Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: KYmV0G2SaSrxBk2w19rPX+XIjNTC4CJAo6GPPotNU5s=
Subject key identifier: 51:76:0E:80:B0:88:02:91:7C:37:6F:0C:D8:1F:85:07:9C:CB:A2:41
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 01987CAE74573327FCC938216353F71C892A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 00:01:04 +0000
Manifest this update: Wed 06 Aug 2025 00:01:04 +0000
Manifest next update: Thu 07 Aug 2025 00:01:04 +0000
Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: TFyaAUfXlRBISEw132mhxx7Sif2SE+lcI3CDkh7csqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:ae:74:57:33:27:fc:c9:38:21:63:53:f7:1c:89:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Aug 6 00:01:04 2025 GMT
Not After : Aug 7 00:01:04 2025 GMT
Subject: CN=51760e80b08802917c376f0cd81f85079ccba241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:e1:18:b6:03:34:cf:cd:56:51:1e:be:38:
ef:48:91:bb:71:b9:3d:cb:82:cb:f7:01:41:14:52:
96:47:36:ed:21:7d:d7:b4:9a:95:f4:e3:11:4b:44:
34:a9:35:39:f4:69:fe:50:0a:b0:76:b0:2e:10:f2:
d1:72:70:ed:0f:ea:e9:86:7a:89:0b:5c:9d:ee:0d:
8d:05:55:7d:fa:6d:d7:cc:21:f4:0b:62:1e:aa:db:
69:2d:d6:16:07:e6:a8:84:27:dc:93:9b:aa:ea:0d:
34:b1:0f:b4:0d:bc:0c:96:fc:e0:03:a8:e1:3d:4e:
76:d3:46:96:db:59:cd:53:d0:95:8d:aa:97:df:69:
6d:fe:ef:2a:a7:1d:6e:6d:b8:f6:88:86:40:32:ba:
f4:22:c1:8f:44:29:f2:72:24:f8:9b:bb:40:e1:64:
52:91:98:3f:da:0f:b8:13:c3:b7:15:11:eb:c5:46:
50:0e:0a:6e:a7:d0:f6:84:f4:b9:ed:08:67:1e:00:
8e:c2:55:c5:3b:a9:b1:41:62:8b:7b:e3:a1:14:77:
16:f8:07:0c:4b:64:eb:2b:d2:e4:66:a1:7a:a2:27:
03:0e:31:26:39:9a:b4:dc:eb:34:16:b0:32:b0:c0:
79:b0:92:d7:c0:0b:69:3a:56:cf:f9:d8:32:a1:af:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:76:0E:80:B0:88:02:91:7C:37:6F:0C:D8:1F:85:07:9C:CB:A2:41
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3c:f5:02:77:d9:ac:f3:a1:14:ae:52:d2:b9:6f:10:83:85:
13:dc:60:99:ca:82:74:9d:10:55:0c:c9:99:5e:bd:2e:6d:16:
3a:48:55:5e:a1:d6:4b:a5:6c:55:bb:7b:b5:92:46:bc:2d:ed:
b8:88:12:38:98:0b:08:56:f2:89:b5:63:a8:bd:9c:1f:99:b5:
68:fd:39:64:b9:2e:4b:c5:16:6d:a8:6c:ee:cf:76:eb:54:09:
48:f3:e4:0d:d6:2a:fc:aa:8e:4c:9f:fe:5c:61:70:bc:12:b7:
10:3f:ce:9c:3b:f2:8b:42:05:43:62:15:ec:13:a5:bf:b0:00:
ff:28:4b:4c:03:5c:50:3e:65:fd:13:f5:03:44:fc:22:1d:ec:
72:d5:8a:de:33:d9:b7:20:e3:55:ee:e6:00:d2:d1:7a:c4:5b:
4d:76:34:b2:cc:95:f5:b6:67:29:70:27:6c:36:ce:ba:c4:8b:
7f:87:aa:27:79:7f:84:d7:ce:67:f6:6f:84:64:72:ad:ce:d9:
21:f3:5f:23:83:c6:95:38:13:a4:3e:d3:22:57:b5:c4:43:38:
7b:e1:a7:45:04:5f:08:3c:6f:b8:e1:72:44:af:34:81:b8:1d:
35:6d:f9:97:77:df:e0:45:bc:e7:e6:ff:98:29:83:f8:ee:c1:
27:f5:13:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:18:50 2025 by rpki-client