Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: OFEABbiGyvUDCQwehcFfi10wofGX3TFC9pa7uhC5bH8=
Subject key identifier: E5:4E:9F:58:D7:FF:C5:60:41:F9:54:AD:34:EA:CA:2E:78:72:D3:D7
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 0199239F38C3716A79D9D0BD0ED3B67C4D03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 09B6
Signing time: Sun 07 Sep 2025 10:01:01 +0000
Manifest this update: Sun 07 Sep 2025 10:01:01 +0000
Manifest next update: Mon 08 Sep 2025 10:01:01 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: v9cQW1QHUFXB3b9oY2d5USQ+vKBS57N0y8knkKz2ThM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:38:c3:71:6a:79:d9:d0:bd:0e:d3:b6:7c:4d:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Sep 7 10:01:01 2025 GMT
Not After : Sep 8 10:01:01 2025 GMT
Subject: CN=e54e9f58d7ffc56041f954ad34eaca2e7872d3d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:df:71:15:1c:48:27:94:38:d7:33:cb:3c:60:
2e:06:95:60:fc:eb:57:79:2b:82:3a:7a:08:b4:03:
68:79:a4:19:2a:c4:94:b4:34:14:f0:28:fa:1d:3a:
a6:1a:ae:f1:cc:1b:bf:1e:7d:a4:2e:1a:22:33:58:
70:2a:1a:c8:46:3d:73:2a:33:26:4d:13:f0:ae:43:
53:c5:c3:a2:55:37:27:22:2a:3a:cd:e9:d3:c0:7c:
8c:91:83:21:53:e7:32:2a:f4:7b:e5:33:c8:7b:67:
9a:d2:5d:5d:5d:6e:3f:5e:7c:3e:d6:90:fd:47:6f:
42:08:dd:d7:77:03:5d:85:ae:bb:24:9c:cc:05:c0:
a2:60:0f:fe:f8:d8:f1:86:a8:8d:1b:30:4a:1e:12:
e3:48:59:bc:b6:a6:d6:66:49:30:4a:7d:aa:ec:5c:
da:49:32:6f:f0:2e:35:06:74:f4:78:3c:0d:ce:8c:
63:e1:20:b6:48:df:39:13:2e:ea:31:06:df:aa:5a:
ec:6e:c1:b7:be:01:85:cc:9f:23:20:e5:77:7c:48:
b9:dc:1a:da:bb:5a:25:c5:cf:b0:45:43:1f:46:18:
c6:84:d0:0d:27:79:99:f5:5c:1d:92:e2:2a:f8:2f:
50:58:27:28:b1:8f:6c:bb:b6:98:44:e9:0c:a1:0e:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:4E:9F:58:D7:FF:C5:60:41:F9:54:AD:34:EA:CA:2E:78:72:D3:D7
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:4a:fd:64:a1:7a:5e:ee:7b:f4:ee:fe:1c:9d:0d:34:ec:08:
18:ca:1c:05:7d:35:ae:99:1b:85:33:46:e9:22:c1:7c:e6:54:
4a:f1:7d:2c:51:db:6a:f9:44:79:ad:21:d8:4f:2b:47:a5:26:
ef:d8:b8:fa:42:5f:12:b4:c7:1e:e7:6c:bb:d1:f8:7f:44:69:
07:f5:c1:86:3b:89:bc:2d:8b:ba:d1:2d:1b:20:54:ef:0d:02:
ca:53:67:3e:51:fe:8a:18:fb:97:6e:03:7b:4f:d3:02:5f:38:
04:d7:1b:86:6f:cb:9e:f4:b9:64:37:2f:d7:f6:a9:1e:b0:a2:
7f:cb:02:2d:b1:f0:75:c6:f9:5f:3d:23:e7:b6:62:b5:77:91:
04:8a:33:8d:31:22:58:4d:f9:98:40:52:0e:cc:90:fb:86:39:
c2:2f:99:82:a2:3a:68:8f:bf:6c:6a:de:7a:fe:79:c8:7f:b7:
37:08:94:c3:71:db:10:d3:d8:c5:ff:2e:33:b8:66:90:1e:e3:
46:1f:6f:3f:54:1a:73:69:4f:5c:5c:92:72:01:6e:28:9f:e6:
22:28:0c:9c:0a:65:63:8a:a9:ce:ef:b2:43:f9:7b:32:e6:52:
a5:b4:a9:92:22:75:4f:db:af:5c:a9:90:73:7e:e9:84:12:07:
d1:af:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:00 2025 by rpki-client