Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: uxA6Zza40CgyFo7hJyyKLvkmpJo0Ob8Efq5pjYEYaI0=
Subject key identifier: 81:D3:6F:85:D6:A2:4A:84:B7:F0:6D:D1:34:C0:58:23:6D:78:4A:B3
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 01984A781F1DCD3F871C2851258BCA7BA3EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 06:00:42 +0000
Manifest this update: Sun 27 Jul 2025 06:00:42 +0000
Manifest next update: Mon 28 Jul 2025 06:00:42 +0000
Files and hashes: 1: 8n66jbpw-c2Aqy4SU3OEjHIQ8Ng.roa (hash: 5aUols723XY3S6GAB1kKE/l7w8plVtAbUtwN3H30tYU=)
2: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: I+vpYCst6021Yh6dqZ51L2wA8SUxPx5jRhrWHZCEdd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:1f:1d:cd:3f:87:1c:28:51:25:8b:ca:7b:a3:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jul 27 06:00:42 2025 GMT
Not After : Jul 28 06:00:42 2025 GMT
Subject: CN=81d36f85d6a24a84b7f06dd134c058236d784ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6f:99:25:39:54:0d:07:a7:92:29:ca:47:0b:
f7:2d:1c:9e:18:5e:d8:5d:65:67:84:0a:68:4e:51:
5e:2d:a4:b0:7a:a9:4b:fc:21:6d:9c:c1:ca:da:0e:
b0:4e:27:4f:61:61:7c:cf:43:f0:5c:e2:0e:b6:96:
c8:1f:30:39:3f:05:ab:4e:dd:ad:3c:ea:cf:f4:44:
8f:90:84:24:98:7a:f3:07:6d:4d:c9:97:81:21:0a:
3b:0d:bb:a6:98:45:90:98:d9:4a:f2:5a:bd:42:1d:
a7:c3:52:e7:d7:de:5e:b6:ce:16:fa:0a:b4:6b:3e:
63:9b:55:33:f2:5c:13:e7:ca:de:f8:fa:e8:15:70:
8b:c1:a0:97:de:43:fe:07:76:3e:24:30:85:60:19:
19:4e:a7:15:3f:d7:7c:7b:1d:f1:d5:ef:9e:a7:60:
f6:81:35:1c:d7:58:72:3b:75:c3:2f:5b:41:3b:24:
7a:82:02:28:bf:0a:73:31:e2:21:e4:f4:c7:52:c6:
ba:50:9f:56:29:77:c2:a2:bf:43:23:03:2e:a5:84:
d5:34:10:06:58:a7:d9:36:1c:9e:e7:4a:e0:62:1e:
f5:ba:e5:3a:ea:b0:48:96:d8:7a:b0:b4:c4:f9:1d:
07:60:02:87:db:b2:83:b1:19:9a:f3:ce:db:47:09:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D3:6F:85:D6:A2:4A:84:B7:F0:6D:D1:34:C0:58:23:6D:78:4A:B3
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:97:4a:64:bc:7b:5e:90:c8:23:ca:45:86:b6:d8:ab:0e:c7:
ae:dc:4b:51:f0:09:35:17:7b:0a:b4:b8:f1:b4:04:64:5a:fa:
cb:50:e4:56:15:37:c5:d2:11:b3:42:25:1c:22:99:09:64:f7:
59:60:b7:fb:d5:47:c5:ea:54:e7:f3:cb:46:d6:e8:f2:52:f9:
8b:7f:f0:e9:78:08:5d:98:d9:34:a4:d7:d2:e3:ec:50:d4:cd:
6d:77:28:a2:d8:2f:dd:ca:9c:db:29:91:10:5c:63:11:e3:ec:
b0:1c:84:5b:1e:a1:42:2a:b3:c0:49:cb:53:34:7c:1a:a9:2e:
c7:35:75:6c:49:a6:1b:90:1a:3f:af:18:e8:07:1c:57:71:a7:
54:87:9c:4d:0e:76:36:4d:f3:07:63:fe:7c:1d:dd:15:2b:7a:
e5:4d:7f:dd:a3:ec:44:5c:a4:eb:dc:a1:ee:d3:e0:85:68:27:
0e:8a:9a:39:60:3a:d3:f6:84:f7:14:ef:82:e3:8b:83:2a:0b:
7c:96:d1:73:32:9b:7e:d5:3f:47:34:4d:e4:a1:a6:03:87:3e:
cb:65:7d:78:91:3f:55:64:10:95:4c:bb:9d:c6:bd:bc:5c:80:
0a:09:72:a7:7a:08:f2:89:0a:51:57:69:41:33:2a:94:f7:44:
16:3a:f6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:22:37 2025 by rpki-client