Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: DFjkJgLt7WRScAzHbnSAjvAiPmvntinRYM7+2dwHOy8=
Subject key identifier: 14:59:58:B5:D5:71:31:8A:7D:10:70:C6:C2:CB:32:FD:FE:02:33:5E
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 0199FC217790BF38088A77BFCB9AB5883A3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 11:01:15 +0000
Manifest this update: Sun 19 Oct 2025 11:01:15 +0000
Manifest next update: Mon 20 Oct 2025 11:01:15 +0000
Files and hashes: 1: NVT5ElowawlO6xhtgnjNVI-MrRY.roa (hash: eokuWXBRCzzEFTJDGG6W73lsSws+UPHi7dsJni5axaU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: PVvc1CKuqFcniddhYpbIjWEqNEBWIh/iYrqrzOD2cp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:77:90:bf:38:08:8a:77:bf:cb:9a:b5:88:3a:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Oct 19 11:01:15 2025 GMT
Not After : Oct 20 11:01:15 2025 GMT
Subject: CN=145958b5d571318a7d1070c6c2cb32fdfe02335e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:62:db:60:04:f3:fe:3f:e7:bf:63:8f:e7:
56:2e:0e:92:81:bf:cd:af:3c:cc:45:ec:86:59:13:
63:45:71:4d:c6:99:95:ef:4e:40:86:88:06:4b:23:
33:72:d6:38:fe:b1:17:23:ec:4a:f3:63:10:0d:12:
6c:da:e3:c3:7f:a3:a4:aa:fa:d3:8b:b7:22:82:ef:
58:6c:05:72:20:a3:a9:5f:52:ab:b6:fa:ee:8a:d6:
41:2a:82:2c:57:b2:bf:85:6f:b4:7f:0b:44:e9:0e:
ec:70:25:1d:a7:ae:16:1a:25:12:44:43:51:f3:a2:
7e:ca:56:1a:8d:d0:95:6d:6d:8a:34:25:0d:47:92:
78:aa:94:29:38:dd:c4:4e:f5:38:bc:57:88:00:5c:
6f:9a:17:77:18:56:50:ff:6f:96:5a:bd:f8:d4:19:
bf:8c:e8:24:0e:78:6c:81:37:7d:1c:c6:c1:1e:12:
9b:99:14:57:39:ef:c0:b1:08:5c:21:b9:2a:22:ab:
3d:f6:b4:b9:38:6b:61:cd:7f:64:f4:90:0a:71:40:
d1:15:e7:d4:6f:db:62:e2:e9:24:dd:17:36:f0:5c:
27:60:a9:d6:f4:5c:24:6e:e0:55:10:90:c4:3b:2c:
36:8a:60:1b:e3:0a:f6:e1:b1:33:46:f3:e0:c2:fd:
38:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:59:58:B5:D5:71:31:8A:7D:10:70:C6:C2:CB:32:FD:FE:02:33:5E
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:de:13:4f:7a:31:2d:c2:81:13:f3:d6:02:56:af:7b:ab:0d:
db:f4:1d:f1:8d:c2:db:4b:03:6e:ac:e1:00:ab:26:f6:ab:fd:
65:4e:9d:bf:3a:e6:4f:b5:e6:2d:d6:9d:0e:c8:8d:28:4a:ac:
64:b7:9c:eb:f2:03:da:e6:6c:e1:f6:88:18:56:4a:b7:70:2a:
7c:d0:02:ba:79:01:f5:e3:7a:17:90:ff:2c:3a:51:49:ae:93:
90:7a:e5:eb:30:eb:d4:0a:f4:74:28:cb:00:0e:96:24:36:ad:
79:b9:48:13:49:bf:5b:06:8a:1a:99:40:34:21:a2:9f:cc:3f:
b8:4d:78:59:11:e2:ae:b9:72:5e:12:ad:56:62:3b:8d:21:a3:
1a:5c:ca:63:9a:59:e9:71:91:4c:75:aa:ad:64:7b:f5:2a:b6:
fc:1b:e6:c2:a5:62:fc:11:40:84:47:ee:a7:04:24:36:96:1e:
ef:f7:99:84:09:6e:16:f9:8f:ff:97:3d:86:c2:7f:33:6d:0c:
05:d9:8f:f9:95:3c:13:bf:77:06:90:7a:80:aa:90:02:e4:fa:
2b:5e:24:61:88:6d:1a:4d:ab:13:d7:08:62:e5:c9:dd:08:9b:
79:a7:8f:0d:48:34:8c:bf:12:65:95:fe:bf:ad:24:29:a6:e8:
e0:02:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:57:50 2025 by rpki-client