Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: QWqVDVxs/Z34N38RaZTAh75lz/DiuxAK30sj7Ia5wr0=
Subject key identifier: DE:19:12:42:2F:4A:7C:AF:68:6D:6A:AA:CD:BB:A5:1A:00:F9:C0:4F
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 0199FAD7A09A7701B068B58C0D2CF417E1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 05:00:59 +0000
Manifest this update: Sun 19 Oct 2025 05:00:59 +0000
Manifest next update: Mon 20 Oct 2025 05:00:59 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: 9FveEBddGQt0kCsymSoHcXqHKtmLpaH94STu4N7q7bg=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:a0:9a:77:01:b0:68:b5:8c:0d:2c:f4:17:e1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Oct 19 05:00:59 2025 GMT
Not After : Oct 20 05:00:59 2025 GMT
Subject: CN=de1912422f4a7caf686d6aaacdbba51a00f9c04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:8c:f8:5c:e9:27:3c:c3:17:38:a7:31:33:31:
34:05:19:47:75:80:38:eb:c2:5b:ed:f9:12:06:22:
27:4a:ad:9a:aa:c7:46:50:66:84:e8:b2:91:35:9e:
32:2e:b9:be:5b:b1:1f:ef:f0:3f:c4:aa:19:44:37:
87:08:77:ea:db:a5:d2:49:62:2f:6a:c3:10:ac:60:
6d:e1:eb:97:f6:d4:21:fb:b6:16:52:b1:7c:6a:ef:
71:4e:f8:81:33:95:e1:7e:6d:72:a5:4e:35:05:65:
9e:be:f0:28:0f:fc:dc:bd:47:50:de:2a:21:e3:75:
1d:bd:b5:c9:d3:e2:23:e0:79:03:cd:00:b8:25:71:
e8:f4:fc:da:59:e6:a3:05:8e:ad:88:80:85:5b:39:
d9:71:b5:c9:82:ef:5a:86:8a:53:77:a3:25:fa:49:
33:8d:57:7f:4c:cd:2e:9f:b2:b7:6e:bb:7c:67:dd:
3f:80:cc:34:5d:e8:fb:e0:b9:0e:79:95:d6:85:7b:
53:a0:4a:d4:33:8b:fb:91:23:34:a1:8b:45:3e:72:
50:ee:0e:2b:54:66:d8:64:e1:51:34:7b:ba:8a:7c:
37:36:d2:98:4f:0d:1a:09:0c:fb:a5:e2:5a:cc:c1:
7c:49:e1:8d:41:f2:56:87:4b:50:23:49:20:02:8f:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:19:12:42:2F:4A:7C:AF:68:6D:6A:AA:CD:BB:A5:1A:00:F9:C0:4F
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9b:ff:af:b2:19:7d:8c:d1:59:99:ed:18:90:db:03:b5:02:
fa:63:c9:61:85:12:2d:50:07:9c:a8:91:9d:27:8f:8e:c3:1b:
e5:c6:81:62:13:2e:79:18:d3:a8:09:e8:47:42:2f:3f:d9:c0:
42:f9:1e:f9:88:e4:df:04:58:d7:be:5e:cf:a7:94:bf:90:ff:
43:a0:65:08:2a:88:f6:e7:1a:84:23:3f:8b:21:a9:43:77:43:
54:c4:7a:4d:1b:56:fd:f4:67:a8:42:93:f1:98:f3:2e:b1:7a:
1c:a7:60:ad:81:52:a9:33:28:65:ab:94:a5:90:be:fd:9d:e6:
16:60:aa:4f:65:c8:70:23:21:dc:83:f5:51:bc:20:2c:57:99:
71:00:45:87:03:ef:8b:0e:3e:90:93:23:00:47:d0:fc:e1:a1:
d4:76:91:a1:3d:ce:65:ca:da:96:fa:a6:90:53:0a:a3:40:48:
30:d8:e4:0f:14:29:59:9a:53:cb:4e:8e:f6:ba:e9:bc:6b:b3:
8c:48:f2:39:d6:85:74:6a:1e:bb:6b:93:45:c4:f4:c9:a2:90:
ef:47:f8:97:e4:d5:3f:5b:46:96:e5:b6:f0:3c:47:71:b5:de:
56:20:af:cc:6a:0a:65:79:88:72:dd:de:dd:2c:ea:07:4f:c9:
91:51:a2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:28:26 2025 by rpki-client