Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: 8MK/r4R5xeAr/6SzLYoqkROdR+7Sh2P/BTJZeicVAFI=
Subject key identifier: 8D:71:8D:3C:B3:05:1B:A1:BC:0E:84:D2:F8:F1:19:AF:9E:1B:22:25
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 0197B7B3101C599574DD0B2A8C6807BF06EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:00:54 +0000
Manifest this update: Sat 28 Jun 2025 18:00:54 +0000
Manifest next update: Sun 29 Jun 2025 18:00:54 +0000
Files and hashes: 1: 8n66jbpw-c2Aqy4SU3OEjHIQ8Ng.roa (hash: 5aUols723XY3S6GAB1kKE/l7w8plVtAbUtwN3H30tYU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: 0/v8pfu9fg4YLR7QLUmHJAE8wjX1baZLtJaUOVMu8h4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:10:1c:59:95:74:dd:0b:2a:8c:68:07:bf:06:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jun 28 18:00:54 2025 GMT
Not After : Jun 29 18:00:54 2025 GMT
Subject: CN=8d718d3cb3051ba1bc0e84d2f8f119af9e1b2225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2d:e5:ca:b1:1f:91:b0:28:af:9d:46:c7:52:
41:7b:fe:24:d5:a2:d3:24:c4:7b:22:d1:0d:59:13:
5e:94:e9:b5:f2:96:c3:93:f7:c4:65:d2:22:88:69:
75:5d:df:7e:1d:5b:a1:8b:39:45:10:ed:46:4c:f0:
04:ae:3d:cf:bf:7b:65:a9:15:ce:81:14:05:16:b8:
f3:d9:af:d8:4a:3b:5c:a6:bc:fd:a7:73:aa:6f:4b:
42:49:9a:36:6e:a9:19:5a:27:23:23:37:b9:cc:9f:
8d:a6:57:5c:14:4f:d0:f8:1f:35:ca:0d:c5:55:ef:
8d:bf:3d:70:8c:14:3d:8b:d1:16:ec:15:f4:6a:71:
d0:34:25:ef:fe:f0:f0:6b:1f:ac:53:58:b3:d5:1c:
ba:d0:bb:ed:b8:77:a0:55:b6:45:78:9e:73:8a:26:
b7:29:4a:3f:11:27:95:bd:9e:df:f6:61:01:26:6d:
b2:6c:b5:18:a4:90:ce:5a:66:7d:ce:43:3b:ff:d8:
79:da:b4:d5:99:d1:84:17:27:0b:59:34:6a:db:d9:
4a:52:bc:00:cb:ec:5a:99:19:cc:f6:f9:4b:d3:53:
b3:e1:f4:0a:65:00:88:cd:16:ad:5b:e2:3b:d2:d8:
4b:ec:fc:d3:e6:b0:b6:20:3f:81:1e:cd:20:c3:a0:
04:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:71:8D:3C:B3:05:1B:A1:BC:0E:84:D2:F8:F1:19:AF:9E:1B:22:25
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:fa:27:26:d2:28:64:29:c4:ae:61:da:d8:a6:25:ee:82:44:
b0:39:9b:5f:76:5b:58:66:8f:97:f5:1d:0c:1d:f5:71:9b:f5:
4f:f9:0c:7f:59:dc:60:75:e4:19:c2:86:c3:fd:96:61:6c:fe:
32:63:5a:ee:36:d6:3b:a7:ad:41:c8:ad:b5:ed:b9:76:7a:ac:
69:98:6e:14:71:2c:e8:c4:21:a4:8d:a2:cb:fe:8d:bd:71:e5:
c5:ce:f4:9c:79:b6:2a:9f:54:42:ef:2b:54:39:26:a7:7c:24:
60:a4:93:12:fa:ea:dd:0f:74:38:a0:f8:d4:51:5f:43:f0:7e:
68:ce:01:e4:38:96:d4:e3:d9:e7:aa:6d:bf:24:bc:89:ce:be:
5c:bb:d5:40:fe:55:35:2d:0a:17:4c:d1:c2:2a:db:aa:87:33:
a0:d0:14:a9:87:e1:af:8f:4d:15:6e:ce:96:2f:70:c9:ff:3d:
3f:23:11:51:c9:f7:c2:bd:8e:1d:8f:e6:f7:aa:f4:ef:43:94:
72:95:80:f3:d2:15:5a:2f:ec:da:72:1f:80:79:59:86:f8:00:
11:4b:0e:e9:09:a1:f9:87:d7:b7:52:71:18:f7:b5:ca:db:6d:
72:10:14:d0:a3:7d:32:dc:9a:df:47:76:97:27:87:ef:71:9b:
e4:21:4a:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxAcWZV03QsqjGgHvwbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz
NmY4MjcwHhcNMjUwNjI4MTgwMDU0WhcNMjUwNjI5MTgwMDU0WjAzMTEwLwYDVQQD
Eyg4ZDcxOGQzY2IzMDUxYmExYmMwZTg0ZDJmOGYxMTlhZjllMWIyMjI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1C3lyrEfkbAor51Gx1JBe/4k1aLT
JMR7ItENWRNelOm18pbDk/fEZdIiiGl1Xd9+HVuhizlFEO1GTPAErj3Pv3tlqRXO
gRQFFrjz2a/YSjtcprz9p3Oqb0tCSZo2bqkZWicjIze5zJ+NpldcFE/Q+B81yg3F
Ve+Nvz1wjBQ9i9EW7BX0anHQNCXv/vDwax+sU1iz1Ry60LvtuHegVbZFeJ5ziia3
KUo/ESeVvZ7f9mEBJm2ybLUYpJDOWmZ9zkM7/9h52rTVmdGEFycLWTRq29lKUrwA
y+xamRnM9vlL01Oz4fQKZQCIzRatW+I70thL7PzT5rC2ID+BHs0gw6AE6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI1xjTyzBRuhvA6E0vjxGa+eGyIlMB8GA1UdIwQY
MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt
NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh
LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABvonJtIo
ZCnErmHa2KYl7oJEsDmbX3ZbWGaPl/UdDB31cZv1T/kMf1ncYHXkGcKGw/2WYWz+
MmNa7jbWO6etQcitte25dnqsaZhuFHEs6MQhpI2iy/6NvXHlxc70nHm2Kp9UQu8r
VDkmp3wkYKSTEvrq3Q90OKD41FFfQ/B+aM4B5DiW1OPZ56ptvyS8ic6+XLvVQP5V
NS0KF0zRwirbqoczoNAUqYfhr49NFW7Oli9wyf89PyMRUcn3wr2OHY/m96r070OU
cpWA89IVWi/s2nIfgHlZhvgAEUsO6Qmh+YfXt1JxGPe1ytttchAU0KN9Mtya30d2
lyeH73Gb5CFK3A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:11 2025 by rpki-client