Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: MvEVzfsC8y4nisTGFA68f6QhhMw3h4awsEk0xWUiWZc=
Subject key identifier: EB:55:06:24:CC:23:9A:13:52:B4:06:81:B7:D1:E2:BE:A6:3C:39:14
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019961A25FA9747B22298F0B6D426F7AD1A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 1693
Signing time: Fri 19 Sep 2025 11:00:55 +0000
Manifest this update: Fri 19 Sep 2025 11:00:55 +0000
Manifest next update: Sat 20 Sep 2025 11:00:55 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: TIdcMgRQKw4oeIWCL7B5VxZ5zqB2VpSW/iRkycPCQ7Q=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:a2:5f:a9:74:7b:22:29:8f:0b:6d:42:6f:7a:d1:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Sep 19 11:00:55 2025 GMT
Not After : Sep 20 11:00:55 2025 GMT
Subject: CN=eb550624cc239a1352b40681b7d1e2bea63c3914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:47:f9:55:3a:60:b5:45:b2:df:d9:ae:91:25:
93:77:f6:21:e0:75:30:8e:ac:7a:c4:9f:e8:81:29:
03:ae:fd:e2:99:9e:be:fb:34:40:b5:3c:40:74:52:
4b:d8:85:11:29:2b:14:4e:a6:f8:db:83:03:7e:e6:
04:e2:73:b5:9c:69:c5:42:2c:51:bc:1f:59:c1:72:
4b:82:77:1a:7d:65:5c:03:8d:3f:df:16:8d:20:8f:
4a:a6:20:ce:5b:cb:e0:60:44:22:b8:9a:ae:be:d3:
d1:77:c6:30:99:cb:5f:95:41:cd:0e:b0:62:7c:63:
c8:16:36:cb:9b:08:b1:f2:d2:fe:47:dd:4d:44:2d:
86:26:26:29:fb:0f:86:2f:f9:17:a5:8f:d4:c3:e8:
4a:c6:d5:2f:24:b7:e8:8f:88:b0:eb:e8:8e:ad:0b:
29:85:df:21:cf:0f:4f:28:f1:3c:8c:d4:b9:3f:91:
0a:55:bc:c7:bd:0a:14:5a:70:f9:48:8e:8d:b0:88:
26:ab:0d:6b:eb:f2:eb:18:f2:d9:c8:40:7a:77:af:
35:70:5b:50:e1:30:fd:ae:ff:86:9a:8d:9a:ae:6b:
cf:ad:48:f6:ec:fa:70:fb:33:fb:c8:46:1c:0b:3e:
3a:5c:8d:23:e4:93:bc:cf:e1:d4:32:9d:0b:d0:a7:
03:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:06:24:CC:23:9A:13:52:B4:06:81:B7:D1:E2:BE:A6:3C:39:14
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:65:2a:6d:f9:77:1a:4a:1f:53:1b:df:98:fd:38:7c:28:21:
e6:e1:d9:31:15:b2:86:b5:da:13:d4:41:96:56:7e:95:8b:5c:
46:46:00:f6:4d:34:c5:78:43:7a:99:80:44:9e:39:a8:37:3a:
7b:02:fe:36:ec:72:08:32:68:cc:a4:39:f5:60:78:5b:52:53:
75:13:f6:98:23:7c:91:dd:26:7a:58:24:63:a3:20:08:cf:fb:
ef:91:a0:98:e2:12:19:41:38:c3:76:a4:f4:b0:64:46:1f:c0:
fc:c3:80:14:86:87:6d:a0:46:dd:77:9e:9b:27:a6:25:22:4d:
e0:d1:ad:a6:33:3a:96:8d:f8:6b:d0:7d:14:22:36:7d:7e:63:
36:52:2d:8f:0b:14:21:02:cb:c3:08:79:41:5a:a5:f5:e1:ae:
6a:06:67:67:85:72:16:44:35:d1:79:b8:36:7d:a5:d5:43:20:
a2:6a:91:b2:23:8c:08:d7:c9:30:6e:3b:1b:10:79:95:ae:9b:
fe:d4:a5:ce:13:42:70:75:87:b6:7c:d3:09:5f:69:52:d3:fa:
16:c6:b0:9e:a3:da:40:9b:60:15:ed:35:78:c3:e7:1a:9d:0f:
24:2c:1a:ae:51:77:cc:27:32:27:09:18:f9:60:ab:4e:a4:cb:
0a:fa:b5:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZlhol+pdHsiKY8LbUJvetGmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjA4YmU4MDAxMjY1MTFjZmY4ZDI1Njk5ZDlhYzEzNmVk
MGVjOGMwHhcNMjUwOTE5MTEwMDU1WhcNMjUwOTIwMTEwMDU1WjAzMTEwLwYDVQQD
EyhlYjU1MDYyNGNjMjM5YTEzNTJiNDA2ODFiN2QxZTJiZWE2M2MzOTE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkf5VTpgtUWy39mukSWTd/Yh4HUw
jqx6xJ/ogSkDrv3imZ6++zRAtTxAdFJL2IURKSsUTqb424MDfuYE4nO1nGnFQixR
vB9ZwXJLgncafWVcA40/3xaNII9KpiDOW8vgYEQiuJquvtPRd8YwmctflUHNDrBi
fGPIFjbLmwix8tL+R91NRC2GJiYp+w+GL/kXpY/Uw+hKxtUvJLfoj4iw6+iOrQsp
hd8hzw9PKPE8jNS5P5EKVbzHvQoUWnD5SI6NsIgmqw1r6/LrGPLZyEB6d681cFtQ
4TD9rv+Gmo2armvPrUj27Ppw+zP7yEYcCz46XI0j5JO8z+HUMp0L0KcDcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtVBiTMI5oTUrQGgbfR4r6mPDkUMB8GA1UdIwQY
MBaAFOuwi+gAEmURz/jSVpnZrBNu0OyMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUt
YmE5ZDUxZmU5ZTJiLzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS82YzE0MmEtMmI1ZS00MTZiLTk0ZGUtYmE5ZDUxZmU5ZTJi
LzEvNjdDTDZBQVNaUkhQLU5KV21kbXNFMjdRN0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbWUqbfl3
GkofUxvfmP04fCgh5uHZMRWyhrXaE9RBllZ+lYtcRkYA9k00xXhDepmARJ45qDc6
ewL+NuxyCDJozKQ59WB4W1JTdRP2mCN8kd0melgkY6MgCM/775GgmOISGUE4w3ak
9LBkRh/A/MOAFIaHbaBG3XeemyemJSJN4NGtpjM6lo34a9B9FCI2fX5jNlItjwsU
IQLLwwh5QVql9eGuagZnZ4VyFkQ10Xm4Nn2l1UMgomqRsiOMCNfJMG47GxB5la6b
/tSlzhNCcHWHtnzTCV9pUtP6FsawnqPaQJtgFe01eMPnGp0PJCwarlF3zCcyJwkY
+WCrTqTLCvq1Og==
-----END CERTIFICATE-----
Generated at Fri Sep 19 14:24:28 2025 by rpki-client