Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
File: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft (raw, json)
Hash identifier: pZWL0hkTYBZMpmjey49Ce/0agvCg2K0gUAoPFzbTSx8=
Subject key identifier: 6F:13:A4:8F:88:6B:47:B2:67:FB:8C:B2:14:82:91:2D:D2:2B:72:B4
Authority key identifier: EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
Certificate issuer: /CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Certificate serial: 019A7149BCEE882C9FD57F7CE5274EBF7368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 05:00:49 +0000
Manifest this update: Tue 11 Nov 2025 05:00:49 +0000
Manifest next update: Wed 12 Nov 2025 05:00:49 +0000
Files and hashes: 1: 68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl (hash: VsGirZMJAQennreivTW4T6ZGQ3iSD/73xPr4MfNmvrc=)
2: fGQ3YVDh2zkecLRGo_WA_JJKmDU.roa (hash: mv8AdpdjP5/diFcicEaZODtxwOkiTIPwxcyY8ZLf9hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:bc:ee:88:2c:9f:d5:7f:7c:e5:27:4e:bf:73:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc86c8c2d495c9ebe42665a1513de69a9bf6553
Validity
Not Before: Nov 11 05:00:49 2025 GMT
Not After : Nov 12 05:00:49 2025 GMT
Subject: CN=6f13a48f886b47b267fb8cb21482912dd22b72b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e6:aa:b2:fa:1e:b5:a1:0d:aa:58:9c:0b:11:
f7:4b:88:86:70:af:f5:c4:5d:fc:b1:f7:9b:33:02:
a4:c0:fa:b5:a5:4b:6e:30:58:5e:7a:2f:10:2d:57:
f8:1e:ad:89:07:36:62:78:f0:71:fa:bf:39:bc:82:
f7:9a:f4:fa:5c:37:da:ff:e2:2f:48:a8:1f:63:f7:
98:00:90:bf:86:9a:2d:d5:75:85:f7:97:aa:b6:dd:
a5:c6:4a:d8:67:5c:77:da:6f:e5:e6:71:cd:05:6b:
1d:b1:bc:7a:86:87:db:40:14:72:5f:88:ec:90:b2:
54:08:9d:a3:a5:69:c7:68:0e:10:e6:9a:42:e2:13:
04:d7:94:3a:1f:7c:80:69:ea:0f:27:7b:3f:0f:1b:
a8:c5:7e:f2:74:75:fd:c2:2c:4f:68:3f:4b:a5:e0:
2a:28:cd:95:18:9b:3b:aa:72:d9:83:5d:d8:78:fb:
13:62:54:2a:83:59:7c:3f:b9:11:39:f4:fa:5d:9c:
af:72:7d:b7:5c:4e:9f:d5:47:f8:53:06:83:cc:c6:
eb:13:4d:ec:ea:e7:74:fb:92:ae:36:2f:38:74:83:
f7:02:27:65:22:76:3b:2d:f2:83:0f:60:43:37:40:
9f:52:b8:8b:6c:9d:fe:f1:bb:de:49:3f:fc:06:f3:
81:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:13:A4:8F:88:6B:47:B2:67:FB:8C:B2:14:82:91:2D:D2:2B:72:B4
X509v3 Authority Key Identifier:
keyid:EB:C8:6C:8C:2D:49:5C:9E:BE:42:66:5A:15:13:DE:69:A9:BF:65:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68hsjC1JXJ6-QmZaFRPeaam_ZVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0b252d-db4c-4256-ab06-06d14cf0a46b/1/68hsjC1JXJ6-QmZaFRPeaam_ZVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:57:1d:df:20:a0:c9:6f:0a:be:d1:9d:45:6f:1d:27:ab:f5:
c1:10:1a:e4:ad:4b:ab:fe:65:62:cc:02:73:06:cc:a1:7e:61:
da:96:6d:d3:e8:bf:24:c2:32:ce:d1:6e:ab:a3:2b:7b:30:e3:
54:92:0e:53:22:18:40:b3:bd:33:81:e1:59:3f:73:62:1a:75:
0f:38:b3:d4:25:5e:5a:ff:b7:5b:0d:cf:e5:4a:e8:a8:3d:1e:
98:75:88:ed:ae:1e:6f:38:e9:4c:2b:f4:e8:55:77:5f:af:c5:
db:23:56:5e:bc:6e:4d:7a:8a:78:79:c4:52:56:a6:ea:fb:1b:
9d:15:38:c7:e0:5f:ad:6e:cc:09:b3:14:53:04:88:5d:0a:41:
6a:9c:11:ad:b4:17:c8:3a:78:e3:be:14:22:c3:6d:98:bc:86:
51:d6:3c:78:c5:61:dd:71:ac:1d:5b:fb:6d:52:e7:21:45:31:
53:95:5a:6f:a1:2a:57:63:58:23:11:cb:73:c3:70:73:47:17:
ae:fe:9f:2f:6e:06:6d:b0:3b:2d:7d:2f:b9:8d:d2:de:a2:01:
21:e6:38:d9:55:f2:f7:ea:92:53:c4:eb:d0:ed:cc:39:f5:92:
5c:8f:a8:19:b1:61:70:c7:2f:13:2f:a9:0f:a0:54:5c:50:11:
61:c3:c7:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:03:50 2025 by rpki-client