Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
File: urRT2Xui9KBFhD5rSpU7PlEG6vI.mft (raw, json)
Hash identifier: 7vM2mGyiQxxCCoSEMiOHyLOdPM3UmvDSroQyhrzO+kI=
Subject key identifier: EE:C4:8B:3E:92:38:74:D6:33:40:24:B1:F1:CF:9B:BD:B6:7D:92:B3
Authority key identifier: BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
Certificate issuer: /CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Certificate serial: 01974B56845E105277C97ABB685B6733D08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
Manifest number: 1589
Signing time: Sat 07 Jun 2025 17:00:50 +0000
Manifest this update: Sat 07 Jun 2025 17:00:50 +0000
Manifest next update: Sun 08 Jun 2025 17:00:50 +0000
Files and hashes: 1: YAxMGVlnNVMBFh-Gqpd9ShmUpMs.roa (hash: inn0TlW8MH3WwBY3JfZOQs90fUrqGnIJpl+K9OSU93o=)
2: urRT2Xui9KBFhD5rSpU7PlEG6vI.crl (hash: exoqr9T3G7RyE3XThbGPN4TAUZa/y8Z6Bpl1cs1KJQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:84:5e:10:52:77:c9:7a:bb:68:5b:67:33:d0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab453d97ba2f4a045843e6b4a953b3e5106eaf2
Validity
Not Before: Jun 7 17:00:50 2025 GMT
Not After : Jun 8 17:00:50 2025 GMT
Subject: CN=eec48b3e923874d6334024b1f1cf9bbdb67d92b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fa:b1:06:b0:fa:11:b5:c6:39:06:e5:e5:84:
33:9c:52:8b:3b:1a:15:6e:6f:cb:a2:f9:ff:58:84:
f9:1f:9c:10:95:26:6d:2d:f9:b7:5a:7f:a6:5e:fb:
8e:14:d2:b9:f9:b9:bd:6d:a6:b6:f3:29:5d:9b:c8:
a6:d6:d2:88:78:c6:ee:b5:ec:af:00:a2:18:16:1e:
66:07:42:03:3b:9f:e0:67:61:4c:8f:73:cb:7a:9d:
55:0f:74:69:b3:c8:9b:9e:1d:f8:b1:86:b3:fe:42:
7c:5c:32:6a:85:bd:1b:aa:6e:a3:a9:6f:31:82:e4:
e7:9b:4c:89:bc:c1:46:69:e9:37:4a:b4:fc:20:1a:
7a:4f:81:9d:d5:82:53:fe:e7:c6:0a:d6:f3:e4:da:
ef:b9:cc:b3:ea:67:64:bd:40:d0:e6:29:3f:42:ff:
dc:30:0b:82:1f:65:97:9a:4c:7c:55:29:a2:f6:72:
27:04:09:85:68:73:da:b7:cd:2d:b5:89:15:62:f2:
7b:79:36:df:62:00:b2:6d:0a:1d:84:c8:db:02:76:
04:63:d6:96:f1:14:b2:1b:b6:82:de:08:c2:f6:04:
0f:d6:b8:f1:25:29:6f:f2:b9:a8:f3:d9:f6:09:66:
0d:0d:5a:cf:bd:a7:a1:50:55:12:d4:99:70:ad:3b:
1e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C4:8B:3E:92:38:74:D6:33:40:24:B1:F1:CF:9B:BD:B6:7D:92:B3
X509v3 Authority Key Identifier:
keyid:BA:B4:53:D9:7B:A2:F4:A0:45:84:3E:6B:4A:95:3B:3E:51:06:EA:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urRT2Xui9KBFhD5rSpU7PlEG6vI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/6703ca-ced4-4207-ab05-4a6f55771bd1/1/urRT2Xui9KBFhD5rSpU7PlEG6vI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:bf:db:aa:56:2d:38:a1:d6:fb:06:c0:ed:55:60:79:05:0e:
f1:10:63:bb:97:f0:af:26:16:a6:87:d5:36:2c:5c:97:6d:59:
67:bc:0b:62:08:60:c4:81:f5:95:18:cd:87:3f:07:b6:0c:7e:
91:cd:cf:38:9c:5e:12:b6:b0:12:5f:23:94:15:d2:df:fb:1b:
c5:d5:f2:c4:f7:5d:2c:17:dd:78:c0:ef:92:1c:e9:32:39:f3:
06:2f:a2:74:03:d3:24:35:8a:fc:75:d0:47:c2:56:5b:15:81:
fe:62:7d:ee:d7:67:16:81:8d:cf:3e:85:e5:65:20:f1:20:c8:
8c:5b:70:e7:63:f7:31:22:6b:4f:34:a7:fb:7c:24:cb:13:2c:
91:07:75:9e:fb:b4:1d:73:ab:ec:00:b4:89:a9:5e:c0:8b:af:
31:fb:e2:04:d9:15:63:0f:14:a4:e2:87:4e:31:32:22:94:a4:
06:0f:1f:ff:24:b6:e8:3d:fc:5f:6b:b3:b2:ab:a9:53:1c:87:
84:d0:c9:60:96:9b:e6:c6:54:41:76:69:fc:62:50:c8:04:70:
5f:81:fc:10:24:bc:58:25:40:c4:76:87:a4:d4:55:07:93:77:
38:e7:70:bf:9a:d3:8f:cc:cc:bd:c3:de:99:22:92:03:9b:8a:
b8:32:e3:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:02:04 2025 by rpki-client