Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: rFo57dtYqpdo0FYUEsRU+B7ewAta39ChS8PVNxXAOl8=
Subject key identifier: 83:B5:36:40:B8:2B:40:CB:94:B7:08:30:17:3B:0F:1E:86:91:F5:3E
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 019848F79D3ACAC36576398C5BF61F2A7039
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0D63
Signing time: Sat 26 Jul 2025 23:00:43 +0000
Manifest this update: Sat 26 Jul 2025 23:00:43 +0000
Manifest next update: Sun 27 Jul 2025 23:00:43 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: cyexHm1nIB2Ji9Lvz0oFd2PewK/mZQtD7o0pTOKiYq0=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:9d:3a:ca:c3:65:76:39:8c:5b:f6:1f:2a:70:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Jul 26 23:00:43 2025 GMT
Not After : Jul 27 23:00:43 2025 GMT
Subject: CN=83b53640b82b40cb94b70830173b0f1e8691f53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:01:2d:84:b4:45:e0:70:a6:34:f0:58:1a:4b:
c8:ad:c1:97:75:ea:48:87:da:67:fc:60:0b:ce:97:
2d:da:80:71:c3:15:39:e3:2b:b9:40:77:05:e7:d5:
c3:3d:15:43:28:6f:43:65:cb:95:4e:f6:22:af:d2:
2e:c2:04:f4:0b:9c:5c:bd:27:ce:00:80:3c:80:5b:
15:82:b8:37:ea:a5:b8:74:f7:43:70:79:e3:16:e5:
26:fe:9e:0b:d2:f6:ae:f3:46:9b:9d:b0:75:19:b6:
82:2d:86:de:9b:ad:05:c2:48:00:03:5b:1c:f5:2e:
44:8d:6d:2c:64:0f:f0:37:e8:a3:26:96:4f:06:d1:
bc:66:b7:49:d0:0d:0d:46:5d:05:a8:06:af:13:e0:
d7:07:f0:cf:17:7e:33:b5:84:79:bd:fd:da:f5:29:
05:5d:50:8d:8a:71:25:a4:b7:77:90:b6:56:df:34:
29:d9:d1:d8:70:a8:40:28:17:32:94:d4:b5:ed:42:
d3:e0:4d:11:c6:dc:b1:74:aa:f2:30:58:d8:49:02:
a4:5a:ca:fe:76:70:f1:4c:58:10:fc:2b:b0:41:99:
5e:23:7b:56:b0:46:bd:cf:80:65:8a:d7:9f:63:d7:
5d:e4:43:ae:30:f0:bd:d8:f4:57:cc:81:de:06:70:
b4:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:B5:36:40:B8:2B:40:CB:94:B7:08:30:17:3B:0F:1E:86:91:F5:3E
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:fc:13:7e:83:e6:51:60:cd:01:36:5d:d9:0b:94:d0:66:ea:
25:24:21:9c:e9:9d:92:2d:ed:e4:7e:c1:1b:04:96:b7:06:13:
73:da:42:92:a4:4c:47:b5:92:90:9b:a9:7e:a7:fb:ab:fe:d8:
04:1c:98:d6:f7:d5:e3:d7:01:df:37:67:3d:b8:e0:b7:90:04:
c4:4f:db:09:66:61:24:b9:c8:60:11:1b:da:da:ec:57:62:88:
2d:7b:1c:c5:d0:d1:9a:6a:3f:11:89:72:db:fe:af:93:66:ea:
fa:0a:cb:e6:70:c5:e5:56:fc:9e:88:93:35:86:d6:de:fd:84:
47:4c:9c:5d:d6:0a:ed:d9:b5:51:67:f2:f5:22:36:68:f4:47:
0b:ed:d3:0e:47:16:d8:f4:29:e3:00:a1:53:d6:3d:f1:68:92:
48:08:27:c5:fd:c8:6a:b1:f6:34:5d:38:9f:76:be:17:d1:2d:
90:88:7b:cc:3c:01:23:bb:3b:71:ad:6d:5a:f7:91:c7:e1:bd:
c8:8b:49:8d:83:c3:54:f9:40:75:e3:43:a4:80:40:81:79:04:
da:70:07:b9:59:c2:41:77:cd:50:c1:50:3e:9a:4a:f6:b7:1e:
be:a3:61:0a:f7:de:78:20:05:d6:87:62:6f:81:b7:75:6e:4e:
39:5f:18:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:32 2025 by rpki-client