Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: FEtFKNfE39VQ/CubhjD2esOxumJRVwWajZVDI13+168=
Subject key identifier: 3D:B3:24:8E:B3:62:3B:05:46:76:5F:2E:29:25:AF:46:11:17:3E:48
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 01984E1E55EB11163EB97A3A03BAA631B35A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 160F
Signing time: Sun 27 Jul 2025 23:01:07 +0000
Manifest this update: Sun 27 Jul 2025 23:01:07 +0000
Manifest next update: Mon 28 Jul 2025 23:01:07 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: OERSfktHIN6sydoFNOTphBu7g4zQSsTVad2l8moB5Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:1e:55:eb:11:16:3e:b9:7a:3a:03:ba:a6:31:b3:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Jul 27 23:01:07 2025 GMT
Not After : Jul 28 23:01:07 2025 GMT
Subject: CN=3db3248eb3623b0546765f2e2925af4611173e48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e2:b4:e2:49:e8:2f:f9:5e:dc:5e:c3:31:fd:
32:cc:7b:a8:68:58:20:3b:82:48:b2:54:b7:0a:bf:
d6:f4:35:27:88:48:22:15:b5:8d:a1:1a:9d:62:d6:
3b:3c:6c:1e:0e:80:e5:86:c7:62:97:d9:8b:6c:7b:
c8:8b:86:b6:4a:a2:75:55:8b:0e:d4:f4:04:fb:c8:
54:9a:0d:59:8d:cc:64:15:ce:26:9c:14:0c:20:4c:
4a:7f:17:a8:b9:90:94:3a:37:f5:69:43:fb:26:1f:
c4:89:22:da:ae:83:91:c3:af:07:97:67:1c:91:ff:
47:e2:dd:51:fe:dc:e1:6b:44:77:f6:f4:95:66:6e:
38:d2:ca:f8:4c:2f:31:7d:f1:d4:e0:b3:85:5f:86:
54:87:5f:89:26:61:38:fe:58:12:8c:e7:ba:91:a3:
c9:85:38:0e:b9:f3:b8:62:14:83:7d:4c:d4:4e:d7:
8e:73:b1:8c:7b:b7:38:98:6d:f4:61:c5:e1:0d:0d:
ca:49:18:d6:87:a2:51:10:d3:bd:4b:68:ef:46:56:
ff:28:b5:dc:0f:95:20:9d:fc:ae:2c:f7:bc:74:73:
94:7a:0e:35:b3:52:5c:26:11:fd:41:62:41:66:f1:
f2:e7:38:4b:77:4e:9c:87:2d:b9:c2:55:69:b2:19:
d7:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:B3:24:8E:B3:62:3B:05:46:76:5F:2E:29:25:AF:46:11:17:3E:48
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f7:e1:48:9e:ae:ae:2e:7b:84:ee:89:d8:12:43:bb:9c:28:
6a:21:f6:b3:89:d9:c4:b4:41:ad:91:37:d7:bf:d3:78:16:eb:
46:2d:7c:46:55:c4:af:ac:06:e3:8d:f8:24:1a:79:c9:7e:ca:
39:37:0b:98:6f:d3:a5:30:c7:01:27:56:d1:50:5d:6b:2d:3a:
f0:4d:d2:cb:21:00:9c:c7:99:93:53:2a:37:16:36:63:d5:bc:
6b:6e:31:f5:e9:23:b0:b9:f4:15:8e:2c:88:d0:3e:b5:e4:67:
60:4d:18:7e:97:a7:15:1e:4d:3a:50:a3:2f:2f:bd:6e:d4:69:
91:9c:c7:3a:a7:aa:90:5a:bc:4d:a5:78:d9:49:0c:9d:50:c7:
1d:12:26:23:06:a6:a6:39:c3:51:55:91:97:e4:98:d6:5e:af:
e6:bb:25:8a:51:78:d7:66:cc:0c:f4:e9:04:a2:27:10:7c:f9:
cf:f2:7a:be:61:fa:e4:85:b8:39:d7:20:7d:6b:8c:cc:f5:6d:
c2:26:6f:46:19:12:6c:6b:c2:d1:b2:ee:7b:f5:cd:26:07:7e:
d8:3e:86:33:16:37:6a:1e:10:8e:ef:2e:24:54:76:c5:68:97:
d0:db:11:ad:19:d6:7b:da:1b:65:53:65:8a:f1:ea:20:8e:8a:
74:75:94:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOHlXrERY+uXo6A7qmMbNaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYjQ1M2Q5N2JhMmY0YTA0NTg0M2U2YjRhOTUzYjNlNTEw
NmVhZjIwHhcNMjUwNzI3MjMwMTA3WhcNMjUwNzI4MjMwMTA3WjAzMTEwLwYDVQQD
EygzZGIzMjQ4ZWIzNjIzYjA1NDY3NjVmMmUyOTI1YWY0NjExMTczZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eK04knoL/le3F7DMf0yzHuoaFgg
O4JIslS3Cr/W9DUniEgiFbWNoRqdYtY7PGweDoDlhsdil9mLbHvIi4a2SqJ1VYsO
1PQE+8hUmg1ZjcxkFc4mnBQMIExKfxeouZCUOjf1aUP7Jh/EiSLaroORw68Hl2cc
kf9H4t1R/tzha0R39vSVZm440sr4TC8xffHU4LOFX4ZUh1+JJmE4/lgSjOe6kaPJ
hTgOufO4YhSDfUzUTteOc7GMe7c4mG30YcXhDQ3KSRjWh6JRENO9S2jvRlb/KLXc
D5UgnfyuLPe8dHOUeg41s1JcJhH9QWJBZvHy5zhLd06chy25wlVpshnXBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2zJI6zYjsFRnZfLiklr0YRFz5IMB8GA1UdIwQY
MBaAFLq0U9l7ovSgRYQ+a0qVOz5RBuryMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUt
NGE2ZjU1NzcxYmQxLzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS82NzAzY2EtY2VkNC00MjA3LWFiMDUtNGE2ZjU1NzcxYmQx
LzEvdXJSVDJYdWk5S0JGaEQ1clNwVTdQbEVHNnZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASPfhSJ6u
ri57hO6J2BJDu5woaiH2s4nZxLRBrZE317/TeBbrRi18RlXEr6wG4434JBp5yX7K
OTcLmG/TpTDHASdW0VBday068E3SyyEAnMeZk1MqNxY2Y9W8a24x9ekjsLn0FY4s
iNA+teRnYE0YfpenFR5NOlCjLy+9btRpkZzHOqeqkFq8TaV42UkMnVDHHRImIwam
pjnDUVWRl+SY1l6v5rslilF412bMDPTpBKInEHz5z/J6vmH65IW4OdcgfWuMzPVt
wiZvRhkSbGvC0bLue/XNJgd+2D6GMxY3ah4Qju8uJFR2xWiX0NsRrRnWe9obZVNl
ivHqII6KdHWUdQ==
-----END CERTIFICATE-----
Generated at Mon Jul 28 07:03:13 2025 by rpki-client