Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: 7rCOZnk09/wdwmhEkqesiBbzSdf5fJ/44/zbhsAu9s4=
Subject key identifier: EE:E8:1E:E3:6F:DA:F9:30:68:44:18:2E:49:FE:99:57:84:97:A6:BC
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 019A4E18EA26FBE1C602314FC28E1C54FEC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:46 +0000
Manifest this update: Tue 04 Nov 2025 09:00:46 +0000
Manifest next update: Wed 05 Nov 2025 09:00:46 +0000
Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: jff9fzorxVz3Bkafd0I/RH4pmJT8Cat+O43mW0XjY2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:ea:26:fb:e1:c6:02:31:4f:c2:8e:1c:54:fe:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Nov 4 09:00:46 2025 GMT
Not After : Nov 5 09:00:46 2025 GMT
Subject: CN=eee81ee36fdaf9306844182e49fe99578497a6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:8d:6d:3e:9b:97:3e:52:47:0d:0c:3d:f6:81:
b9:f0:a9:c7:97:35:dd:78:47:67:d2:80:21:0c:05:
c9:6d:db:de:59:16:fa:57:bf:24:2e:0c:63:a2:fc:
c2:61:ad:dc:7e:29:b0:10:bf:68:33:92:03:d8:ff:
a5:17:a6:51:1c:90:ee:99:0f:cf:4d:2f:9b:4a:f5:
ad:92:cf:5e:06:2e:a6:be:a0:49:51:4b:03:4c:9e:
e2:73:2e:b2:4b:a9:7b:f4:bd:50:69:f4:bb:02:b9:
a5:85:08:3f:6d:64:ff:7d:c7:4c:22:35:ee:5e:3c:
f9:c4:d8:9f:b2:eb:1f:e2:bf:a8:4a:e1:ee:b2:97:
88:8e:ff:a0:3f:d2:2e:9f:23:51:77:3f:a5:b8:36:
90:e7:b9:68:5b:88:4f:11:e2:a9:46:b0:02:12:4b:
5d:7d:47:31:6c:e6:f7:b3:aa:69:17:0c:bd:7d:16:
62:7d:29:68:fb:a3:4c:0c:ef:19:e0:e0:04:63:a1:
6b:c6:21:d3:c4:89:f7:89:62:cc:e1:10:c8:f7:a0:
1b:10:44:22:fe:4d:c8:fc:7e:5b:9b:7a:80:59:59:
db:e4:b8:fb:f2:bd:47:ad:a0:1e:1f:2c:31:0d:95:
49:76:25:42:2e:75:c0:85:14:5e:b7:d0:cf:d9:59:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E8:1E:E3:6F:DA:F9:30:68:44:18:2E:49:FE:99:57:84:97:A6:BC
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c7:9a:32:4f:b5:f0:c3:ad:b1:ff:fd:13:02:3b:71:5c:86:
05:71:54:88:dc:c7:68:b3:bf:73:62:1d:19:9b:f6:fd:70:9f:
ff:8f:4f:fc:be:30:e6:db:bc:f2:e1:9d:77:7f:cd:f4:73:35:
5a:7f:1f:84:94:70:0d:a2:d4:d3:ed:2a:02:26:95:28:5c:76:
8a:9e:af:88:23:cf:a4:5e:9f:aa:b4:7f:98:78:a1:b2:2f:98:
4c:3b:81:2a:cb:8b:a5:e5:96:75:47:71:3e:3b:05:9a:8f:a5:
6c:76:bc:cf:e8:63:c6:be:1a:9a:a5:6f:8d:b0:f4:2e:8d:78:
df:07:dd:8f:0e:c1:77:d7:a8:7f:58:e2:70:6b:95:91:7f:5c:
61:34:cf:f5:27:0d:1d:71:7b:1a:72:46:01:df:a0:a9:6c:6e:
a6:54:05:05:ca:59:a3:cd:2c:53:f6:71:51:b4:2a:a5:70:0b:
9e:17:bc:f7:4c:4f:b0:e2:05:ff:7c:1b:e7:a7:cc:d8:4e:24:
02:8e:c2:90:b9:3d:08:43:c6:97:65:5d:c5:b0:dc:40:07:40:
35:e8:86:b3:5b:a6:d0:53:3a:f2:58:c5:0a:28:b4:9c:26:57:
17:53:36:8b:3b:24:c0:e2:1a:48:58:e8:de:39:26:bd:c5:85:
b2:0e:cc:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 11:18:13 2025 by rpki-client