Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
File: rtyPMnpGGWTAqHqceAlAHFfIbUE.mft (raw, json)
Hash identifier: SVNu8lM2tTG6jT/ExqQWlJ0dQo26xpgCUGies95jQ/A=
Subject key identifier: 57:B1:59:B8:25:7B:BF:4F:BF:A4:DD:9A:4C:28:C6:A2:5E:69:79:18
Authority key identifier: AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
Certificate issuer: /CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Certificate serial: 019A5074961DADFCA2B9122811753127407B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 20:00:08 +0000
Manifest this update: Tue 04 Nov 2025 20:00:08 +0000
Manifest next update: Wed 05 Nov 2025 20:00:08 +0000
Files and hashes: 1: 2r5V-jLaZB51UHtAh-bFMsh9deI.roa (hash: MKCPJpuTtJZg9qISSN6i7GBsMIxb/Qe56YUG3zY4d1Q=)
2: rtyPMnpGGWTAqHqceAlAHFfIbUE.crl (hash: 7Yx59Qwu9pS/mRKFezBwnhgxZlDUFiZmPei8fXWTzq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:96:1d:ad:fc:a2:b9:12:28:11:75:31:27:40:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aedc8f327a461964c0a87a9c7809401c57c86d41
Validity
Not Before: Nov 4 20:00:08 2025 GMT
Not After : Nov 5 20:00:08 2025 GMT
Subject: CN=57b159b8257bbf4fbfa4dd9a4c28c6a25e697918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:60:d3:a4:09:43:9d:26:e7:b3:9d:a2:ff:9d:
fe:eb:bb:9a:b5:88:19:9b:e0:1a:65:47:83:9b:42:
98:21:01:15:fb:b0:ad:85:42:a9:11:b7:2c:0a:73:
4e:0e:33:55:9d:07:04:c9:f4:c7:95:41:de:fd:ae:
4f:fb:b5:68:d5:a9:b7:6e:ea:de:37:51:16:c7:af:
8f:ff:a7:76:8b:5f:f4:a3:f4:e4:41:22:ab:96:08:
c3:08:36:4b:f1:d8:6a:0a:10:c7:1e:df:25:c3:30:
63:f2:57:39:8f:0e:4f:ab:aa:ed:6d:2d:e7:1f:eb:
bd:84:ad:4e:52:ff:ef:ef:59:da:fe:58:e1:b8:9a:
f4:ba:47:ee:b8:66:8f:9f:a0:76:cc:4c:62:ce:3c:
99:2f:2a:27:03:d2:f7:44:55:e3:df:2f:be:e2:cb:
3a:c8:a4:7d:38:70:af:4f:84:10:13:b3:07:3c:dc:
64:30:07:8a:41:78:3f:40:80:c9:e8:a3:8c:3f:cb:
c7:9b:b3:b4:74:a6:e5:3e:28:2f:38:f7:62:3e:1e:
4b:ce:c3:b8:d0:0c:87:4a:6e:81:7a:31:5c:9e:7f:
8d:0b:44:34:cb:5f:e2:94:57:a9:00:f5:58:83:fb:
61:0d:c1:1b:94:52:b0:3a:66:b9:6a:39:82:1e:8c:
c9:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B1:59:B8:25:7B:BF:4F:BF:A4:DD:9A:4C:28:C6:A2:5E:69:79:18
X509v3 Authority Key Identifier:
keyid:AE:DC:8F:32:7A:46:19:64:C0:A8:7A:9C:78:09:40:1C:57:C8:6D:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtyPMnpGGWTAqHqceAlAHFfIbUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b0dc52-416e-4a02-8993-fbc5a1e382c5/1/rtyPMnpGGWTAqHqceAlAHFfIbUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:85:77:2b:3c:b7:bc:ca:f2:f6:64:b3:bf:d4:18:99:31:56:
b9:df:fb:82:ae:1c:1b:ad:f4:fb:81:84:66:4b:5b:05:5c:f7:
d3:19:c0:58:e8:ca:3b:52:90:86:5e:41:e0:77:85:ca:43:c4:
3d:8c:ba:59:c5:88:a4:fe:15:ec:1f:13:85:07:40:48:35:e7:
81:81:49:27:a6:70:63:44:2b:bc:8c:f1:e2:9c:cc:3c:d1:c0:
76:03:05:71:31:2f:81:ac:09:01:60:ac:02:01:8f:d5:5e:f6:
53:af:22:d5:16:2c:a7:c2:9b:98:fb:a7:84:21:a3:02:be:cc:
5f:76:e4:a5:ab:cc:53:a4:f2:50:99:97:e3:68:b6:f4:a1:e0:
86:d9:00:46:7c:56:0d:f6:a5:b1:38:5c:a8:60:68:e5:ed:f0:
6a:bc:07:e4:23:bf:b0:e0:93:60:7e:19:20:b7:57:0e:45:8a:
45:c2:6b:c9:b1:ca:22:46:1d:8e:f5:02:c5:2e:fd:2b:52:8b:
07:8d:05:40:bc:35:9a:5a:f8:76:b4:c8:91:d6:b7:44:41:05:
c1:c7:61:e9:be:92:db:b4:c1:84:c8:0a:f6:65:1e:d6:67:c3:
32:4c:d7:73:ca:32:af:5e:0d:87:9b:86:f4:85:f3:e5:ed:aa:
4d:87:d8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:57:52 2025 by rpki-client