Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
File: urc2dvq68SBW7bucedcVT-3gHyw.mft (raw, json)
Hash identifier: s3aEwEs+DcHYoS+8CBKQUtYCapz4O+Nh+eoSyQ93D8c=
Subject key identifier: 38:B5:B2:FD:D0:2D:FD:3F:A6:E9:79:32:3B:DA:A7:83:B9:0F:72:35
Authority key identifier: BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
Certificate issuer: /CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Certificate serial: 019872CFE4D351CD7E6755097522F51E0596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 02:01:23 +0000
Manifest this update: Mon 04 Aug 2025 02:01:23 +0000
Manifest next update: Tue 05 Aug 2025 02:01:23 +0000
Files and hashes: 1: urc2dvq68SBW7bucedcVT-3gHyw.crl (hash: dFjrf1m4/QcU89bVrfpBDIwaYcROkolRUrCeA5OgL2o=)
2: ysmv8pVpOBMqQ9sWsS6x7ZzfCkE.roa (hash: l1esLwaLrNWre2KIEqdSBUJWZATlA9afvfAUu1SgNbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:e4:d3:51:cd:7e:67:55:09:75:22:f5:1e:05:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab73676fabaf12056edbb9c79d7154fede01f2c
Validity
Not Before: Aug 4 02:01:23 2025 GMT
Not After : Aug 5 02:01:23 2025 GMT
Subject: CN=38b5b2fdd02dfd3fa6e979323bdaa783b90f7235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:8f:f4:65:03:74:09:c9:26:e0:32:40:52:
b2:62:57:0a:89:4b:5c:b0:f9:bd:ee:8a:cd:91:c9:
1f:35:8a:fa:85:d0:be:f9:19:86:33:c0:5a:53:7e:
10:9f:75:24:18:a0:64:dd:f4:6e:ab:91:0b:c8:24:
a8:47:7f:bd:50:18:91:78:37:5b:88:a3:34:46:7d:
33:4d:1f:62:94:c0:1b:ea:3a:4a:56:72:3c:58:f2:
7e:44:f0:1f:bc:8e:3a:d1:c6:94:8d:8b:8b:45:da:
9f:7d:70:15:27:65:fc:e6:21:91:17:16:a3:2c:2d:
27:2e:49:af:0b:23:6a:30:c5:e5:3c:7d:c9:18:b0:
04:43:0e:d9:f7:2c:0d:6a:00:33:11:9e:4a:e7:de:
cc:4e:5f:5d:60:20:4b:9e:67:1c:11:c8:ce:d3:b8:
a7:a8:ba:79:b0:94:30:7c:29:9d:f5:12:a8:76:9f:
51:d3:e6:67:2b:46:48:84:3c:b1:5c:3d:19:9b:f1:
b0:8d:84:e7:bb:b7:69:92:e4:fa:b3:0a:e7:9f:3f:
fb:18:cb:93:46:7f:f1:e6:47:4b:b6:d5:c7:5d:32:
57:76:99:2b:48:0a:6b:8f:48:94:9b:7f:4e:af:93:
a8:1d:dc:55:ad:a4:7b:62:3b:c9:e5:91:8a:dc:ad:
53:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:B5:B2:FD:D0:2D:FD:3F:A6:E9:79:32:3B:DA:A7:83:B9:0F:72:35
X509v3 Authority Key Identifier:
keyid:BA:B7:36:76:FA:BA:F1:20:56:ED:BB:9C:79:D7:15:4F:ED:E0:1F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urc2dvq68SBW7bucedcVT-3gHyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/93f8fb-d424-4dab-9a0e-0f5be224f820/1/urc2dvq68SBW7bucedcVT-3gHyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:25:4a:22:ac:df:fa:ef:ad:5a:c7:c4:f1:8f:c1:43:c7:d1:
46:ba:f7:1b:c8:4c:79:ba:5b:b6:25:9a:28:44:3e:4f:59:ec:
85:7f:27:65:af:d0:aa:fa:3d:0b:09:0e:11:20:69:ef:d8:5c:
7e:b2:c1:b3:ad:c8:17:de:5b:e2:7c:b3:98:bb:05:fc:0f:2e:
83:0f:0c:7a:09:2f:19:4f:80:f7:a1:4b:36:ac:91:ba:bc:84:
b7:46:70:7e:e7:33:02:04:16:a5:f4:c4:e9:fe:35:c5:bc:50:
63:75:da:65:d2:02:26:72:6d:79:9a:18:5c:3d:8c:80:ce:ff:
27:37:92:65:e1:42:ab:3a:6e:e5:85:97:89:e1:6d:60:e2:e4:
fe:95:22:0d:a6:d1:47:75:b0:31:75:91:b9:66:7e:82:cf:05:
f3:78:50:6e:eb:e4:3a:18:a6:95:bf:a7:cc:03:2a:98:59:b1:
f5:c7:1a:6c:49:49:92:eb:30:f5:1b:64:9a:e4:3b:b8:81:87:
83:04:c1:1e:9f:a4:46:90:56:3f:50:20:5c:02:37:e1:94:49:
d3:88:2d:30:c1:46:48:de:32:1a:46:b9:d2:8c:a4:0e:a7:05:
36:d9:74:b8:26:1c:66:d1:af:db:f2:bf:7c:b0:00:3d:ff:d9:
b2:53:0c:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:39 2025 by rpki-client