Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: JVYAOBtSmHX+uo9gGsYUkmZ+6Z35kwnpIrvkrjFPvYI=
Subject key identifier: 2F:CA:D4:66:58:EE:F0:55:CF:8D:F2:2E:42:57:C1:5D:0E:F6:BF:EF
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0198493BB0269F9C11AB95A8DD57EDF727A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1615
Signing time: Sun 27 Jul 2025 00:15:05 +0000
Manifest this update: Sun 27 Jul 2025 00:15:05 +0000
Manifest next update: Mon 28 Jul 2025 00:15:05 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 7xK0nWounWFlNG3iVP94zBTo788nK+7z7K59apAVmfA=)
2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:3b:b0:26:9f:9c:11:ab:95:a8:dd:57:ed:f7:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jul 27 00:15:05 2025 GMT
Not After : Jul 28 00:15:05 2025 GMT
Subject: CN=2fcad46658eef055cf8df22e4257c15d0ef6bfef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e0:8d:53:a0:6b:01:c1:06:04:51:b1:46:b2:
c3:03:7e:4f:5d:a8:54:07:91:82:a4:5c:cc:a0:43:
6f:87:26:fe:ea:19:38:23:f7:e8:85:80:85:d1:ae:
d9:09:a3:f4:d3:ae:9b:23:34:09:6c:89:3c:35:14:
5d:9b:1f:d2:24:13:28:41:b7:ac:ef:fd:6c:dd:18:
c5:e7:38:73:7d:f5:78:20:62:b7:4c:ff:a0:cd:2f:
6e:c9:df:bf:c7:07:74:5f:bb:bc:81:12:33:e2:e1:
41:e2:a9:65:ec:27:42:bc:cd:d6:14:47:41:3a:70:
de:58:9c:06:1e:bd:99:59:e9:2b:19:b7:ab:b3:94:
b6:18:c6:a8:d3:a6:04:72:40:47:06:bc:04:33:3a:
03:30:3d:17:4c:8a:bf:87:c8:a0:dc:cb:fe:9c:30:
2a:4c:82:18:c8:1c:c3:75:16:ab:0c:5c:2b:75:77:
b4:d9:ad:4b:f8:25:8e:f2:56:d3:fb:32:b7:ea:f5:
73:cd:a2:39:1a:9a:7d:2a:4e:3c:f2:0c:cd:5c:8d:
a4:92:51:7d:06:a2:33:12:b9:20:52:64:fa:77:08:
8e:34:cd:28:aa:29:d7:de:59:24:08:f7:90:3d:6c:
bc:d3:03:0c:8f:ce:4d:9d:fe:85:da:e0:c1:ac:2f:
b1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:CA:D4:66:58:EE:F0:55:CF:8D:F2:2E:42:57:C1:5D:0E:F6:BF:EF
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:51:cb:d8:7b:18:3c:ed:c3:cd:39:e8:16:5d:ec:9e:b4:70:
bc:7a:aa:67:1b:81:fb:99:81:a3:02:b3:fa:bd:72:b2:2c:da:
0e:45:95:c9:9e:e2:00:b6:e2:b6:f9:c6:d1:f4:bb:14:6f:2d:
ca:9c:3c:f6:0a:ac:20:8f:fc:b8:10:e4:27:0c:f5:e4:99:db:
65:00:b7:5c:ac:60:31:be:7b:29:03:88:6d:8a:a1:bb:3b:6b:
67:a0:64:73:9e:d3:72:12:c0:d3:58:c4:ff:d6:b7:e2:eb:7e:
56:34:65:fe:30:8a:ac:28:c9:5a:5d:ba:2d:5b:39:ec:eb:77:
a7:8a:4f:c9:2b:a7:81:3c:12:fe:f3:d7:b9:0e:1e:e1:46:01:
df:36:78:55:f6:d1:63:dc:fc:44:f0:8b:93:8d:3c:0c:51:51:
e4:bd:01:9c:2a:37:78:fe:49:9f:36:5e:60:ff:24:94:cb:57:
c8:70:5c:7c:e9:f3:2b:4c:fb:7b:33:88:ca:23:fe:d5:f9:06:
2a:12:9d:59:52:76:fc:48:19:1d:db:c5:b6:61:b3:95:ee:77:
e9:88:6e:e6:3f:44:b5:28:1e:d4:f3:2a:8c:6b:d2:37:ea:c7:
94:8b:c5:7e:4b:fc:31:e4:1a:6a:6e:0b:9b:b5:c4:d3:4b:e2:
21:47:ec:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:35:44 2025 by rpki-client