Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: iuDQzBKXeo4wykj7+xvGu88LR9Ks0nGTL2v7mGQs0Y8=
Subject key identifier: 6A:8C:00:3B:D5:38:D4:A6:62:21:5B:BC:13:86:36:D4:AB:30:5D:30
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 0197C15B0C15791023D1E082A27CCB34973D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 15BC
Signing time: Mon 30 Jun 2025 15:00:58 +0000
Manifest this update: Mon 30 Jun 2025 15:00:58 +0000
Manifest next update: Tue 01 Jul 2025 15:00:58 +0000
Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: oNsreRZnnmRavxoAcQMqJSSfQw/MwzUuXleQc65MC7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:5b:0c:15:79:10:23:d1:e0:82:a2:7c:cb:34:97:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Jun 30 15:00:58 2025 GMT
Not After : Jul 1 15:00:58 2025 GMT
Subject: CN=6a8c003bd538d4a662215bbc138636d4ab305d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:05:b7:42:25:ee:ae:ef:9e:21:40:86:4f:8a:
26:37:57:6a:af:50:70:5a:6e:23:7c:ac:93:c8:6e:
62:21:35:15:d0:89:94:71:c0:28:3b:79:65:4f:bf:
07:e0:c6:a7:ef:3e:c2:04:de:0f:fb:3c:15:51:a9:
b4:ac:20:48:a1:f5:d3:84:4d:30:d8:c5:39:7f:b5:
54:dc:24:ab:bd:54:2d:db:dc:1a:2e:89:0e:26:19:
96:07:8d:0d:d5:bd:b0:f7:44:82:36:bd:ff:8c:68:
4b:4d:ff:01:3b:9e:4d:ef:dc:10:df:45:ae:98:d9:
e8:84:92:c7:1c:9a:b0:3e:bd:6e:c6:5b:70:e6:3a:
b7:82:2e:8c:4d:14:8d:4e:84:1e:3b:e6:dc:09:d3:
ed:d4:b2:6c:5c:62:69:06:48:6c:9a:98:b8:ab:52:
b9:09:ae:f5:12:df:fe:bb:8f:9d:46:25:64:85:ee:
be:6e:04:ba:7b:67:2f:d7:56:98:4b:30:f6:4d:df:
24:87:bd:b4:d6:90:70:29:0e:19:b8:78:1d:d5:19:
86:d3:7b:2e:6f:ef:24:5d:9d:b9:a0:fd:9c:65:ed:
94:fd:f8:b3:1e:51:05:90:43:4a:b9:ef:8a:96:88:
7b:d4:4a:95:9d:db:6e:97:4d:c1:5a:af:ad:c5:cb:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:8C:00:3B:D5:38:D4:A6:62:21:5B:BC:13:86:36:D4:AB:30:5D:30
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c1:cd:ec:76:d8:b4:84:4f:a4:ff:91:16:4c:e4:c2:dc:6c:
55:c4:0f:36:ac:57:c8:ed:8c:36:84:71:56:b9:b2:82:8e:67:
bd:b0:7b:f6:f7:29:b9:e9:72:1d:52:e4:09:0d:6f:a6:f4:f8:
51:6b:5d:a1:85:69:01:37:d1:aa:30:40:09:0d:dd:63:34:41:
f1:0c:02:b5:04:12:46:82:5f:04:5b:ec:94:e4:23:fa:aa:1f:
3f:c0:7c:14:69:1b:24:47:29:65:b4:a1:3c:0d:4c:c2:88:03:
17:91:98:58:ab:cb:6e:9a:25:91:d8:68:06:8e:53:07:16:e6:
2c:e6:d9:5c:b3:c9:bd:01:75:70:79:23:aa:dc:c4:2e:f0:a4:
71:ad:53:3d:40:55:06:a3:4d:fd:24:99:d4:a4:e0:5c:d5:ba:
3d:94:8d:e6:94:da:9b:ca:a3:de:f3:e4:60:65:0b:57:0a:42:
85:ec:2f:b5:ca:ea:2d:36:8c:e3:4d:17:19:f7:0a:a7:f4:4e:
2a:b5:fb:e5:7c:67:65:00:dd:c2:23:20:4f:d9:05:2a:57:c2:
00:90:6d:28:ec:ed:9c:b0:93:91:60:31:5e:0f:5f:ed:99:b8:
b0:c3:8f:d3:fe:38:6d:66:1e:1e:b9:9f:bc:21:c0:4c:25:cc:
5a:fe:a1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:55:14 2025 by rpki-client