Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: 8lbDO+l3NZ+nDHwo6SVOMvhsu2qcN3ONZFKHv1EkbVM=
Subject key identifier: 6F:1D:E5:C8:1A:F0:38:F7:BF:E3:F5:3D:44:B4:BC:02:AE:9D:3A:C7
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019A4D3CB6902FD5CC983AAA4E1AE05CC414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 05:00:15 +0000
Manifest this update: Tue 04 Nov 2025 05:00:15 +0000
Manifest next update: Wed 05 Nov 2025 05:00:15 +0000
Files and hashes: 1: NVT5ElowawlO6xhtgnjNVI-MrRY.roa (hash: eokuWXBRCzzEFTJDGG6W73lsSws+UPHi7dsJni5axaU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: e2HSmT2gOSGp1QpW9FupTBalLmdU6x7Kdmro7VC3jgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:b6:90:2f:d5:cc:98:3a:aa:4e:1a:e0:5c:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Nov 4 05:00:15 2025 GMT
Not After : Nov 5 05:00:15 2025 GMT
Subject: CN=6f1de5c81af038f7bfe3f53d44b4bc02ae9d3ac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d8:2c:d7:18:1f:65:f5:ac:ed:d2:12:b9:93:
21:75:ec:44:26:f2:65:89:36:f6:01:56:78:90:a8:
f6:eb:04:92:28:ce:da:20:b2:72:b8:4a:57:26:c1:
6d:d3:66:ce:b1:92:91:cb:d0:65:d3:56:ef:25:95:
74:92:7b:98:94:e1:64:8d:18:26:fc:b3:ef:52:e1:
ba:0b:43:30:ac:c2:99:2b:0b:be:38:1b:db:27:f4:
5f:16:5f:b2:55:69:6c:17:c5:b7:91:35:33:25:f4:
b8:5c:d9:74:75:71:7a:3f:bc:38:d4:05:2b:a2:a9:
76:fc:36:a9:4b:f5:66:a4:e5:85:22:0a:4e:ad:a2:
67:d3:e0:dc:fc:c1:a2:96:c9:5f:3b:dc:47:29:5a:
74:7d:cc:26:f8:c2:88:41:98:37:a9:b0:43:a9:c5:
ef:d6:54:c4:49:7b:cc:42:4b:d0:6a:03:60:2d:48:
d7:fe:54:3a:1a:8a:13:6f:20:8e:4e:a4:bc:18:73:
6c:a0:c4:33:de:6f:ce:4b:eb:34:85:09:2b:12:0a:
3a:d2:75:96:d3:87:7b:2b:0b:dc:22:42:7c:b2:54:
46:e4:f4:ed:c4:5f:f7:33:2c:3e:b9:f1:5b:f9:b8:
bf:aa:c8:05:92:6b:7a:7d:c2:9d:47:ad:03:fd:59:
d8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:1D:E5:C8:1A:F0:38:F7:BF:E3:F5:3D:44:B4:BC:02:AE:9D:3A:C7
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:67:72:06:3b:2b:84:b0:2a:a3:56:65:2d:80:59:0b:11:3b:
ef:29:9a:23:60:1c:4f:c1:86:de:54:f9:ee:5e:d0:66:69:64:
75:50:74:ab:d3:fb:c7:8a:f7:21:3c:01:9b:71:aa:ee:b1:87:
a8:9f:64:b5:83:0c:6a:b6:87:a9:ae:fa:6e:da:03:c3:a7:23:
b5:10:89:59:23:1a:ae:54:52:5d:a6:e5:2b:8d:8e:08:64:03:
81:66:0d:a5:08:90:b7:ae:ab:06:f6:30:67:fd:5a:72:71:17:
ce:23:f1:83:fc:71:cd:2f:3d:f8:22:de:f1:10:6c:36:65:25:
4e:88:15:3f:40:90:70:3a:bb:86:a3:7c:bf:36:9e:49:77:ef:
c7:1f:dd:13:0c:32:d9:8f:40:bd:ed:e0:c3:53:00:48:3c:68:
0a:56:79:73:b0:0b:c9:71:d6:83:74:aa:5c:21:92:63:fd:d5:
6a:c7:af:63:b4:64:09:6b:3b:a1:36:3b:e9:36:ef:bf:7f:df:
b2:9b:a0:fc:b2:d7:43:95:e4:df:7a:ac:10:9c:91:76:63:8a:
fc:9b:2e:e8:91:0a:75:1d:63:dd:99:d4:e6:89:53:14:34:e3:
75:8f:e4:63:53:35:83:9a:9b:c1:3b:67:1f:b5:ad:1f:fa:b9:
4e:03:35:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:46:33 2025 by rpki-client