Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: u06tSRptyi22er3xtGn2ifvRHLFqnBnSljTJoi1GaQs=
Subject key identifier: 49:A3:BF:C3:BA:66:BB:CA:1A:82:FD:AA:8F:EA:DC:CA:B7:0D:48:56
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019872CF9EBDD29CE0319A0DE05B4AE1E28F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1622
Signing time: Mon 04 Aug 2025 02:01:05 +0000
Manifest this update: Mon 04 Aug 2025 02:01:05 +0000
Manifest next update: Tue 05 Aug 2025 02:01:05 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: I/euXwlZp9Y/9aEl1LyNjIa6udttyeY7rTU4CYVig0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:9e:bd:d2:9c:e0:31:9a:0d:e0:5b:4a:e1:e2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Aug 4 02:01:05 2025 GMT
Not After : Aug 5 02:01:05 2025 GMT
Subject: CN=49a3bfc3ba66bbca1a82fdaa8feadccab70d4856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:58:b0:f7:4c:e7:af:d0:f6:ec:90:94:fa:
1c:75:3a:6c:33:c9:96:c2:9f:bb:97:bd:44:ac:c8:
b7:27:c6:13:1a:f8:2c:9a:34:00:e2:a4:d9:6b:31:
31:89:9c:87:36:06:fa:9f:69:3d:cf:3a:d9:7e:53:
4f:f2:e8:55:ae:e1:72:c1:5e:c3:f0:7f:be:ee:af:
8c:54:96:9c:0c:6f:21:c5:94:ad:59:85:32:19:4f:
25:6c:4b:81:ed:34:c6:7e:f0:cb:f8:1f:ad:78:6e:
44:18:23:90:b0:19:ba:a2:8a:35:ab:26:7e:32:3b:
09:49:76:d4:a7:02:4b:45:99:56:7f:f3:1e:c4:3b:
41:7e:d4:b1:c3:58:5d:f9:85:d7:b8:3f:91:0c:45:
c0:4c:77:93:77:bc:c0:d3:3a:8f:56:d7:21:e1:a5:
90:3f:bf:71:8b:54:29:84:19:da:cd:9e:7d:66:90:
6c:10:81:43:db:67:98:9b:d3:c6:ea:24:65:5e:ed:
d9:1e:fb:7a:42:19:6c:6d:92:a8:f6:d2:cc:ad:3b:
37:a0:6a:32:46:68:1a:ad:7a:24:34:5a:27:ea:0c:
6f:03:ba:a2:86:d9:73:b0:f1:60:a7:54:31:16:9b:
d8:84:48:96:a4:36:2b:33:f9:c1:dd:8a:01:2c:ca:
3f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:A3:BF:C3:BA:66:BB:CA:1A:82:FD:AA:8F:EA:DC:CA:B7:0D:48:56
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:6b:e9:c8:58:00:98:aa:ee:41:11:82:d9:0e:88:00:7a:c3:
a9:ec:b9:dd:03:53:ca:6b:b1:c9:4c:f9:51:f2:11:e4:0c:3e:
ff:6a:07:c4:01:98:f2:fa:ca:18:c1:5c:96:b6:b4:de:80:8e:
e1:c0:41:0f:50:e0:8f:63:37:6b:05:9a:1b:5f:0b:de:1e:1e:
b3:50:2d:28:1d:3a:68:c9:bb:54:0d:09:0a:3c:96:55:66:0d:
5e:32:12:3a:c1:5b:9e:45:e2:a9:df:8b:98:0f:d1:02:da:6d:
11:b7:ea:f2:70:90:67:c9:b0:f6:20:49:f6:c7:d4:b1:7a:b5:
e2:8c:f5:31:a1:68:28:45:2e:dd:93:ae:bd:db:5c:0a:41:97:
a5:dc:27:6f:cf:fe:40:97:74:6e:86:20:f8:66:d7:4d:12:a7:
3b:fc:72:b3:d3:21:41:34:c2:b9:98:cb:cc:18:eb:63:2f:c2:
80:ee:99:a8:62:a1:d5:fb:5f:39:57:44:54:66:4a:9d:16:37:
79:e1:ec:a2:f2:73:e4:18:c8:80:f7:a5:14:1b:69:e3:5c:3d:
24:a4:e6:98:0a:db:b6:91:0a:e3:ff:19:3d:60:93:9f:1c:ff:
20:70:a6:a1:46:a7:b2:67:10:91:a8:e6:30:2e:db:1b:ed:2f:
0e:c3:2c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:10 2025 by rpki-client