Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
File: Urq202DpPZj86eeIjlZL1GTonoo.mft (raw, json)
Hash identifier: iJtbDt7Csa7IElRb4+NtSXDFvbtb8egoAvzsZfzTPdo=
Subject key identifier: 60:CF:EC:B1:0A:B7:CC:99:0C:18:70:DB:EC:3C:D5:0C:D0:68:97:C8
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 019A7113729768EEDA4ADC3281C661E42DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
Manifest number: 0E44
Signing time: Tue 11 Nov 2025 04:01:31 +0000
Manifest this update: Tue 11 Nov 2025 04:01:31 +0000
Manifest next update: Wed 12 Nov 2025 04:01:31 +0000
Files and hashes: 1: B-lR09vEcTp8KKlqK97Mr1BSe9k.roa (hash: Es3L421jlBfBefISWEPBSuTEyJhc2FSpGfD+ySdZNXs=)
2: Urq202DpPZj86eeIjlZL1GTonoo.crl (hash: sAmdstRcc+zelQ0dYgJ/pEYgWImH2qstwVNzGfDG58M=)
3: qIkK_6-F6txR9niUUOebhF6pfjI.roa (hash: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:72:97:68:ee:da:4a:dc:32:81:c6:61:e4:2d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Nov 11 04:01:31 2025 GMT
Not After : Nov 12 04:01:31 2025 GMT
Subject: CN=60cfecb10ab7cc990c1870dbec3cd50cd06897c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:3c:c0:01:10:6c:8e:25:6c:83:ac:9a:31:88:
39:e8:15:1d:5f:1f:42:70:95:a7:a9:b9:77:b8:10:
41:2c:de:ba:d8:e3:54:d1:38:53:b6:ab:2b:c7:9a:
c1:bc:55:7b:d2:26:93:20:c7:64:a2:84:e4:7c:9b:
d1:c4:12:ba:d1:64:d9:81:f7:03:bc:d6:e9:16:7e:
16:cd:74:09:68:15:e3:03:73:97:3f:3d:00:30:17:
32:b7:9e:ac:3b:58:94:e4:10:48:e5:ff:2d:b2:96:
ad:a2:b0:ba:4e:89:b1:55:48:d6:e4:67:f0:20:06:
92:0d:f8:45:9c:3d:c7:88:d3:00:11:0b:b8:d4:b3:
46:1e:ac:b9:0b:2c:3e:bf:32:f0:e3:cd:72:a5:ce:
b5:a4:52:5c:79:e5:12:34:21:14:e3:0c:66:1f:6b:
25:37:fd:8a:36:7a:da:34:35:73:d0:96:63:a0:1c:
a5:2e:c0:3e:28:98:53:45:89:bc:60:7d:a7:05:79:
05:8a:bc:f3:00:27:1a:93:db:2d:47:95:62:6a:5e:
91:2e:2e:c6:8a:50:e1:14:7e:01:7f:3d:2d:ec:d7:
12:4b:b5:15:37:78:57:f5:15:01:6e:47:c3:19:d7:
be:21:f0:02:fb:e7:b2:ce:b4:ac:0e:67:be:7e:f9:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:CF:EC:B1:0A:B7:CC:99:0C:18:70:DB:EC:3C:D5:0C:D0:68:97:C8
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:f4:ab:fe:e0:4b:da:a6:fa:0a:8f:40:b9:c7:a2:36:62:b1:
93:9f:85:6b:bd:e9:e8:f6:7f:dd:61:de:89:c3:4f:ff:4d:ba:
47:6f:86:3e:7c:64:12:82:90:9b:61:2b:f8:59:b2:b5:cb:ec:
71:5d:73:d8:48:9d:31:59:0e:a7:89:43:76:e0:63:b2:48:a5:
67:1b:f3:ee:4b:06:c8:1b:21:83:1d:8d:ec:fc:3b:da:91:24:
6e:9a:a2:18:41:16:fa:4f:5c:ce:dd:9d:85:9e:0b:b2:20:78:
00:15:14:ee:e8:cc:78:a3:13:4a:1f:27:33:9f:c3:36:c3:ab:
08:c7:6b:3b:45:00:f7:97:e2:5c:e3:19:3f:26:2c:83:37:9e:
03:81:a6:ff:bf:05:05:67:2b:e4:06:7f:ca:aa:78:a4:79:62:
90:1b:2a:41:bb:16:24:c5:0b:57:80:92:04:04:41:47:24:12:
69:be:0a:ea:74:ca:79:d4:8f:b9:a9:25:5c:40:75:ea:cb:a2:
e7:c6:a6:87:78:2d:de:21:2c:f2:e0:dc:07:cb:ac:d8:1b:6b:
ff:82:fb:65:23:de:f8:3b:09:2e:24:c2:51:6e:84:6e:e8:bd:
d3:ae:16:55:d0:1e:b4:e3:de:41:1f:1c:02:84:f6:da:1b:66:
53:6f:11:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:40:57 2025 by rpki-client