Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
File: urwezBf2YNW9ieFhZ7nVAxv2oMs.mft (raw, json)
Hash identifier: xnyz9qlCm/PbKWwxGD5z04GhhcznyB6WcQhV1zbFb5c=
Subject key identifier: 6C:1F:F6:AC:BC:64:5A:74:79:86:D5:6D:B7:23:FF:93:5E:AC:FC:6E
Authority key identifier: BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
Certificate issuer: /CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Certificate serial: 01984A77EB18077E8CBA188783C2F97C0EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
Manifest number: 0968
Signing time: Sun 27 Jul 2025 06:00:29 +0000
Manifest this update: Sun 27 Jul 2025 06:00:29 +0000
Manifest next update: Mon 28 Jul 2025 06:00:29 +0000
Files and hashes: 1: 2mA9oJ3ejOWgdJjYgfXkHnMZSOY.roa (hash: rFBnJEg4/3ovWS1Mn/GxMWwNkECurmsywX62nk463FU=)
2: urwezBf2YNW9ieFhZ7nVAxv2oMs.crl (hash: ptiowlvU1ctP1qa5ZdfxNUIFzQpn90w0NE7fYQWxSFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:eb:18:07:7e:8c:ba:18:87:83:c2:f9:7c:0e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=babc1ecc17f660d5bd89e16167b9d5031bf6a0cb
Validity
Not Before: Jul 27 06:00:29 2025 GMT
Not After : Jul 28 06:00:29 2025 GMT
Subject: CN=6c1ff6acbc645a747986d56db723ff935eacfc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:c3:c1:8b:b3:3b:48:08:fa:98:02:d2:bc:
f9:30:55:ef:0b:2f:38:6e:56:62:ea:0a:2a:f7:a6:
13:67:c7:fd:9c:61:70:40:94:77:5b:89:f0:e2:44:
f5:65:90:9f:98:dd:94:61:18:f4:54:1c:bc:bc:c2:
71:2c:0e:e6:20:93:2a:b0:2a:b6:ae:31:98:a6:d5:
38:de:a2:4d:5f:94:35:80:5a:13:18:22:9d:cd:4f:
2b:ce:92:10:49:47:ae:ed:a4:e4:a6:ea:49:a7:dc:
3f:15:6c:1f:74:fd:47:91:92:1c:96:2c:de:06:90:
87:a2:58:d8:c6:ad:8b:01:7e:e9:57:fa:2c:74:5a:
25:06:55:0a:91:37:7c:42:d2:ef:fc:a5:ae:c5:bb:
fd:65:89:30:03:d8:98:59:b9:9a:48:d3:ba:ac:dc:
9c:88:13:f8:7d:ce:69:79:0b:3f:02:3f:41:ff:80:
b3:1e:5a:54:b2:01:99:75:ad:11:af:81:05:a6:7a:
81:af:56:e0:6c:41:b8:6f:b5:52:7a:12:aa:3a:aa:
e3:dc:02:b8:23:cd:e3:d1:a5:66:55:95:49:1f:f2:
c2:33:52:02:37:4d:8c:53:29:b0:3d:e5:4a:a0:89:
cb:4d:1c:a9:a3:b5:30:69:76:04:7f:c7:c8:2b:69:
7e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:1F:F6:AC:BC:64:5A:74:79:86:D5:6D:B7:23:FF:93:5E:AC:FC:6E
X509v3 Authority Key Identifier:
keyid:BA:BC:1E:CC:17:F6:60:D5:BD:89:E1:61:67:B9:D5:03:1B:F6:A0:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urwezBf2YNW9ieFhZ7nVAxv2oMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/cf10db-7582-4553-bf1b-17911594ae51/1/urwezBf2YNW9ieFhZ7nVAxv2oMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ed:2a:9b:32:94:6d:50:d3:39:43:f7:b0:ab:e2:f9:92:f3:
63:89:cf:25:d6:26:8a:ee:ff:60:4c:20:94:80:d2:84:16:24:
ec:fd:a5:6d:c2:19:76:c7:81:97:c2:30:b8:bb:8a:0a:47:0d:
ea:06:0d:06:75:43:32:35:73:3b:64:d7:7c:a0:70:dc:14:de:
58:1d:5f:4a:63:d6:5b:24:01:df:52:50:46:29:9f:2c:bd:4e:
e2:94:6a:46:d7:c8:60:1e:fb:c4:33:47:64:f0:68:be:44:db:
68:44:fc:9e:49:51:37:7f:4e:20:ba:25:06:98:90:d7:05:f4:
6b:35:bb:0a:bd:27:bb:34:12:65:dd:0d:a2:67:cf:f5:6c:6c:
b7:73:1c:89:c1:45:02:63:36:e7:e8:5c:7f:2d:5a:03:64:74:
5f:ef:ea:bc:e6:57:dd:cf:8f:19:c5:fb:62:9d:ae:72:41:ca:
99:77:ee:95:2e:a4:49:13:53:20:00:49:ef:52:9d:c0:b8:2c:
97:ac:91:a5:54:15:3f:18:dd:7f:c5:53:8a:1c:8b:c7:4c:6c:
d4:36:48:e8:a9:f2:9d:32:b2:23:7a:41:db:7e:f5:fa:2d:46:
82:79:47:a1:34:94:e8:e9:9b:43:07:00:c4:3a:5d:25:1d:91:
e0:91:d7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:30:13 2025 by rpki-client