Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: Xst1HjtmrucfnBWFBKRXoZYxYuun7lbRPh1SyzKbNv0=
Subject key identifier: F3:59:8B:85:86:3F:BB:1D:5B:89:44:F4:DC:EE:26:BD:9E:D0:6A:31
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019A718090FBA4DD4181118090C72B6A69AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 1733
Signing time: Tue 11 Nov 2025 06:00:42 +0000
Manifest this update: Tue 11 Nov 2025 06:00:42 +0000
Manifest next update: Wed 12 Nov 2025 06:00:42 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: kusiu+YakF6nZFoyIHzFUPFHGXHuPrGROuTNjauZl/s=)
2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:90:fb:a4:dd:41:81:11:80:90:c7:2b:6a:69:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Nov 11 06:00:42 2025 GMT
Not After : Nov 12 06:00:42 2025 GMT
Subject: CN=f3598b85863fbb1d5b8944f4dcee26bd9ed06a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:54:8b:05:3e:8a:ad:ef:57:f0:19:42:a5:
33:7a:8d:ad:16:a2:84:4c:0f:0b:a6:8e:4e:be:ce:
8d:2a:bc:19:aa:b7:bc:e8:43:55:4e:9f:e2:c7:71:
78:12:47:2d:fc:d1:8f:c9:99:78:08:35:11:78:7f:
4f:32:3a:a3:e1:08:f1:9c:0f:c5:9b:3c:2f:e4:71:
21:80:79:32:1f:06:d0:c2:08:76:c0:ee:88:df:52:
e0:01:86:a3:71:01:d7:e5:75:87:a8:72:59:2b:af:
b4:c5:86:db:48:89:3c:d2:d4:9e:27:9d:bf:4c:33:
31:ac:59:2f:0b:a0:62:d9:bb:df:b1:19:7e:ce:94:
2b:6a:eb:45:0d:46:ad:b4:d0:cb:d6:5b:5f:a6:6e:
4d:89:c9:27:3c:9c:2e:2b:a7:f6:fe:ee:90:83:fb:
eb:82:5c:47:64:75:fd:6f:6a:88:42:28:b1:e1:55:
a9:53:90:71:a1:d2:b8:fa:f3:5d:40:38:b8:47:fb:
70:9d:b3:eb:58:1e:c0:5a:df:9b:68:70:a7:d4:09:
93:49:37:6f:d0:fe:fc:26:94:07:76:46:3f:e2:bb:
14:9c:a1:5f:42:8c:c4:2e:f2:66:8e:45:07:38:d4:
d6:06:83:5f:96:23:3b:a0:c9:48:7d:ae:27:ce:4f:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:59:8B:85:86:3F:BB:1D:5B:89:44:F4:DC:EE:26:BD:9E:D0:6A:31
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d3:4b:70:7f:fe:2e:7a:30:e5:78:71:f7:90:dc:05:85:ac:
e7:d8:cc:90:f4:2b:ae:39:7b:49:75:92:dc:b5:26:3f:f0:b3:
50:a3:fb:43:7d:49:cf:a2:82:34:48:07:d0:af:b1:89:5b:78:
dc:be:7c:73:38:b1:97:4d:a9:cb:53:39:86:d9:ef:5d:f5:3f:
6f:a1:f6:da:a4:ef:8a:8a:35:83:fb:cc:07:aa:81:72:e0:0e:
30:f7:09:93:ed:9c:15:c6:56:b8:6b:3a:a4:1a:e3:50:bc:67:
a0:4b:20:d1:e2:e3:4b:3b:a5:65:95:51:00:44:e0:11:d8:16:
6d:55:98:92:f4:81:77:6c:f8:8d:77:29:11:02:31:9d:47:f3:
99:a4:44:0a:8e:16:27:8e:56:76:0d:a7:23:6a:04:d4:94:4a:
07:46:50:f6:a8:e2:f2:d2:10:91:b5:fa:48:a3:f6:96:6f:25:
78:0f:1b:d6:eb:d9:aa:d1:44:46:2a:b9:35:70:61:d2:55:89:
37:24:3a:f3:c5:12:f7:b7:c7:d3:26:64:19:e6:b4:e1:d0:9f:
83:98:29:b4:43:28:cd:b0:15:11:8d:b8:f4:c3:a1:bd:db:b8:
8e:f4:02:9c:75:43:53:0f:8d:74:53:5b:82:85:87:0c:e4:c5:
66:a4:1a:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxgJD7pN1BgRGAkMcrammqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjUxMTExMDYwMDQyWhcNMjUxMTEyMDYwMDQyWjAzMTEwLwYDVQQD
EyhmMzU5OGI4NTg2M2ZiYjFkNWI4OTQ0ZjRkY2VlMjZiZDllZDA2YTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumNUiwU+iq3vV/AZQqUzeo2tFqKE
TA8Lpo5Ovs6NKrwZqre86ENVTp/ix3F4Ekct/NGPyZl4CDUReH9PMjqj4QjxnA/F
mzwv5HEhgHkyHwbQwgh2wO6I31LgAYajcQHX5XWHqHJZK6+0xYbbSIk80tSeJ52/
TDMxrFkvC6Bi2bvfsRl+zpQrautFDUattNDL1ltfpm5NicknPJwuK6f2/u6Qg/vr
glxHZHX9b2qIQiix4VWpU5BxodK4+vNdQDi4R/twnbPrWB7AWt+baHCn1AmTSTdv
0P78JpQHdkY/4rsUnKFfQozELvJmjkUHONTWBoNfliM7oMlIfa4nzk/1rQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPNZi4WGP7sdW4lE9NzuJr2e0GoxMB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABNNLcH/+
Lnow5Xhx95DcBYWs59jMkPQrrjl7SXWS3LUmP/CzUKP7Q31Jz6KCNEgH0K+xiVt4
3L58czixl02py1M5htnvXfU/b6H22qTvioo1g/vMB6qBcuAOMPcJk+2cFcZWuGs6
pBrjULxnoEsg0eLjSzulZZVRAETgEdgWbVWYkvSBd2z4jXcpEQIxnUfzmaRECo4W
J45Wdg2nI2oE1JRKB0ZQ9qji8tIQkbX6SKP2lm8leA8b1uvZqtFERiq5NXBh0lWJ
NyQ688US97fH0yZkGea04dCfg5gptEMozbAVEY249MOhvdu4jvQCnHVDUw+NdFNb
goWHDOTFZqQamg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:02:41 2025 by rpki-client