Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: lLXPgL+jbpi0is/37crA/go8Wd/74bUbTUZEz9RqCbY=
Subject key identifier: FB:AE:4B:1C:2F:85:04:12:76:F8:51:3B:51:DF:DF:DE:E0:1A:23:24
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 01995F45A6092585AED33CA4D4B191CA8987
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 16A5
Signing time: Fri 19 Sep 2025 00:00:23 +0000
Manifest this update: Fri 19 Sep 2025 00:00:23 +0000
Manifest next update: Sat 20 Sep 2025 00:00:23 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: a8LjIS9BM5yGs3AspVoxtc45ic5wCYqqafuYQTOb/1I=)
2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 19 Sep 2025 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:5f:45:a6:09:25:85:ae:d3:3c:a4:d4:b1:91:ca:89:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Sep 19 00:00:23 2025 GMT
Not After : Sep 20 00:00:23 2025 GMT
Subject: CN=fbae4b1c2f85041276f8513b51dfdfdee01a2324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:e1:b9:69:1c:f5:6a:f4:cb:c7:ee:ec:1e:
8a:e5:22:e4:76:44:92:37:09:ba:32:35:d0:34:34:
fe:2f:9c:38:71:51:39:77:dc:98:13:8b:5e:08:dd:
8d:17:1c:8a:36:cd:27:47:da:bb:ec:90:6f:1c:ea:
71:ba:ff:45:06:74:c8:21:db:03:1f:76:61:8c:d5:
ea:c5:a2:59:4b:97:31:74:a7:94:c8:df:bb:46:93:
53:92:99:74:e6:55:51:5a:73:22:56:cc:80:33:2e:
81:14:2f:c0:f1:1b:12:2f:bb:02:77:45:39:6f:3a:
11:48:1e:02:dd:96:00:4e:d0:22:d7:be:f6:b1:55:
f9:11:7c:3d:39:7a:bc:4b:b1:7e:65:7e:f3:fe:39:
6e:10:2f:13:44:aa:fe:74:bb:03:0e:1f:e6:67:bd:
58:e2:05:f0:98:67:73:81:cc:22:d1:a0:81:80:42:
73:fd:bc:0d:29:f4:c0:7e:7c:fb:0d:99:1a:b3:0b:
67:04:2f:e0:80:37:29:73:c1:83:20:37:fd:7e:1b:
88:37:57:1c:29:61:21:ce:fb:70:c1:47:eb:73:c5:
c7:fd:06:2c:5f:d6:af:d1:f7:77:dd:25:c5:1f:f9:
e7:af:38:90:b6:ab:80:e9:c5:d2:3d:54:75:9d:62:
86:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:AE:4B:1C:2F:85:04:12:76:F8:51:3B:51:DF:DF:DE:E0:1A:23:24
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cd:47:d6:7e:bf:24:6f:ab:f9:9b:58:fe:f7:d3:dc:d4:05:
08:da:8a:90:0c:5c:08:9d:fc:c4:ff:30:45:0c:db:90:ab:6f:
46:cf:cf:6a:4a:b1:4e:82:53:3d:fe:c2:1a:47:32:86:7a:6c:
dd:dc:da:40:ab:80:9b:11:5d:30:2e:29:11:82:3b:fc:1c:dc:
52:58:a0:15:2a:32:7a:3c:ec:2e:88:41:9a:11:b4:8d:b2:3a:
33:c5:81:33:20:67:a4:4b:74:16:5e:db:92:bd:88:bb:fb:ef:
d2:a1:81:72:22:08:d1:32:16:da:49:9c:84:04:1e:0c:00:0e:
62:19:35:cb:51:d7:da:72:da:61:e1:2a:48:f3:b5:e9:95:ad:
91:45:72:33:51:a9:e5:ae:da:2a:ed:1f:54:51:23:88:15:a1:
b4:e8:d0:40:eb:52:71:b7:ee:b4:e0:3b:ca:d6:d0:9c:ba:c9:
81:9c:28:a9:5d:44:32:3e:f3:1f:af:ad:bd:cc:34:26:14:c1:
c9:3c:ee:ed:88:40:5a:f9:be:02:84:44:05:e4:d2:18:b0:a9:
e3:0f:a2:50:31:a4:6f:27:cb:70:b4:af:29:1e:86:1a:46:24:
97:12:ec:19:71:ec:10:a7:a2:17:bb:3f:86:c9:63:31:7d:2d:
c3:b5:c5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 03:29:13 2025 by rpki-client