Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
File: urIywdctwcq72hbIcOyUHUWKn9w.mft (raw, json)
Hash identifier: hCeiEep+ZpLq4BInxRMZbLfftiqitQHZh55mL0aKkGw=
Subject key identifier: 48:29:DB:CC:1A:F0:B0:71:FB:BF:5C:8A:69:B5:C2:22:BA:5A:13:E0
Authority key identifier: BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
Certificate issuer: /CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Certificate serial: 0199C4FC105E64710960228A3F115A50EF85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
Manifest number: 16C7
Signing time: Wed 08 Oct 2025 18:01:17 +0000
Manifest this update: Wed 08 Oct 2025 18:01:17 +0000
Manifest next update: Thu 09 Oct 2025 18:01:17 +0000
Files and hashes: 1: 0QXy7IDDCinrVTjudZKAfgXRt3U.roa (hash: +i87qBEUjlrTVar0CFYlKgpKMjdM8qPHMj6y8+bg0Ro=)
2: 5sOvZVSGSbqbJ9UYmMTq4WBFqcI.roa (hash: IZcSiIhdFKV4oRisfK5h0N5DgTlIveYRPL9E61IP61g=)
3: urIywdctwcq72hbIcOyUHUWKn9w.crl (hash: mYjTpSoqtTGZ9d+o+lON8nQm4Qy9HuMG+EUCwaJULA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 13:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fc:10:5e:64:71:09:60:22:8a:3f:11:5a:50:ef:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab232c1d72dc1cabbda16c870ec941d458a9fdc
Validity
Not Before: Oct 8 18:01:17 2025 GMT
Not After : Oct 9 18:01:17 2025 GMT
Subject: CN=4829dbcc1af0b071fbbf5c8a69b5c222ba5a13e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:b7:61:b5:b6:37:75:d6:ff:55:e4:8b:8e:
70:ef:c6:dc:ab:b9:db:07:d8:07:ce:83:d3:76:b4:
22:99:38:e5:e5:35:7a:49:d1:98:6a:f3:dd:5b:a2:
a7:1a:5a:19:f8:ee:6a:21:ae:16:e9:2f:ff:7c:71:
85:e9:ac:f9:78:af:33:aa:2b:2d:d4:7f:0b:d7:b6:
9a:9d:e9:54:56:6b:35:d6:b6:08:8a:56:6d:b1:86:
74:f3:28:76:08:13:c3:11:52:64:c4:64:e2:47:6b:
26:6b:f3:2c:8a:36:00:96:0a:6f:e9:06:f4:47:69:
59:c3:16:12:ac:6b:9a:18:9d:11:eb:df:a6:93:a7:
90:e0:7c:e7:de:6b:fa:0f:56:b5:0b:d6:0e:81:1f:
6d:fa:57:61:4e:26:c5:66:4c:76:3d:e2:c1:81:2c:
66:23:a8:f8:07:d1:72:4c:33:b3:b8:71:4d:fc:5d:
54:ed:e8:3c:94:8d:16:c4:b4:1e:f2:98:93:12:43:
53:82:7f:cd:75:6b:62:18:db:19:41:ae:ec:4d:fa:
ea:8a:e9:7c:81:b3:89:8b:73:a7:70:09:6a:1e:bc:
d7:aa:0e:93:20:f6:26:a2:c4:f1:88:cc:d3:8d:ee:
1e:06:ee:a0:18:1e:8a:3b:0c:27:50:c6:de:32:d8:
07:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:29:DB:CC:1A:F0:B0:71:FB:BF:5C:8A:69:B5:C2:22:BA:5A:13:E0
X509v3 Authority Key Identifier:
keyid:BA:B2:32:C1:D7:2D:C1:CA:BB:DA:16:C8:70:EC:94:1D:45:8A:9F:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urIywdctwcq72hbIcOyUHUWKn9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/795774-fb9e-413f-9f70-7d3efb4a6a7f/1/urIywdctwcq72hbIcOyUHUWKn9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:a4:da:cd:32:e4:3d:1e:53:b4:88:a8:fd:2b:b9:c5:6f:
57:b4:1d:10:7c:15:b1:2a:1e:00:2f:c1:a2:7d:cb:b2:5a:c0:
bc:23:52:76:72:46:18:23:2d:78:62:3d:df:55:f3:dc:44:13:
73:b6:48:59:29:91:44:ee:33:87:46:fa:a0:f6:39:90:c7:b2:
cb:ca:48:b8:1e:26:61:ff:45:8e:57:7b:93:a4:9a:1f:fb:6f:
ce:6c:8b:79:4c:d3:37:b9:07:da:fe:07:6c:0f:b2:df:e5:6c:
e9:cf:6a:c0:e5:b2:f3:50:3a:8c:ee:16:5d:0e:24:f0:b8:3f:
05:67:06:e4:d1:42:bc:8a:c9:f1:3c:78:4b:a6:85:71:2b:88:
a6:b7:8d:48:c8:c6:61:d6:2b:c9:d3:30:67:0e:ff:79:17:5e:
e8:89:fa:cc:aa:d9:45:ca:3e:54:65:07:9f:d9:04:70:1d:2c:
d5:31:44:1a:4d:61:42:da:e9:07:a6:1f:cc:9c:ef:c5:57:e8:
e0:4f:e4:a3:18:62:cc:66:c6:66:af:98:87:ea:c0:86:9e:11:
dc:11:bb:5d:7a:02:db:89:97:12:63:23:0b:64:e6:ec:67:a1:
39:d2:26:b2:5d:63:ad:03:07:1f:40:78:e7:bc:d1:66:c1:3a:
2f:39:6e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 21:25:11 2025 by rpki-client