Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: ySNpPRin9TP3amZwX4eB2aqV5LUeQp6O/KstcT91wQA=
Subject key identifier: FB:76:79:FE:34:16:AE:17:22:4C:E1:15:B5:45:09:0A:F3:6E:02:EE
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 019A714A2FA5208F0B3F883E5E0395F852F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 172B
Signing time: Tue 11 Nov 2025 05:01:18 +0000
Manifest this update: Tue 11 Nov 2025 05:01:18 +0000
Manifest next update: Wed 12 Nov 2025 05:01:18 +0000
Files and hashes: 1: NBFkOVFjhr5cFEclo5MbI_qhtaE.roa (hash: aEnSyjmzjCXkq9QNcUbxZtFecm4VYBNFEkBBtcfxmSI=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: 1JtWWCMJ0+v4neiT111dIuVkbL2k1Yc4b1h4vLAa7z0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:4a:2f:a5:20:8f:0b:3f:88:3e:5e:03:95:f8:52:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Nov 11 05:01:18 2025 GMT
Not After : Nov 12 05:01:18 2025 GMT
Subject: CN=fb7679fe3416ae17224ce115b545090af36e02ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8f:fe:47:a3:64:d9:62:bf:8c:a2:e2:98:7b:
95:9f:8a:29:03:22:9b:22:4d:b2:20:e0:ad:f9:ff:
85:66:8d:af:35:09:01:52:d4:0a:ad:93:ab:8c:a3:
75:41:e8:bf:20:a3:17:03:f9:79:33:fa:8e:3b:fa:
e9:5d:7b:1e:74:00:2a:da:c6:4a:e7:ac:22:3b:19:
c5:98:5f:ff:3b:6c:ee:52:fa:1d:d3:68:14:62:94:
38:65:52:dc:27:8c:d1:78:98:d8:f5:3a:94:07:b4:
1c:9e:95:1e:f5:57:0a:c1:70:62:b1:81:27:18:79:
42:ec:55:d0:3c:42:0f:b1:36:1d:4a:d1:1f:7a:8a:
15:b0:9f:ab:8c:e5:0e:6f:f6:8d:b4:4c:2b:38:03:
05:d0:7a:d4:a7:a0:d2:6f:11:77:7a:bc:0a:43:f5:
20:49:b3:d0:32:58:95:bd:b6:2f:4a:02:77:cd:bc:
6d:76:e9:df:7d:b0:45:a9:da:8b:dc:b4:af:b2:3d:
f0:cb:c4:85:e4:5e:a7:20:5e:9f:1c:1b:f8:f5:28:
94:13:9d:18:02:30:8c:e1:3d:73:84:f2:83:6f:93:
94:7a:df:8a:bf:b8:46:8c:3c:1a:ea:9c:19:37:9e:
fd:00:68:4f:8a:da:6a:67:d7:23:20:d7:94:fa:e2:
3d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:76:79:FE:34:16:AE:17:22:4C:E1:15:B5:45:09:0A:F3:6E:02:EE
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f7:a1:0a:5b:33:2b:ba:97:9c:ce:73:70:47:45:9e:bc:26:
aa:33:5a:a1:d2:19:3a:11:6a:30:a2:2f:9d:89:1f:5d:84:82:
9b:e2:07:43:59:15:c6:10:ab:d1:54:d1:3d:3c:e1:1f:a1:ab:
42:a7:29:13:73:96:aa:a3:79:51:d3:ea:d6:6e:c8:c5:de:26:
12:9a:77:66:85:cd:23:84:81:ef:48:d6:65:24:72:6f:34:43:
82:94:b1:32:8f:bb:46:1a:42:92:2f:e1:0b:58:45:88:96:59:
33:08:c5:33:37:2f:89:84:1d:6f:f4:e9:e5:1b:b9:23:e9:76:
bf:d3:a2:6d:ec:a0:7d:4c:4d:c6:8e:82:d1:b0:ce:0e:ae:a9:
1f:d9:02:54:53:c2:4e:f5:77:32:09:20:0e:b8:ad:52:cb:e2:
73:12:0c:5c:d5:96:23:89:ae:93:64:65:1e:a3:29:aa:99:28:
6f:5a:08:9d:79:77:f9:a4:70:43:a1:8d:83:ae:7d:2b:55:3e:
d3:ce:57:a2:cd:91:8c:9e:40:f8:a4:da:0b:3f:96:e9:44:43:
76:0c:4e:dd:fc:56:55:7a:44:55:0e:fc:16:69:d0:29:d5:c9:
76:5b:1f:27:f8:18:75:88:4c:d0:6b:b8:20:ba:80:83:60:b2:
0f:58:6c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:19:55 2025 by rpki-client