Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier: XvialBBCm+t5A4eE+s/8Pi/QpQKkUs7X1Y3zViTwH+0=
Subject key identifier: DE:1A:F3:4B:35:4D:AC:EC:7D:51:89:F0:11:30:B9:CD:91:90:BD:91
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 019847E4D7514939F9EEFE69975D832BF41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number: 0187
Signing time: Sat 26 Jul 2025 18:00:36 +0000
Manifest this update: Sat 26 Jul 2025 18:00:36 +0000
Manifest next update: Sun 27 Jul 2025 18:00:36 +0000
Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: j7kU/axDuaS2i8SvE95CFys6ieP8uRF0fgyg/QMSmn4=)
2: W66TeYTw-t7EMoHzkCaUwVfLkDI.roa (hash: Ox2U/eJQb+R2Hy97s4rI93U5aSqmhZSgt5Xa460suhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:d7:51:49:39:f9:ee:fe:69:97:5d:83:2b:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Jul 26 18:00:36 2025 GMT
Not After : Jul 27 18:00:36 2025 GMT
Subject: CN=de1af34b354dacec7d5189f01130b9cd9190bd91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c2:eb:2e:32:9e:53:b4:3b:47:31:81:69:be:
dd:c0:c1:21:ca:77:ab:23:56:87:16:a0:0f:ec:b6:
41:c7:fc:c8:b3:31:98:8c:ed:59:ae:aa:b1:9f:8f:
1a:12:5f:73:fd:c3:be:29:59:54:6d:a1:4a:e9:63:
73:06:50:93:89:ed:b8:5c:0a:28:1c:5f:f0:42:ca:
b9:7e:18:23:06:99:d0:27:76:2b:54:ca:ca:8d:2d:
cb:32:d9:47:00:b3:64:6f:2e:bf:c7:07:4b:86:c8:
7c:fc:3a:1d:bf:3a:94:f3:41:13:5e:9f:25:56:3c:
8c:bd:6b:71:d9:28:36:32:98:94:f6:6f:b4:39:1e:
ac:c2:73:ac:f7:a2:ab:18:e6:9a:5e:38:56:f6:b5:
81:7f:29:bc:e6:00:b6:c3:1b:17:4b:0b:fe:d3:aa:
e0:fa:8b:6b:a0:cb:28:41:ae:3e:2a:39:3c:64:3a:
89:a3:96:ba:33:5f:df:c3:34:61:c5:6e:c6:83:ed:
9c:dd:5b:9c:20:73:20:e7:c0:ac:0c:7d:ea:68:a9:
8a:45:32:c3:88:b4:33:3b:be:f4:af:28:25:c8:ed:
bc:0e:92:8a:ee:32:56:fd:e4:ae:ba:1e:e4:aa:1f:
4d:c8:54:08:80:9c:cd:8c:90:ad:41:bb:1e:cd:fb:
fa:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:1A:F3:4B:35:4D:AC:EC:7D:51:89:F0:11:30:B9:CD:91:90:BD:91
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1c:80:6c:1d:b5:6f:8c:f9:65:c3:13:2e:d2:d4:78:37:b8:
de:5e:98:41:a9:3f:54:24:63:56:e0:ac:84:59:23:6b:df:6a:
84:da:4e:6a:ee:26:5d:55:fa:ed:c3:50:42:d7:91:2b:ea:23:
9d:b0:d4:48:6d:b5:4c:32:2c:e6:af:0d:07:c2:c5:c3:7d:cb:
8f:15:86:32:1c:45:23:e6:42:8e:af:23:c8:09:f4:f2:9e:e8:
0f:1f:57:03:0d:ca:19:7e:80:6a:25:d2:2b:f5:a9:16:75:43:
25:0b:eb:1d:03:4b:7f:7d:0d:a4:62:f2:1d:72:66:5a:74:cf:
be:d8:97:d3:91:a7:7f:b5:68:e4:fe:da:0f:cd:cf:c0:b6:6f:
09:02:a1:30:ef:cb:84:d9:ee:54:af:4a:24:0f:41:83:a3:e6:
af:25:d2:3d:06:05:57:10:86:60:41:76:54:97:97:20:6f:5a:
e2:94:07:e5:ab:6a:65:1e:7f:fb:58:0a:62:c8:bd:a2:8b:12:
da:c1:32:6b:3b:84:bd:b7:4d:ec:2c:71:b0:76:dd:05:46:72:
a4:3f:f9:cf:08:30:8a:72:5b:81:fb:71:2f:81:6e:f6:8b:78:
f8:eb:bb:7c:e6:cb:57:02:e2:35:79:26:37:51:9d:56:46:2a:
cd:66:83:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:27:59 2025 by rpki-client