Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: FoG4puvvzqJbTpGHBJV6N3ggkEdIOr73Mh1YVCz9CPs=
Subject key identifier: 58:68:0D:B6:7B:C4:E5:19:21:2C:B8:EB:ED:6F:11:7F:94:F5:B5:F8
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0197481E5146A2DF5E116897C8C50223D111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 158F
Signing time: Sat 07 Jun 2025 02:00:35 +0000
Manifest this update: Sat 07 Jun 2025 02:00:35 +0000
Manifest next update: Sun 08 Jun 2025 02:00:35 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: Q7SjobpV+R9WTw6Af2CLxcYzvCiDrn+Y63wfqrbwuI4=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:51:46:a2:df:5e:11:68:97:c8:c5:02:23:d1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jun 7 02:00:35 2025 GMT
Not After : Jun 8 02:00:35 2025 GMT
Subject: CN=58680db67bc4e519212cb8ebed6f117f94f5b5f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4a:2a:ca:ad:0d:5e:9c:a7:61:4f:05:a7:a4:
e4:92:a4:6c:b4:1f:1f:87:2c:64:81:86:91:6d:a0:
55:ea:0e:41:79:5e:a7:a2:cd:65:22:05:ab:b7:e6:
03:26:69:0e:f7:c0:90:f6:5d:99:ea:c1:ef:8f:de:
43:b8:b2:20:ac:de:04:20:a3:d3:0b:56:07:e2:95:
63:b5:9c:1f:43:a9:60:0c:86:56:55:22:22:5f:ff:
81:bb:2c:fb:d6:d0:0f:27:3e:58:85:2e:28:ce:1b:
47:18:8c:0e:cb:d8:71:ed:35:5d:67:b4:74:9e:68:
9b:af:d2:79:86:9d:74:6b:74:c6:75:48:a2:57:18:
6c:8d:79:63:8f:ca:9b:aa:2b:17:9e:9d:fc:99:46:
05:68:72:17:71:1d:b1:8c:f1:57:91:a6:06:5e:6b:
5e:9a:9f:1e:bf:ec:1a:3a:01:bc:a4:53:4e:3d:a8:
99:14:14:79:99:d2:22:2a:2e:55:68:a2:f5:83:44:
73:3d:72:55:85:64:f7:a3:e1:af:a4:18:12:0a:85:
98:13:84:6d:50:bd:b0:e6:b8:7e:1d:9a:c7:6f:e6:
fb:06:f4:32:0e:39:a5:8c:53:3d:f6:c2:f6:a9:0c:
84:e4:2e:50:5f:1f:5a:47:bb:be:57:3d:b2:3a:c1:
5a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:68:0D:B6:7B:C4:E5:19:21:2C:B8:EB:ED:6F:11:7F:94:F5:B5:F8
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c8:17:fc:18:4d:ae:b8:0d:c1:75:e3:e8:24:67:55:96:5b:
25:2d:24:d8:30:fb:4b:97:b0:81:45:ae:0a:ee:31:bd:de:dd:
d9:40:f2:9e:f8:2d:d4:5e:32:74:d1:09:7c:c3:f9:bd:35:be:
cc:bb:27:0a:77:b7:5d:55:1f:fc:d4:03:d0:74:b7:93:9b:79:
1b:a5:c2:9e:e8:1c:d1:82:5e:de:8a:8a:e4:5b:ab:db:c7:1f:
76:33:cb:fc:cf:b1:ae:a8:8c:8c:39:8f:2e:b5:66:e5:15:fa:
3c:93:64:08:ee:a7:fa:57:ba:81:34:f9:b7:96:26:76:dd:1a:
93:6a:4a:2f:76:81:ee:f5:c0:1a:cf:5a:a2:0e:2f:b8:21:ec:
ec:3f:19:c1:3f:3c:33:d3:21:38:03:1e:8b:04:44:47:c4:5a:
3f:f1:1b:50:82:aa:c2:e0:d6:f5:8a:4c:cd:21:b3:cb:9a:bb:
5e:25:18:54:24:1b:94:2d:55:6b:be:63:67:29:1d:d1:b7:16:
d1:e8:00:b9:4b:26:64:1a:32:aa:8d:a5:36:67:90:fe:c6:84:
ae:07:03:08:6a:64:39:ff:95:0b:69:96:40:97:ca:20:38:54:
53:da:7a:6d:c2:f7:bb:eb:2b:fb:5c:0b:23:60:f0:a0:3b:89:
d1:65:06:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHlFGot9eEWiXyMUCI9ERMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjUwNjA3MDIwMDM1WhcNMjUwNjA4MDIwMDM1WjAzMTEwLwYDVQQD
Eyg1ODY4MGRiNjdiYzRlNTE5MjEyY2I4ZWJlZDZmMTE3Zjk0ZjViNWY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0oqyq0NXpynYU8Fp6TkkqRstB8f
hyxkgYaRbaBV6g5BeV6nos1lIgWrt+YDJmkO98CQ9l2Z6sHvj95DuLIgrN4EIKPT
C1YH4pVjtZwfQ6lgDIZWVSIiX/+Buyz71tAPJz5YhS4ozhtHGIwOy9hx7TVdZ7R0
nmibr9J5hp10a3TGdUiiVxhsjXljj8qbqisXnp38mUYFaHIXcR2xjPFXkaYGXmte
mp8ev+waOgG8pFNOPaiZFBR5mdIiKi5VaKL1g0RzPXJVhWT3o+GvpBgSCoWYE4Rt
UL2w5rh+HZrHb+b7BvQyDjmljFM99sL2qQyE5C5QXx9aR7u+Vz2yOsFaCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhoDbZ7xOUZISy46+1vEX+U9bX4MB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGcgX/BhN
rrgNwXXj6CRnVZZbJS0k2DD7S5ewgUWuCu4xvd7d2UDynvgt1F4ydNEJfMP5vTW+
zLsnCne3XVUf/NQD0HS3k5t5G6XCnugc0YJe3oqK5Fur28cfdjPL/M+xrqiMjDmP
LrVm5RX6PJNkCO6n+le6gTT5t5Ymdt0ak2pKL3aB7vXAGs9aog4vuCHs7D8ZwT88
M9MhOAMeiwRER8RaP/EbUIKqwuDW9YpMzSGzy5q7XiUYVCQblC1Va75jZykd0bcW
0egAuUsmZBoyqo2lNmeQ/saErgcDCGpkOf+VC2mWQJfKIDhUU9p6bcL3u+sr+1wL
I2DwoDuJ0WUGKA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:13:16 2025 by rpki-client