Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: 9Hbn3WW2IvrK8+mfIUqN1+V68koROCVs+Hqh9natJFA=
Subject key identifier: AB:A3:46:FF:96:8C:1F:D7:9E:92:46:FF:91:B8:83:33:0A:D8:D8:B1
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 0199FB7C9CE3591CBECD147B397230BDDA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 16EE
Signing time: Sun 19 Oct 2025 08:01:11 +0000
Manifest this update: Sun 19 Oct 2025 08:01:11 +0000
Manifest next update: Mon 20 Oct 2025 08:01:11 +0000
Files and hashes: 1: NBFkOVFjhr5cFEclo5MbI_qhtaE.roa (hash: aEnSyjmzjCXkq9QNcUbxZtFecm4VYBNFEkBBtcfxmSI=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: iXrQTD6EJmliKqFwF6SO1lLU+nMwFcYgDaVFqv2k/gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:9c:e3:59:1c:be:cd:14:7b:39:72:30:bd:da:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Oct 19 08:01:11 2025 GMT
Not After : Oct 20 08:01:11 2025 GMT
Subject: CN=aba346ff968c1fd79e9246ff91b883330ad8d8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:92:84:9e:75:08:1a:fa:4c:ea:91:b4:13:24:
0d:13:79:0d:fc:fc:06:98:94:49:b9:3a:9b:a2:40:
99:a2:b3:76:12:6a:a3:60:10:86:f5:9e:b6:75:a4:
8d:f8:8c:b1:da:83:d7:a5:61:aa:b8:ed:ed:8c:77:
50:b5:5e:d7:ea:99:3b:74:85:e0:65:af:97:fd:6f:
cd:b6:bf:9a:3f:e7:ac:17:27:c6:c7:fd:e9:75:24:
bb:a2:bd:b6:ad:c1:08:90:92:22:16:79:21:54:d6:
28:af:1b:45:85:13:b3:19:c9:1e:af:13:64:5e:1e:
9f:40:de:88:07:cb:50:9e:00:aa:6a:93:2b:83:d8:
03:a6:de:17:02:3b:b1:e7:27:93:c7:fe:66:a6:f0:
75:9e:09:e0:7f:cb:21:9b:51:82:90:a0:a2:1c:af:
19:be:8b:68:20:15:ec:88:ea:d4:60:db:06:0e:1c:
1a:02:95:85:81:34:77:2b:e3:91:84:11:9d:3f:59:
31:8d:08:b5:7f:71:bc:6a:78:2e:44:0b:52:a1:ed:
de:f4:04:f6:c1:e9:c3:c2:a9:25:bd:be:76:dc:5c:
76:50:f6:64:7d:59:44:f6:1b:1d:cc:ce:2d:60:4e:
d6:11:da:56:8d:fe:fe:e0:83:ae:df:e9:43:82:e9:
d6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A3:46:FF:96:8C:1F:D7:9E:92:46:FF:91:B8:83:33:0A:D8:D8:B1
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cb:73:b8:28:24:4e:99:cd:b5:8f:b8:72:9b:67:aa:e3:5b:
4d:3b:ce:6e:0e:df:09:ec:60:65:9e:10:87:35:b1:ba:f0:6f:
a5:61:d0:48:91:34:1d:c7:d5:24:1e:10:8b:c0:45:76:98:ff:
63:d4:ec:33:17:67:26:d6:69:3d:c4:75:83:48:0f:3e:95:00:
91:6c:5c:95:21:c6:64:8b:39:32:35:45:06:35:8e:f3:7f:61:
19:59:b6:e5:27:45:be:1f:d2:1e:a6:44:9d:89:71:d3:c8:4c:
c8:d6:d4:55:d4:dc:11:3e:97:8f:e1:84:d3:06:fb:3b:97:19:
83:a7:7f:67:8c:ce:8b:98:93:b7:65:7f:c3:9b:bf:3d:ea:a1:
e5:04:8f:d0:52:bb:2c:96:ec:60:a6:52:1f:76:e1:ea:b9:0a:
07:5e:fc:e7:52:8b:fc:4d:6f:f3:5b:54:78:71:2a:41:fc:35:
bb:83:01:1a:8b:57:fb:dc:fb:45:c9:a5:63:9b:58:84:b3:14:
23:0d:14:a7:e1:62:b1:36:f6:92:3b:68:48:77:83:8b:a6:de:
03:9b:d4:77:7d:c2:4b:1b:93:a7:5e:38:af:16:32:43:f3:90:
47:00:ff:69:d0:50:0f:d6:35:b9:a4:57:40:35:d3:de:16:32:
36:9c:97:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:54:50 2025 by rpki-client