Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: UAOtX2MoveFvW6ehQRWJh+RX+K2wlOFu0MNEM7RuOfU=
Subject key identifier: 85:9A:73:DE:C0:8C:47:4B:AD:C2:F4:7C:69:EE:82:6D:DE:93:65:0A
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 0197B77C323B6252B1A0FE90E7618A3E7E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: Jgw7fcM2/lIKRqaGZleuEACqt4M5iZ2wV1Wys1BSCG4=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:32:3b:62:52:b1:a0:fe:90:e7:61:8a:3e:7e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=859a73dec08c474badc2f47c69ee826dde93650a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:b4:93:1d:d4:75:1e:24:06:46:58:74:c9:
9d:57:f7:72:5a:f7:03:bd:c4:1c:c1:5b:94:85:cb:
74:4e:b3:65:d4:03:90:82:a9:5b:78:04:6f:6e:7f:
a7:65:db:33:f7:51:ce:5c:fe:13:f9:4e:b0:0a:4d:
83:af:9a:2b:5d:71:ab:57:3f:6c:03:2c:53:65:7b:
34:e9:d0:3f:e6:85:b9:9a:c0:40:46:51:b6:7a:18:
72:36:ce:2a:f7:6d:b8:52:c5:7f:3f:1b:59:3e:2c:
53:25:6c:d6:99:6d:0b:1d:b7:98:f7:2a:c0:3b:e0:
92:ce:82:f6:9c:fd:b3:38:31:65:1a:2f:4d:02:2a:
e3:07:1e:ff:32:88:96:a2:e3:f0:59:56:4b:a4:5d:
9b:58:5d:39:7a:49:a8:4a:69:de:ef:7e:41:3b:d6:
04:d4:69:e6:0a:42:dc:e4:e2:9f:ae:95:7e:e1:43:
ad:9c:1f:71:22:36:2b:d4:5b:97:b2:2d:2f:e2:15:
2b:3e:72:23:6e:a4:3c:a9:1e:8f:17:26:ce:17:8c:
2b:d1:21:cb:19:4a:33:c2:55:e9:09:a0:ce:4d:4d:
47:f2:de:f5:84:68:99:a8:d8:d1:f7:65:36:c8:25:
f3:91:7f:19:5d:4f:63:09:0d:35:57:7e:52:ee:2d:
87:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:9A:73:DE:C0:8C:47:4B:AD:C2:F4:7C:69:EE:82:6D:DE:93:65:0A
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:54:e9:ba:cc:95:75:fa:77:5e:c0:1f:60:0b:d0:dc:cd:66:
5e:92:42:32:92:c9:96:e9:1e:77:a5:59:a5:7b:f0:2e:d9:6f:
f5:c2:af:a5:94:bb:d9:7e:42:89:35:93:03:9d:db:e8:6e:7a:
49:d8:ad:72:06:30:79:45:3f:e2:19:66:df:fe:a8:ee:db:98:
73:e6:cf:35:58:80:46:36:47:f6:65:ed:3d:04:c3:4a:80:51:
41:5c:a5:7d:c7:c5:d5:04:20:07:01:0c:7a:b7:51:9f:ad:ee:
ff:b2:44:5e:13:f4:e1:fb:87:fa:45:6a:78:02:cc:e5:38:90:
d0:d6:be:44:ea:ce:39:ef:ac:c6:a6:b3:99:a7:f2:71:eb:48:
48:65:bf:ba:56:70:f6:89:bf:58:9c:b1:b5:40:58:60:97:35:
1c:26:3c:38:ea:08:aa:02:16:b3:a3:bc:43:58:af:8e:24:ba:
dd:c5:3d:b1:92:84:86:79:2a:6c:77:9a:7c:77:b6:81:0b:37:
4c:b1:3d:6c:28:db:a8:66:73:84:d0:1f:ad:8b:fe:57:7a:e8:
ce:97:e9:34:1d:af:5c:90:98:c5:68:43:b9:b4:bd:e0:e6:35:
2a:30:06:8c:6b:b3:f0:e5:f4:3b:17:9b:bd:76:90:46:88:b2:
48:ed:24:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:24:03 2025 by rpki-client