Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: aXIE5hjc5y1s4J2F8GDC1VGSZZxLwsTAX8ld7XQX7GM=
Subject key identifier: E3:B0:1C:41:DD:E7:F0:29:86:B4:BC:90:64:26:F0:22:C2:26:87:9F
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019A4E86808F918C9AC41A9FD38023FDA96D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1719
Signing time: Tue 04 Nov 2025 11:00:28 +0000
Manifest this update: Tue 04 Nov 2025 11:00:28 +0000
Manifest next update: Wed 05 Nov 2025 11:00:28 +0000
Files and hashes: 1: NBFkOVFjhr5cFEclo5MbI_qhtaE.roa (hash: aEnSyjmzjCXkq9QNcUbxZtFecm4VYBNFEkBBtcfxmSI=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: +/a4Rizd/BF+5ij9uj1aA64KqL2z/1/4UC7ITnU30qs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:86:80:8f:91:8c:9a:c4:1a:9f:d3:80:23:fd:a9:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Nov 4 11:00:28 2025 GMT
Not After : Nov 5 11:00:28 2025 GMT
Subject: CN=e3b01c41dde7f02986b4bc906426f022c226879f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:37:44:1b:06:4e:e7:07:df:e9:96:36:ef:77:
f6:fd:ef:6a:6a:c4:fd:e0:f7:d3:ab:01:1b:75:0c:
ea:20:91:15:aa:e6:40:93:e3:0e:76:cf:43:a2:6b:
ca:a7:47:12:ab:d7:fd:a3:d6:6b:77:0d:2c:38:98:
4c:40:78:b8:e0:11:4a:14:f8:ca:77:3e:e7:0e:96:
12:c4:61:6a:b8:6c:d5:97:aa:b8:8f:c7:70:8f:24:
b3:03:be:75:f5:48:04:7c:b2:98:01:fa:97:92:26:
d3:92:50:0f:a9:27:10:3f:3a:5c:79:e6:69:a9:28:
dc:f3:a3:4b:3c:a8:16:ee:5b:74:01:cf:20:a5:c2:
d7:cd:16:ac:8b:c1:89:29:00:08:39:e5:52:92:a9:
02:61:96:21:a3:43:76:10:37:68:47:1c:2d:67:35:
49:6a:82:63:f6:9e:1a:73:1d:0a:b9:c9:f4:b9:18:
4a:0b:96:91:00:5c:d2:66:ed:0a:f1:8a:07:95:6b:
3a:58:a5:a3:68:7a:b3:f3:f2:27:31:7b:40:bc:ad:
81:13:f3:fd:78:6f:7f:29:57:6d:56:97:3e:e1:9b:
70:a0:39:de:dd:f8:bf:84:7c:08:cb:61:9a:38:cd:
f4:8e:f0:08:a4:6c:3b:8e:0b:c3:a0:34:db:88:6c:
04:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B0:1C:41:DD:E7:F0:29:86:B4:BC:90:64:26:F0:22:C2:26:87:9F
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:8c:0a:a9:1b:76:09:3b:15:13:cf:bc:5a:f1:43:b3:f7:
25:1e:bb:53:69:53:88:4a:43:36:44:49:c1:ea:59:a0:c5:04:
8a:e0:ea:91:4c:63:ef:63:63:2d:36:ce:0f:a7:14:fd:6c:95:
58:08:62:8b:20:51:01:90:75:0f:65:ed:5b:ce:bf:62:bd:18:
fe:b6:53:31:81:2c:27:82:53:7f:cb:71:3b:31:9d:d6:25:03:
d1:93:1b:b5:55:5a:5c:7b:9d:a9:d5:91:bb:7d:0e:80:5e:ed:
04:0e:4e:fe:06:d5:ba:df:a5:6c:68:cb:15:8e:c6:54:37:5c:
36:54:e2:2b:c0:a4:4c:dc:ea:53:df:b8:ee:2c:22:3f:2c:b9:
02:8c:5f:10:48:00:f5:2f:fa:d7:6c:a9:b5:14:67:f5:6c:90:
02:81:f4:5a:28:48:b9:7b:ec:b3:21:ef:66:7f:a0:09:f5:56:
48:47:e6:a3:4c:a8:3f:60:6f:1b:e9:68:4d:a0:79:f8:28:9a:
bd:e1:a4:06:09:6b:d1:29:32:52:20:f7:b2:67:36:4c:36:8c:
a2:4d:3a:ae:40:19:3f:74:2d:59:c9:6e:27:e5:bb:81:73:c6:
c8:61:66:32:a3:44:b6:1e:9e:fd:f2:18:88:9e:a3:70:2e:5e:
f5:c6:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:58 2025 by rpki-client