Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: /1F6od/yjs7cfAzhCy8UOBijkhag7BQfDY2sbRczm1E=
Subject key identifier: 0A:30:4F:7C:94:F3:DC:8C:76:B8:66:D1:C6:1E:20:CF:3F:5C:04:B0
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 0198D54DE564BC300D59FE90DDA0E71EC822
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 05:01:48 +0000
Manifest this update: Sat 23 Aug 2025 05:01:48 +0000
Manifest next update: Sun 24 Aug 2025 05:01:48 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: uqdBHCkcU+3GlvI9r76GImHy/y0O+Mftbz+JjxpxGxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:e5:64:bc:30:0d:59:fe:90:dd:a0:e7:1e:c8:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Aug 23 05:01:48 2025 GMT
Not After : Aug 24 05:01:48 2025 GMT
Subject: CN=0a304f7c94f3dc8c76b866d1c61e20cf3f5c04b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3a:b0:9f:83:8e:cb:f0:7b:e4:1c:06:b0:f8:
ca:09:1c:72:4d:fd:5e:6c:8e:3b:64:b5:d5:08:78:
ed:29:18:b6:4f:22:fd:7e:ad:08:d9:2f:25:50:bd:
30:aa:2b:99:70:e5:a8:96:a5:cd:e0:fc:db:d7:30:
a7:49:8c:06:6f:70:5e:56:e6:4b:f7:47:ce:c3:83:
0b:e5:0e:2a:48:c6:0d:36:a7:5a:21:b5:9e:e4:9c:
7e:60:94:30:07:b7:85:72:e0:b8:64:d9:13:d2:59:
73:be:3e:16:48:46:2e:ce:99:8e:97:f4:8a:20:00:
de:1c:56:87:7f:d1:bd:cc:49:70:0b:6c:61:9b:46:
a6:30:bf:9a:00:34:76:61:cf:c7:bc:6f:9e:18:30:
8a:85:ff:59:e3:30:98:4f:ee:5a:3d:45:09:2a:9f:
30:2f:c9:d7:7f:0a:aa:2d:54:94:00:71:20:79:b0:
b1:aa:2f:84:cd:3d:c8:90:4a:af:61:e6:f7:ad:5c:
0a:92:e2:bb:fd:b0:86:75:8c:04:70:eb:81:85:c3:
96:41:9e:55:ca:7d:75:2d:4b:ed:f2:ec:77:05:4d:
f6:7d:f0:ef:7b:64:bf:f8:e8:66:a0:6e:48:19:dd:
22:2d:4a:5b:cd:5b:ab:d1:2c:28:8d:5c:47:5d:74:
28:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:30:4F:7C:94:F3:DC:8C:76:B8:66:D1:C6:1E:20:CF:3F:5C:04:B0
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:86:66:d1:ae:1e:01:87:99:9e:df:b3:a5:4d:71:cf:02:3b:
ca:45:8f:d1:77:aa:55:37:d0:8d:83:31:4b:4a:d7:38:d4:c6:
73:36:c8:14:a6:30:60:2a:fd:91:d9:f1:86:e7:25:6f:40:88:
01:01:69:c4:24:83:75:86:8a:d6:f7:10:70:e7:a4:c4:50:cd:
6d:c4:c6:6e:b2:c5:02:3d:71:28:40:c1:ee:66:42:08:cb:f2:
76:f8:7e:6c:98:4a:7a:33:a4:7d:ed:fb:83:4d:5d:86:8e:f5:
d3:1c:26:ce:e6:ec:0f:34:c2:84:10:86:63:0e:ce:6c:e2:78:
29:bd:61:a5:3e:b3:d8:e3:8a:6f:55:f3:72:93:de:24:35:b7:
95:eb:b8:7d:eb:bd:e6:44:f7:a2:4b:1d:19:42:6f:81:04:84:
af:de:22:92:af:f5:ee:95:42:0c:70:39:55:1c:88:ca:77:16:
f4:43:c3:b0:54:63:ca:e4:77:ea:95:97:76:04:d0:00:a3:0a:
8b:29:5d:e5:52:04:bd:ad:91:0b:89:21:b9:2f:85:5e:82:ac:
bb:61:d3:76:d6:14:35:cb:c1:27:c8:e3:51:f5:25:97:f4:e5:
c3:16:15:d0:ee:3b:24:1e:94:ec:01:6c:74:bc:d6:51:55:4f:
c0:5d:5d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:17:38 2025 by rpki-client