Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: U69+tCmubHtka816H27Rhl9BaI7FT+bz4+ytc8XunBo=
Subject key identifier: 67:B0:89:6B:CA:AD:86:0E:44:4D:8A:11:76:39:CF:C2:7E:50:05:84
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 0199FB0ED0AFCFEAEC05D4EE9E13FC6328C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0A48
Signing time: Sun 19 Oct 2025 06:01:15 +0000
Manifest this update: Sun 19 Oct 2025 06:01:15 +0000
Manifest next update: Mon 20 Oct 2025 06:01:15 +0000
Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: yT5uw5ze5WZz/XKSzGhiK0ujfYE4SMtyu6U2Z2A38Cs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:0e:d0:af:cf:ea:ec:05:d4:ee:9e:13:fc:63:28:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Oct 19 06:01:15 2025 GMT
Not After : Oct 20 06:01:15 2025 GMT
Subject: CN=67b0896bcaad860e444d8a117639cfc27e500584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:27:dc:f3:49:b5:55:bc:bd:d2:71:97:bd:6e:
f5:47:d6:72:c5:e0:d8:86:6b:ef:a6:f4:cf:14:e8:
b9:ed:28:56:f7:72:7a:cf:51:0e:02:d3:f9:1f:83:
09:7a:58:9e:c8:f7:96:8d:97:87:c0:37:4b:15:0d:
c6:33:a4:20:e6:56:1b:7b:74:62:80:d3:fe:36:3f:
7f:61:69:d0:f2:59:99:69:e0:d3:0e:a0:14:4a:8a:
d5:0e:d2:49:16:dc:b8:c3:c1:59:16:35:aa:bd:c0:
5b:d1:98:e4:5c:bd:d6:b4:3c:b9:c1:31:58:26:f7:
38:63:e0:73:a6:99:ec:c9:28:88:09:1c:9f:55:97:
fa:8c:66:1e:a6:e8:4a:ab:0b:a0:20:8c:ff:37:74:
4e:56:6b:d9:8b:47:d5:a5:47:e1:07:b3:5d:c5:a4:
23:a4:8b:85:d4:e6:c3:f2:56:ed:31:61:50:12:15:
6a:8b:fd:ab:df:2e:8a:9e:a4:91:9d:06:0e:31:2b:
a6:1e:4a:70:a3:04:3b:33:93:02:fd:b2:36:89:a6:
df:db:c8:10:a6:4e:73:0e:48:69:9d:cc:f7:d9:53:
d1:70:39:55:86:e5:d2:e8:1c:22:3f:70:3d:31:13:
00:6f:6c:95:89:f5:59:b7:cc:c2:f8:ee:04:5e:d7:
b1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B0:89:6B:CA:AD:86:0E:44:4D:8A:11:76:39:CF:C2:7E:50:05:84
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3c:72:c6:31:a2:af:e1:d8:5a:cc:a3:e4:43:d7:03:a7:bb:
86:4c:dd:21:5f:29:a1:5c:0c:cd:28:54:1d:c2:1f:be:db:8d:
2d:07:a8:6b:3b:5a:db:45:62:a4:88:74:99:03:31:76:29:bb:
85:2e:87:b0:17:33:dd:bc:c8:b0:45:bb:c2:52:22:21:8f:84:
80:21:56:13:07:e6:0f:43:68:be:3f:9d:0c:3b:7b:0b:f4:1b:
f0:42:3f:5d:d3:a0:5b:83:b5:49:dd:44:ae:47:e7:06:70:07:
14:8d:6f:68:f2:a7:a2:a9:b4:94:da:b5:e5:5e:85:a8:7a:a3:
d2:a8:6a:7a:2a:15:05:e9:9b:f7:12:d0:0b:d2:3f:2a:8e:8d:
be:55:19:2b:f2:ce:c1:89:2d:f8:cc:e5:12:2f:5e:f1:20:ea:
8c:9f:9d:49:00:82:19:83:2b:f5:d1:e3:56:86:8c:0d:1b:54:
3d:47:22:0c:20:a4:4e:06:2f:5b:54:ee:b7:d0:12:5a:23:6a:
5c:9d:75:ab:27:78:c9:a3:0e:a4:d1:e0:1a:13:d7:9e:fc:bb:
13:8f:fb:70:25:de:7f:1d:5f:b3:a5:58:2d:51:fb:84:1a:64:
04:5b:7e:29:ac:bd:9a:8b:c0:39:e0:3d:16:48:93:28:d7:7a:
54:a0:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:31:58 2025 by rpki-client