Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
File: RtlEd8i1TRLsiz97bZrnjlELI9g.mft (raw, json)
Hash identifier: bybxt4zL/q3w1fbZ8QL2F69eVPp7j2L4XF0T3QS6ckA=
Subject key identifier: 00:C5:C8:5D:EA:8C:61:F9:C3:CD:DB:A0:CD:BC:87:28:13:74:EA:CB
Authority key identifier: 46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
Certificate issuer: /CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Certificate serial: 019A4EF5B179B202BC0CAAC7D710E0E2B052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
Manifest number: 1709
Signing time: Tue 04 Nov 2025 13:01:55 +0000
Manifest this update: Tue 04 Nov 2025 13:01:55 +0000
Manifest next update: Wed 05 Nov 2025 13:01:55 +0000
Files and hashes: 1: RtlEd8i1TRLsiz97bZrnjlELI9g.crl (hash: HDM6mSEYeK31LanNqqzSxhhtP8CYZIFRZq40d6kF0iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 13:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:b1:79:b2:02:bc:0c:aa:c7:d7:10:e0:e2:b0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d94477c8b54d12ec8b3f7b6d9ae78e510b23d8
Validity
Not Before: Nov 4 13:01:55 2025 GMT
Not After : Nov 5 13:01:55 2025 GMT
Subject: CN=00c5c85dea8c61f9c3cddba0cdbc87281374eacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:fa:6b:30:30:f2:9e:8a:4c:be:ef:6e:33:de:
62:c3:0d:28:bb:ed:4b:5c:6b:5c:13:e0:4f:40:52:
7a:ed:5d:5c:18:de:5b:de:ab:f8:cc:52:bd:15:fd:
a0:dc:a4:3a:9c:47:67:d4:8d:79:8d:a9:bb:f4:e4:
0a:02:51:84:12:eb:ab:12:ab:df:0b:e4:00:64:23:
23:71:bf:4d:1a:b4:53:9b:52:e2:c6:a2:f7:d5:13:
36:87:84:23:9d:b2:d7:9b:5a:13:fa:f8:16:d2:e3:
53:cd:45:a3:4e:31:e3:6c:a1:df:d3:dd:4c:c3:79:
79:a3:d6:28:02:a1:3a:cc:dd:6d:7f:10:88:d3:f9:
d9:c2:b5:75:f5:6c:5e:13:c6:8f:23:78:d6:1d:58:
75:ce:92:ab:e6:98:81:1b:97:65:d5:b8:c9:e4:53:
ec:08:c1:5b:f5:f7:4a:da:24:4b:3c:26:f4:b2:c8:
2a:58:4b:13:33:bf:d4:31:8b:e1:e7:9a:57:be:3b:
92:72:10:9f:43:c3:e5:dc:1b:39:b5:7c:c7:12:03:
54:05:09:9f:95:14:84:fd:0a:38:78:f5:eb:ec:28:
43:13:b8:05:89:a3:a1:91:fa:b6:32:e6:25:2d:87:
57:a3:b2:5a:4d:f1:91:b0:b7:10:e7:0c:d3:56:b9:
16:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:C5:C8:5D:EA:8C:61:F9:C3:CD:DB:A0:CD:BC:87:28:13:74:EA:CB
X509v3 Authority Key Identifier:
keyid:46:D9:44:77:C8:B5:4D:12:EC:8B:3F:7B:6D:9A:E7:8E:51:0B:23:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtlEd8i1TRLsiz97bZrnjlELI9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54a457-3c48-4e01-90b0-5eb75c2318aa/1/RtlEd8i1TRLsiz97bZrnjlELI9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e4:12:ec:df:41:f4:a5:43:ce:e4:a8:62:17:30:62:45:72:
d0:c0:6e:b0:93:e9:98:0a:8d:90:72:61:88:1d:70:6d:62:e0:
47:f9:40:c6:77:ef:df:bc:50:cb:8a:1a:a3:f7:15:0a:92:08:
ba:ab:c0:2c:ea:78:6b:95:67:03:55:6f:cb:d8:c4:c4:24:86:
b1:fb:79:12:67:01:fb:45:92:07:6e:ff:d8:b2:56:da:22:2c:
8e:57:ce:ff:3e:76:9b:4d:17:67:c7:19:c8:fd:2e:e5:b6:0b:
6b:e7:3d:df:f1:fb:cd:6b:68:c2:53:bd:e5:52:77:42:25:b4:
df:09:f3:52:6d:6f:ff:43:ea:07:75:cd:10:b4:33:d0:c4:69:
cf:56:e8:9d:93:e9:e6:64:bd:e7:2f:53:37:af:7a:d8:c1:99:
95:02:27:a9:e3:88:5d:24:dc:51:24:ea:f2:11:1a:d6:83:2c:
3c:61:ea:18:74:05:a8:30:07:31:59:51:bb:31:13:a9:10:a3:
9d:42:54:98:34:66:05:b0:01:f3:62:19:37:a2:ed:0d:85:f1:
23:f9:26:9b:be:bf:06:f2:3d:10:b8:64:cf:5d:9e:86:a0:58:
84:22:7c:a6:92:bd:4b:45:03:be:af:14:24:bd:54:27:a9:62:
c1:15:0a:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpO9bF5sgK8DKrH1xDg4rBSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDk0NDc3YzhiNTRkMTJlYzhiM2Y3YjZkOWFlNzhlNTEw
YjIzZDgwHhcNMjUxMTA0MTMwMTU1WhcNMjUxMTA1MTMwMTU1WjAzMTEwLwYDVQQD
EygwMGM1Yzg1ZGVhOGM2MWY5YzNjZGRiYTBjZGJjODcyODEzNzRlYWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3fprMDDynopMvu9uM95iww0ou+1L
XGtcE+BPQFJ67V1cGN5b3qv4zFK9Ff2g3KQ6nEdn1I15jam79OQKAlGEEuurEqvf
C+QAZCMjcb9NGrRTm1LixqL31RM2h4QjnbLXm1oT+vgW0uNTzUWjTjHjbKHf091M
w3l5o9YoAqE6zN1tfxCI0/nZwrV19WxeE8aPI3jWHVh1zpKr5piBG5dl1bjJ5FPs
CMFb9fdK2iRLPCb0ssgqWEsTM7/UMYvh55pXvjuSchCfQ8Pl3Bs5tXzHEgNUBQmf
lRSE/Qo4ePXr7ChDE7gFiaOhkfq2MuYlLYdXo7JaTfGRsLcQ5wzTVrkWNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFADFyF3qjGH5w83boM28hygTdOrLMB8GA1UdIwQY
MBaAFEbZRHfItU0S7Is/e22a545RCyPYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAt
NWViNzVjMjMxOGFhLzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NGE0NTctM2M0OC00ZTAxLTkwYjAtNWViNzVjMjMxOGFh
LzEvUnRsRWQ4aTFUUkxzaXo5N2Jacm5qbEVMSTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlOQS7N9B
9KVDzuSoYhcwYkVy0MBusJPpmAqNkHJhiB1wbWLgR/lAxnfv37xQy4oao/cVCpII
uqvALOp4a5VnA1Vvy9jExCSGsft5EmcB+0WSB27/2LJW2iIsjlfO/z52m00XZ8cZ
yP0u5bYLa+c93/H7zWtowlO95VJ3QiW03wnzUm1v/0PqB3XNELQz0MRpz1bonZPp
5mS95y9TN6962MGZlQInqeOIXSTcUSTq8hEa1oMsPGHqGHQFqDAHMVlRuzETqRCj
nUJUmDRmBbAB82IZN6LtDYXxI/kmm76/BvI9ELhkz12ehqBYhCJ8ppK9S0UDvq8U
JL1UJ6liwRUKOw==
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:03:54 2025 by rpki-client