Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: MfF65WBivshLipfYSKYb3njaAMIjBl0NRwbbGRAdLQQ=
Subject key identifier: 9F:76:1A:25:A5:54:67:88:8F:91:A8:81:CA:3E:22:BE:38:64:DD:1E
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 019882794CF3330710FB165F540552421B78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0985
Signing time: Thu 07 Aug 2025 03:00:44 +0000
Manifest this update: Thu 07 Aug 2025 03:00:44 +0000
Manifest next update: Fri 08 Aug 2025 03:00:44 +0000
Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: /Gy6fc+NhRchZckmlXFsK9anrg2shf6Tfn8HkfuwNgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:79:4c:f3:33:07:10:fb:16:5f:54:05:52:42:1b:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Aug 7 03:00:44 2025 GMT
Not After : Aug 8 03:00:44 2025 GMT
Subject: CN=9f761a25a55467888f91a881ca3e22be3864dd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:f3:1f:5a:ca:34:a1:fd:3d:93:d0:b0:7b:
dd:49:49:68:8d:96:b3:e1:ce:11:ac:ac:3f:2d:4b:
33:56:04:11:e3:a8:a6:9a:0f:63:16:67:f3:2e:e9:
75:5c:69:0d:50:f2:bf:54:61:4b:5f:94:ff:4a:2f:
63:e3:b8:3b:46:62:c8:be:bf:8f:e5:ec:9b:7a:f9:
95:56:7f:10:fe:a9:95:e4:ef:a2:39:44:f4:aa:a1:
b2:9c:c2:c7:18:9b:6a:87:35:51:50:49:d6:3a:a7:
df:43:92:88:86:e2:f9:d3:e0:92:ff:bb:b6:c7:ac:
eb:1a:ef:07:95:bf:b0:c1:da:7d:5f:cd:e2:ce:b8:
b2:66:19:59:75:f2:34:2c:54:3a:29:98:83:be:9c:
5d:b4:5c:6e:7a:94:1c:20:20:7a:89:15:2b:c8:78:
70:be:27:92:75:50:59:b6:ea:58:52:ce:30:14:ad:
87:4a:4f:78:da:ae:ca:51:55:25:f3:90:22:f7:ac:
3b:ea:b1:50:62:f3:c0:98:a1:2f:09:f7:a6:67:cb:
30:0b:92:2f:6b:8b:1f:8d:ba:01:07:5f:41:09:c6:
79:83:dd:51:53:be:8f:ef:0f:00:11:5d:69:60:4e:
a5:80:f9:e9:7b:b5:20:f5:43:f5:e5:0f:23:e5:ee:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:76:1A:25:A5:54:67:88:8F:91:A8:81:CA:3E:22:BE:38:64:DD:1E
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:49:b8:5c:b2:ad:63:62:9e:90:a4:11:1c:f0:68:66:d5:f1:
c4:7f:1b:67:9f:20:35:34:01:d6:72:08:cc:75:30:7a:1c:cf:
66:87:a2:46:73:5d:f8:94:64:ba:c9:07:b0:ff:3e:8a:bd:3a:
1d:39:88:7c:4e:5f:b0:3f:c6:b0:0b:81:2e:52:cf:20:ab:2d:
50:b9:06:8d:32:3a:23:22:ea:3b:10:25:8a:a7:88:2e:30:17:
8c:9e:9f:18:15:26:2f:e4:88:6b:eb:9b:c1:e4:10:e9:fb:f7:
60:f7:e8:5f:89:cc:58:96:4e:0a:fe:3a:3b:fc:48:55:94:fc:
c7:fd:12:50:f0:60:a0:5f:8c:49:ed:98:31:52:c0:df:09:86:
5f:8f:39:7c:de:d2:2f:fa:fe:18:db:72:69:bf:63:4d:d0:0c:
0d:14:cb:91:39:05:60:13:cf:09:67:ed:1c:9e:60:e0:e8:55:
9d:d6:c2:3e:36:15:49:51:ec:22:ff:5d:7b:ca:c9:39:69:36:
6e:0f:7b:60:d2:0c:59:9a:72:30:10:1a:38:a5:bc:75:77:16:
2d:0f:22:97:cb:98:25:32:7e:5d:36:a8:77:e4:c8:46:b8:a3:
1c:a7:3b:e6:5c:fe:93:db:ec:11:3f:32:97:3b:0c:5f:e6:d1:
33:26:1f:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiCeUzzMwcQ+xZfVAVSQht4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYmMxZWNjMTdmNjYwZDViZDg5ZTE2MTY3YjlkNTAzMWJm
NmEwY2IwHhcNMjUwODA3MDMwMDQ0WhcNMjUwODA4MDMwMDQ0WjAzMTEwLwYDVQQD
Eyg5Zjc2MWEyNWE1NTQ2Nzg4OGY5MWE4ODFjYTNlMjJiZTM4NjRkZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzTzH1rKNKH9PZPQsHvdSUlojZaz
4c4RrKw/LUszVgQR46immg9jFmfzLul1XGkNUPK/VGFLX5T/Si9j47g7RmLIvr+P
5eybevmVVn8Q/qmV5O+iOUT0qqGynMLHGJtqhzVRUEnWOqffQ5KIhuL50+CS/7u2
x6zrGu8Hlb+wwdp9X83izriyZhlZdfI0LFQ6KZiDvpxdtFxuepQcICB6iRUryHhw
vieSdVBZtupYUs4wFK2HSk942q7KUVUl85Ai96w76rFQYvPAmKEvCfemZ8swC5Iv
a4sfjboBB19BCcZ5g91RU76P7w8AEV1pYE6lgPnpe7Ug9UP15Q8j5e6BcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ92GiWlVGeIj5Gogco+Ir44ZN0eMB8GA1UdIwQY
MBaAFLq8HswX9mDVvYnhYWe51QMb9qDLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWIt
MTc5MTE1OTRhZTUxLzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC9jZjEwZGItNzU4Mi00NTUzLWJmMWItMTc5MTE1OTRhZTUx
LzEvdXJ3ZXpCZjJZTlc5aWVGaFo3blZBeHYyb01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc0m4XLKt
Y2KekKQRHPBoZtXxxH8bZ58gNTQB1nIIzHUwehzPZoeiRnNd+JRkuskHsP8+ir06
HTmIfE5fsD/GsAuBLlLPIKstULkGjTI6IyLqOxAliqeILjAXjJ6fGBUmL+SIa+ub
weQQ6fv3YPfoX4nMWJZOCv46O/xIVZT8x/0SUPBgoF+MSe2YMVLA3wmGX485fN7S
L/r+GNtyab9jTdAMDRTLkTkFYBPPCWftHJ5g4OhVndbCPjYVSVHsIv9de8rJOWk2
bg97YNIMWZpyMBAaOKW8dXcWLQ8il8uYJTJ+XTaod+TIRrijHKc75lz+k9vsET8y
lzsMX+bRMyYfOQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:22:38 2025 by rpki-client