Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
File: 68sOe5lBX5hvTQgXf4i1uPfrp_k.mft (raw, json)
Hash identifier: vEq7udU7HAfL8KrQTTrSXW/cnHgiBVcrXb5Xhsllcsg=
Subject key identifier: 8C:4E:A5:E8:BF:C5:7C:22:1A:DD:78:02:66:97:32:02:EC:9D:19:1E
Authority key identifier: EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
Certificate issuer: /CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Certificate serial: 019A70DC5FB701CB253BB09399E6B417CDCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
Manifest number: 91
Signing time: Tue 11 Nov 2025 03:01:21 +0000
Manifest this update: Tue 11 Nov 2025 03:01:21 +0000
Manifest next update: Wed 12 Nov 2025 03:01:21 +0000
Files and hashes: 1: 68sOe5lBX5hvTQgXf4i1uPfrp_k.crl (hash: sv9tmeNrhM+3X1w+OAgb7nq/WbnPpQbSj8kHl3MCqKE=)
2: zqH_FbH4S-II4YZQGavH-bMUrEo.roa (hash: ePnRXaJa+GcJLcsGzH8p1H1utEMwoKTcU9HMLbPMGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:5f:b7:01:cb:25:3b:b0:93:99:e6:b4:17:cd:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebcb0e7b99415f986f4d08177f88b5b8f7eba7f9
Validity
Not Before: Nov 11 03:01:21 2025 GMT
Not After : Nov 12 03:01:21 2025 GMT
Subject: CN=8c4ea5e8bfc57c221add780266973202ec9d191e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:a6:1e:08:db:02:cf:9b:bb:2d:98:7a:63:
96:c3:b0:78:77:64:ec:a4:89:27:2e:ba:b5:dc:96:
b0:84:bb:cc:b4:a4:eb:45:54:b6:69:11:2b:5a:af:
7d:3c:ea:9d:bc:f5:15:0a:05:2c:c3:92:1b:93:30:
74:61:38:e9:98:c5:89:f0:a9:6f:71:05:27:e7:bf:
4d:63:f7:29:79:3d:2d:f5:6a:0e:44:b6:f6:51:27:
75:5a:7d:6a:17:69:30:a2:bc:ed:ba:23:06:02:c4:
4c:37:bf:a4:40:db:bd:20:c5:53:30:ef:bf:78:7e:
e3:4d:d3:14:54:dd:33:69:ac:bc:bb:f2:62:b0:93:
27:9e:c1:07:c8:94:13:bd:c8:a4:3a:79:df:76:79:
01:a1:34:58:1b:30:1e:6c:84:df:2e:97:35:22:a2:
9e:c7:e1:1f:13:ca:4c:08:56:4d:c8:61:4b:7e:19:
db:35:5f:22:1b:f2:a5:05:7b:3c:1d:c2:85:ea:b8:
00:a3:23:78:bf:d1:cf:13:6c:0d:56:6e:cd:73:c8:
19:d8:01:39:05:79:1b:bc:29:ab:e8:13:c4:99:ea:
2b:a1:62:67:72:06:fd:c3:1d:b6:ab:0d:79:da:e6:
40:33:3f:22:9b:22:0c:7c:8b:85:6d:f9:ba:39:6b:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4E:A5:E8:BF:C5:7C:22:1A:DD:78:02:66:97:32:02:EC:9D:19:1E
X509v3 Authority Key Identifier:
keyid:EB:CB:0E:7B:99:41:5F:98:6F:4D:08:17:7F:88:B5:B8:F7:EB:A7:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68sOe5lBX5hvTQgXf4i1uPfrp_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/1fcadf-8060-4395-926d-dee9ce394991/1/68sOe5lBX5hvTQgXf4i1uPfrp_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:07:84:ae:12:1f:5a:e3:f2:30:b4:9e:22:c5:71:55:36:43:
22:3a:58:44:aa:af:b0:29:57:6c:da:10:5b:fa:73:ba:c7:e6:
54:73:fa:f9:19:87:1b:d2:3e:db:25:7a:44:33:16:e6:b0:5d:
d9:e5:22:5f:90:19:8a:eb:39:f3:a0:e1:e7:c7:93:4e:73:a7:
58:6d:85:02:d5:12:a4:61:49:22:f9:02:e3:68:1b:a9:79:ae:
76:99:43:12:fc:4d:39:d2:a6:44:19:fb:d5:ab:18:bb:50:a4:
41:f9:aa:3c:15:5b:2e:71:23:69:69:23:42:33:77:34:9f:96:
f7:b8:fb:ba:d0:c7:c9:bc:31:04:53:a9:09:77:48:3d:79:12:
22:dc:36:c4:ef:88:ed:d0:b3:ff:fb:6e:ef:a0:b5:e2:a9:51:
80:a7:4b:3f:e0:e3:7f:f7:74:19:86:a3:82:8c:97:60:47:f7:
4d:b3:0a:cb:73:5c:e0:d2:72:82:7b:08:21:84:14:be:b6:ab:
74:cb:27:f6:29:8d:62:ea:c2:17:fb:96:9a:58:8f:ff:39:15:
bc:86:b3:13:e9:51:4d:4a:df:a3:0e:21:54:2e:ac:1d:f0:72:
95:17:6c:e8:40:0f:f4:4d:a2:fd:30:a2:0b:63:da:34:94:84:
1e:dc:e2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:24:51 2025 by rpki-client