Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: 5/qihsml16rKShWD56ZFtZNP7GvUiKw4D0A+afvLjKQ=
Subject key identifier: 43:42:CF:BD:1B:3D:8C:1C:87:74:C4:58:34:B2:61:38:CC:6E:0D:B9
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019874F4DD200F7F435C7FE276945F3FE979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 12:01:01 +0000
Manifest this update: Mon 04 Aug 2025 12:01:01 +0000
Manifest next update: Tue 05 Aug 2025 12:01:01 +0000
Files and hashes: 1: 8n66jbpw-c2Aqy4SU3OEjHIQ8Ng.roa (hash: 5aUols723XY3S6GAB1kKE/l7w8plVtAbUtwN3H30tYU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: tu3AF9GROSc1iMKORE7/3r5RTT+1QB+WjNRcWhWu4+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:dd:20:0f:7f:43:5c:7f:e2:76:94:5f:3f:e9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Aug 4 12:01:01 2025 GMT
Not After : Aug 5 12:01:01 2025 GMT
Subject: CN=4342cfbd1b3d8c1c8774c45834b26138cc6e0db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9f:59:81:92:bb:be:81:42:2e:85:1c:36:1e:
b5:a4:bb:c2:b5:d0:ef:06:6e:42:d0:c8:79:c4:00:
32:f1:15:5c:f1:1f:7e:da:98:93:0b:a7:16:af:e1:
a6:b8:80:5f:c9:b7:a5:44:82:a5:5c:56:42:8e:86:
71:cd:0d:0f:3d:87:77:b9:1d:79:c2:ff:cf:f4:e3:
be:e9:4a:78:9c:bd:ea:31:d7:a8:df:f9:52:ac:03:
9b:ac:c2:95:4d:d4:a2:a9:77:27:19:c5:fc:30:93:
80:10:c3:0c:96:a1:cd:61:44:75:b2:21:c3:cc:88:
bf:a0:1e:2c:0e:24:58:52:a9:b1:88:2b:36:2d:1c:
35:16:29:c5:c7:28:c5:e5:e5:b9:fe:29:00:1d:95:
67:84:e0:c6:26:df:a4:15:73:45:fe:81:a8:91:c7:
93:20:45:d1:6b:2e:11:8a:56:50:da:c6:06:a0:68:
52:20:c8:20:c7:3a:41:4e:b6:08:53:51:42:02:68:
3a:8f:28:0a:14:e2:a0:65:54:8d:ad:a1:1b:03:a5:
42:e9:e9:08:16:82:d9:57:93:28:c6:05:8f:dd:e1:
a9:2c:01:4b:de:b3:e6:86:85:25:06:98:2f:2d:29:
99:f9:50:ec:fd:12:b8:4e:6d:b3:a8:11:87:74:b5:
34:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:42:CF:BD:1B:3D:8C:1C:87:74:C4:58:34:B2:61:38:CC:6E:0D:B9
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:65:11:db:88:8f:aa:ca:d3:5b:b4:99:ca:dc:87:30:fb:f2:
41:85:b8:5e:99:6c:4b:d9:ba:15:f5:64:f5:08:c7:7c:43:cd:
63:3f:d6:f1:fc:37:87:d3:10:3b:26:df:05:5c:85:f9:03:d4:
7f:ab:3d:5f:d1:ad:3d:44:e1:09:ad:fe:9b:bb:c9:60:2e:2c:
d8:8f:ca:05:1e:87:f9:94:ba:27:f3:d0:9d:82:e2:c6:86:1c:
35:ba:60:5e:36:97:7e:4b:ff:b1:70:15:e7:58:97:bb:5d:1c:
f5:c0:02:14:a7:c3:b2:bc:f0:8f:f8:e1:7e:7b:26:42:89:1c:
93:19:c2:67:2d:0c:e3:7d:34:db:42:dc:73:9e:27:86:1d:76:
92:cb:b5:77:e5:57:51:48:10:c0:b6:f0:a4:c9:f8:73:5b:72:
75:dc:66:e0:28:25:76:a8:84:f6:9d:26:ea:a4:75:91:04:26:
c8:1c:d8:12:cd:67:ec:48:c2:5a:ea:72:69:03:a0:a0:5e:26:
11:e4:2f:75:21:a9:3f:11:8d:1b:da:17:1d:58:23:15:28:42:
8d:84:1f:0d:21:47:1f:9c:a0:94:a3:28:e7:c6:f9:fe:53:b4:
0e:bd:02:9a:47:f8:ad:4a:43:b2:85:15:8c:c6:85:dd:76:bf:
bb:fd:4c:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh09N0gD39DXH/idpRfP+l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjVlNWU2MDFjYmY1ZDE5ZDEwZDRkYjQ3NmE5MjNiM2Iz
NmY4MjcwHhcNMjUwODA0MTIwMTAxWhcNMjUwODA1MTIwMTAxWjAzMTEwLwYDVQQD
Eyg0MzQyY2ZiZDFiM2Q4YzFjODc3NGM0NTgzNGIyNjEzOGNjNmUwZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl59ZgZK7voFCLoUcNh61pLvCtdDv
Bm5C0Mh5xAAy8RVc8R9+2piTC6cWr+GmuIBfybelRIKlXFZCjoZxzQ0PPYd3uR15
wv/P9OO+6Up4nL3qMdeo3/lSrAObrMKVTdSiqXcnGcX8MJOAEMMMlqHNYUR1siHD
zIi/oB4sDiRYUqmxiCs2LRw1FinFxyjF5eW5/ikAHZVnhODGJt+kFXNF/oGokceT
IEXRay4RilZQ2sYGoGhSIMggxzpBTrYIU1FCAmg6jygKFOKgZVSNraEbA6VC6ekI
FoLZV5MoxgWP3eGpLAFL3rPmhoUlBpgvLSmZ+VDs/RK4Tm2zqBGHdLU0QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENCz70bPYwch3TEWDSyYTjMbg25MB8GA1UdIwQY
MBaAFLq15eYBy/XRnRDU20dqkjs7NvgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQt
NzdjYTg5Y2Y0MzZhLzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy8wMGRmMjktNTAyMi00MDVlLTg5NWQtNzdjYTg5Y2Y0MzZh
LzEvdXJYbDVnSEw5ZEdkRU5UYlIycVNPenMyLUNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXmUR24iP
qsrTW7SZytyHMPvyQYW4XplsS9m6FfVk9QjHfEPNYz/W8fw3h9MQOybfBVyF+QPU
f6s9X9GtPUThCa3+m7vJYC4s2I/KBR6H+ZS6J/PQnYLixoYcNbpgXjaXfkv/sXAV
51iXu10c9cACFKfDsrzwj/jhfnsmQokckxnCZy0M430020Lcc54nhh12ksu1d+VX
UUgQwLbwpMn4c1tyddxm4CgldqiE9p0m6qR1kQQmyBzYEs1n7EjCWupyaQOgoF4m
EeQvdSGpPxGNG9oXHVgjFShCjYQfDSFHH5yglKMo58b5/lO0Dr0Cmkf4rUpDsoUV
jMaF3Xa/u/1M4Q==
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:45 2025 by rpki-client