Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: LPgmVOO0bFhue9swbkKSsjEt9JvhxkqI0NfdGXrW94A=
Subject key identifier: 30:88:85:35:F1:DA:71:A0:3B:DB:F4:6C:3B:9A:F4:1E:FE:D2:64:2F
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 0197B7B38904EF0B398EEF2651370FADD4C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 091C
Signing time: Sat 28 Jun 2025 18:01:25 +0000
Manifest this update: Sat 28 Jun 2025 18:01:25 +0000
Manifest next update: Sun 29 Jun 2025 18:01:25 +0000
Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: 3Yg5iFlRngkVebYMsyWGZge4rqW8ABnhbyUG4+mz2IE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:89:04:ef:0b:39:8e:ef:26:51:37:0f:ad:d4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Jun 28 18:01:25 2025 GMT
Not After : Jun 29 18:01:25 2025 GMT
Subject: CN=30888535f1da71a03bdbf46c3b9af41efed2642f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:29:fb:15:5f:f6:19:ac:1d:4e:31:9f:26:39:
db:3f:e4:82:37:87:3c:75:1f:01:80:b1:61:57:50:
aa:41:f5:cf:ba:26:f0:aa:79:cb:ce:66:57:ef:dc:
ad:f6:11:34:9a:7f:34:91:cb:2e:dc:ca:98:76:90:
40:7c:ce:eb:cc:96:08:62:48:89:5a:46:53:ed:72:
b7:cb:7c:39:27:61:a1:a3:4c:43:fa:f6:71:34:df:
7a:7f:1f:d2:c9:72:40:9f:47:d9:c9:b3:34:94:2f:
8b:8c:63:1e:68:98:bb:4c:e9:fd:de:c7:1e:f0:4e:
26:ed:e8:48:a0:4e:6c:ab:e0:60:da:36:25:f1:3f:
b6:2c:b2:45:b9:68:75:ae:3e:21:ba:07:77:85:ff:
8b:cf:3a:fd:90:ab:49:a4:f5:32:c2:69:be:b4:83:
6c:8b:29:4e:92:88:4a:55:a9:e6:97:5b:19:7e:da:
11:15:4c:2b:7b:a9:eb:2c:6e:d5:15:79:1c:3d:e8:
1f:24:93:50:0e:90:18:59:73:83:11:df:85:fc:13:
91:29:37:82:95:47:0f:03:1c:31:f7:5a:38:24:5a:
d0:5e:bd:2c:c6:24:4e:51:ae:45:48:17:1f:9b:f4:
1d:87:a1:21:fb:8b:a2:18:6d:6a:d4:81:a9:70:ec:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:88:85:35:F1:DA:71:A0:3B:DB:F4:6C:3B:9A:F4:1E:FE:D2:64:2F
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:70:ef:24:cd:b2:32:38:46:78:66:ed:44:47:5b:1d:ef:cb:
5a:cb:69:be:b9:4b:06:0c:57:e3:8a:e7:af:1b:eb:2c:ae:f2:
ca:d5:b2:19:bd:00:49:22:1f:46:39:a9:fe:29:67:ad:aa:f2:
96:e9:bd:3e:45:4f:63:26:76:1a:6f:80:dc:9a:f8:5b:f6:ed:
aa:2b:3a:92:ff:35:74:e0:33:2c:29:d9:73:f3:1b:11:d4:75:
32:bb:a3:0e:9e:eb:78:e4:e7:0e:b1:f7:1b:38:87:2e:c3:47:
36:d6:ee:fd:87:d0:c9:69:8d:f7:40:e4:2b:00:8b:d6:38:be:
c4:9b:df:75:d5:f7:50:02:20:5d:aa:22:65:7b:a3:bd:78:9d:
97:6e:09:22:b0:af:1b:87:76:06:b4:51:a4:fa:1f:c3:0a:85:
e2:be:9e:f5:f0:95:dc:17:3e:98:32:13:98:c0:19:3e:93:c0:
9b:8f:97:1d:89:e5:e4:96:be:32:83:65:3d:1c:bf:55:c0:c6:
44:33:8c:ba:c7:7b:14:15:86:aa:0c:b0:10:a8:db:78:ac:8f:
ff:6f:54:b2:f3:1f:99:ec:b3:83:e4:20:5a:ee:ef:82:53:af:
57:c8:dd:44:cb:e9:03:45:d5:57:84:4f:68:a4:38:82:1f:e4:
6f:58:c1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:37 2025 by rpki-client