Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: XTXMMtVwK4UaZ9hhs7BHmTHrh6k7VuXJhp7JY+mpJeY=
Subject key identifier: 3E:C5:CB:80:A9:8A:6F:0A:1E:86:C2:40:31:6A:E4:30:91:66:B9:37
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 0197B77C959D8681A5F59B95F3106B138CA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 15C1
Signing time: Sat 28 Jun 2025 17:01:24 +0000
Manifest this update: Sat 28 Jun 2025 17:01:24 +0000
Manifest next update: Sun 29 Jun 2025 17:01:24 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: YCf5LCVtRxQQPxiN2f0qfIMEF/sOCq32hV6Glbs7MEA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:95:9d:86:81:a5:f5:9b:95:f3:10:6b:13:8c:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Jun 28 17:01:24 2025 GMT
Not After : Jun 29 17:01:24 2025 GMT
Subject: CN=3ec5cb80a98a6f0a1e86c240316ae4309166b937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:57:19:ae:08:42:06:9e:fe:c1:23:d4:f0:85:
53:cb:75:59:82:07:26:1b:88:32:da:98:01:bb:6a:
f9:62:27:f7:34:84:72:d4:ae:d3:18:0d:af:eb:96:
d0:15:55:61:f1:3e:b1:34:37:33:bd:4a:a7:52:cc:
f6:0a:18:3a:34:d8:f3:27:a8:d7:7c:1b:43:08:35:
2a:20:69:4c:45:b1:71:d6:c3:00:5a:67:09:a0:de:
9f:cb:9a:8c:41:dd:6a:0f:7e:59:13:28:7e:a8:d0:
23:af:85:83:80:f1:60:6b:3d:23:be:8d:98:3a:8b:
c4:82:37:44:5d:8b:13:21:88:b1:df:a4:08:b0:e5:
de:aa:f2:55:2d:fd:57:3e:6e:3d:8b:5f:0a:80:8d:
9a:71:5b:9e:7d:82:42:98:d3:19:7b:f5:93:ba:a6:
b0:ce:53:03:80:25:c8:b9:31:bd:af:7a:5b:e1:68:
7e:94:22:66:2c:30:30:12:25:1e:4d:e5:bc:32:0a:
39:af:59:b6:bf:06:f9:f8:2d:da:14:0c:37:fa:8d:
08:ab:03:d7:35:26:ae:fb:b7:46:77:be:c2:5f:87:
7d:81:89:18:10:78:cd:1c:32:2a:e4:7b:8f:43:eb:
5f:53:ac:99:fa:e4:2f:0c:9e:67:81:50:2a:71:d6:
0a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C5:CB:80:A9:8A:6F:0A:1E:86:C2:40:31:6A:E4:30:91:66:B9:37
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:79:18:09:60:2c:83:c1:49:f0:8d:2b:4a:ee:b9:4c:3c:
23:93:75:06:f7:72:03:b5:e7:08:15:66:97:12:c3:b4:20:27:
ec:ec:66:c9:fa:24:16:bb:31:36:95:72:22:aa:8f:d4:00:df:
b8:d2:78:cf:85:ca:5b:a8:75:d8:3d:09:31:14:e4:f7:40:19:
7e:f3:d6:b5:6c:97:c6:fd:0c:bd:b2:4f:51:a1:41:a8:35:e9:
3a:d4:74:ca:a3:e5:08:58:a5:4c:83:81:0b:44:81:e4:14:1a:
02:26:bf:0c:53:2b:40:be:8a:09:d0:09:78:43:40:f6:30:d9:
25:68:94:77:9a:bf:f4:10:d0:65:4b:a2:16:75:95:8f:94:97:
b8:ca:c5:ab:08:63:d4:22:10:13:34:80:a6:38:33:1d:b5:3d:
b7:23:5c:71:2d:a1:90:b1:ba:fa:a4:dc:9c:ca:c2:f1:c4:98:
bc:dc:43:c3:84:93:54:4e:56:85:43:1c:21:f5:09:b7:77:8a:
92:9e:6e:92:87:44:33:7a:b3:57:a2:67:f9:d9:d5:f3:f7:9a:
aa:24:bc:71:ac:0b:10:c2:89:e6:6e:4a:5b:f2:69:fb:a4:1d:
f5:75:61:df:4e:0f:8c:eb:e6:67:4e:b9:09:58:52:a3:72:9a:
f9:2d:f1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:17 2025 by rpki-client