81:5a:
9c:18:f0:11:4f:91:2e:78:0c:2c:d7:65:a1:2a:3d:55:61:36:
0f:82:17:9c:55:71:69:08:0d:5c:0c:22:37:a7:5b:47:54:1b:
cd:06:ab:99:bf:45:ab:e5:d5:b0:dd:8f:7c:c2:68:a1:20:e7:
74:b0:b8:36:50:06:c8:fe:9e:1d:87:15:26:42:48:6d:7a:91:
24:09:32:dc:03:44:e8:95:46:89:3b:88:e1:56:db:f3:0d:3d:
0a:bd:52:ed:17:88:ac:2b:2e:75:75:57:e2:bd:ce:68:56:5b:
31:0c:e1:a6:02:a6:38:ce:b9:23:73:43:25:14:4e:e1:6c:82:
3a:b4:93:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpNc7ynXwf45ZGr1flgokfTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MzFhZDQ2ZTBiOWMwMTBjZDI4ODVlNjAwMmMxYTViOTNj
ZDUxMTIwHhcNMjUxMTA0MDYwMDIxWhcNMjUxMTA1MDYwMDIxWjAzMTEwLwYDVQQD
EyhkNDdiNmMwMjlhYjRjMTljZjljNzJhN2YzZjg1OTQ4YTE4MWRhYjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeRlTOlD6g3xA7enfEFIXTsd4fR/
xjop+H0w26NWsxfuyliF4kl4W0adUMXQ3GTOcQGTDCFUU+Z406CvhHeVweEVUiuo
8bTFlPZSpy8eYYENhBJAVQsqq879Pe7NC8c4V0TdwZ7szlnUnqCRAV/72aAzZLxr
PxuS5XcMKbHkAk9g1DoFACA9BpkdeQo1n+Qp5A9+aJDRu/qxAw54qnSavXzZIl4h
nDmbkg2BLmzUvnkYGKQrsmozyBmKyLxxzbkFg26I5GQtJwQQte1uTibBnQ0ts7dL
C/JEBlAFmH2wW3e9I5+V1kRNlxUteRNpol3ysCWNpRmm4+5fzdaiON+NlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNR7bAKatMGc+ccqfz+FlIoYHasiMB8GA1UdIwQY
MBaAFEUxrUbgucAQzSiF5gAsGluTzVESMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAt
MzJkZTU4NThiYTZjLzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy84ZWI0NTMtYTNlYi00NTAwLWE3ZTAtMzJkZTU4NThiYTZj
LzEvUlRHdFJ1QzV3QkROS0lYbUFDd2FXNVBOVVJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHY8pXd08
qdHsbbvJU4s5DEOXpssvLIYqct+tmdbqDY9vk2jfK77I4oDioFLmilpnjTpZkoa+
ZEvcE1oYMmf2rWO6SbgV4ioArzX+T4kSPjcvc0G+hR2DUFaL3rYRWRgw0hKT/+t2
q6P69gETuONe30A+taLcVa8GFAcyuoFanBjwEU+RLngMLNdloSo9VWE2D4IXnFVx
aQgNXAwiN6dbR1QbzQarmb9Fq+XVsN2PfMJooSDndLC4NlAGyP6eHYcVJkJIbXqR
JAky3ANE6JVGiTuI4Vbb8w09Cr1S7ReIrCsudXVX4r3OaFZbMQzhpgKmOM65I3ND
JRRO4WyCOrST3A==
-----END CERTIFICATE-----
Generated at Tue Nov 4 14:54:46 2025 by rpki-client