Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: AmeebBLpApvlLTywpmoDrIErLTp2P+4AXfQiCGp9S84=
Subject key identifier: 17:BE:B0:B6:8A:4D:88:20:1C:26:05:9E:03:F7:0E:5A:B1:1B:0D:55
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 01986882C96C310FA653D0952206177077F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1612
Signing time: Sat 02 Aug 2025 02:00:58 +0000
Manifest this update: Sat 02 Aug 2025 02:00:58 +0000
Manifest next update: Sun 03 Aug 2025 02:00:58 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: GPAjDlynjbTjCP2wsc8iEnAZ2qKcXOclvuYM0zQTHwQ=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:82:c9:6c:31:0f:a6:53:d0:95:22:06:17:70:77:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Aug 2 02:00:58 2025 GMT
Not After : Aug 3 02:00:58 2025 GMT
Subject: CN=17beb0b68a4d88201c26059e03f70e5ab11b0d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:48:ec:60:a0:f9:e5:09:b8:fb:ad:52:eb:
bb:0d:68:ef:79:4a:99:b3:68:5d:9d:7f:ee:09:c1:
b0:2d:63:3e:1a:84:c6:a9:06:22:2d:b8:d5:32:8a:
ff:42:13:00:29:98:37:1c:d1:b5:ac:2e:00:d7:47:
0a:08:c7:64:98:a8:6e:37:ff:cd:85:9f:1c:10:14:
eb:7f:b0:d7:42:e5:a6:cd:8d:81:b9:71:8e:09:51:
08:e7:d9:af:51:19:42:28:4c:95:73:fb:5e:1b:bc:
5d:6b:11:9b:99:12:96:a4:4d:d3:d5:83:f0:e4:f2:
01:dc:32:7a:f5:26:31:86:d4:ca:27:23:d2:f7:9a:
46:47:b7:f5:b4:c9:42:fe:11:52:32:bb:bd:e5:a5:
8d:b9:28:b5:55:f9:ff:b6:be:e5:9a:50:41:01:be:
ea:e3:6c:be:9a:97:94:43:19:bb:c1:61:4f:93:6b:
ca:0c:91:3b:55:fb:7f:f4:43:3c:c7:f3:41:c3:fd:
bd:63:13:ca:7f:00:b8:c0:31:f7:ed:98:0b:a3:34:
9e:65:b8:cd:52:57:39:a7:09:f1:84:6c:4f:7d:c1:
9e:28:48:d7:e3:9d:d2:ce:4b:c6:20:ae:24:51:21:
43:f0:bd:75:8d:06:85:d9:7f:89:63:e2:7d:32:45:
7c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BE:B0:B6:8A:4D:88:20:1C:26:05:9E:03:F7:0E:5A:B1:1B:0D:55
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:d6:00:46:05:7d:33:3c:19:a7:cd:1c:71:24:ee:5b:e7:e8:
f5:8a:fb:02:6a:80:66:7f:b2:66:37:66:d1:61:45:01:3c:5f:
07:5c:e1:e3:71:e5:7c:2e:6d:c2:38:85:f7:c1:37:d1:17:f6:
bb:2c:dd:e3:50:81:e3:87:27:88:b4:36:d1:8d:be:40:ce:79:
3b:74:0c:bc:06:ee:ec:be:f6:49:85:49:8d:b9:a7:1c:1f:4a:
f8:62:b8:5f:90:01:b2:1e:b0:78:59:be:28:49:f5:74:f7:fc:
6b:65:4c:08:dd:6c:ce:b7:69:d8:fd:8a:05:0c:85:7c:e7:ad:
46:60:bb:a4:ea:24:f1:c2:63:14:d0:0b:36:2d:76:5b:13:7b:
61:2a:ca:26:fc:71:c9:ed:a2:07:99:17:9f:9d:4e:ba:3d:13:
74:b6:95:67:dc:12:1c:28:c9:d3:04:fd:10:3b:43:6e:d2:20:
a4:22:3b:a8:cf:d3:c4:85:b2:7d:b8:bf:bb:f6:d6:ef:2e:9a:
ee:69:8a:29:0b:6a:ec:53:6c:5c:9f:e3:f5:8e:c7:51:ac:62:
30:50:03:ef:76:2c:b8:77:e0:b1:75:7e:16:0a:03:ae:6d:bd:
36:3f:66:c4:91:24:9d:88:f3:c9:db:7b:65:2c:f4:59:57:79:
c4:24:a7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 06:45:50 2025 by rpki-client