Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: On4kiaMqayGrTHRo3eBvPRnr5YwdJevRW8WO/K4C8Bc=
Subject key identifier: 23:A8:4E:89:99:2F:B8:2B:06:CE:D9:5D:A0:5B:9E:43:12:9A:BC:86
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019A71B7C166FF059B906421873109C96FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 0A63
Signing time: Tue 11 Nov 2025 07:00:59 +0000
Manifest this update: Tue 11 Nov 2025 07:00:59 +0000
Manifest next update: Wed 12 Nov 2025 07:00:59 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: 60PnZch4+mZKoVDDC6TO8Rv9CGx/WZI3I+GtyIg++4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:c1:66:ff:05:9b:90:64:21:87:31:09:c9:6f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Nov 11 07:00:59 2025 GMT
Not After : Nov 12 07:00:59 2025 GMT
Subject: CN=23a84e89992fb82b06ced95da05b9e43129abc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ba:9c:d6:b9:ca:c8:4b:75:65:b6:78:5f:33:
b4:41:e4:84:b2:23:4e:e2:4f:f5:32:9f:b5:20:22:
f0:a1:7a:23:4d:5a:75:0b:30:57:f4:f2:0d:6a:42:
98:f9:54:f8:a4:3e:2e:7c:e7:d3:e9:86:6b:9f:42:
5a:56:3b:39:7b:f9:3d:b9:c2:fb:93:f1:c0:39:41:
dc:16:4d:6b:e6:fc:99:0e:36:39:a6:e5:f6:a0:7d:
13:d7:27:52:21:4f:da:2c:db:4f:22:8f:29:bc:18:
88:5c:36:4a:b9:2f:e7:04:a9:e6:10:b1:b1:b6:2c:
61:5b:fa:d8:60:58:4a:a2:a4:d5:04:74:58:9b:9b:
90:fa:73:df:bc:ab:ef:6d:b0:d9:09:80:c4:03:c9:
70:95:c9:64:5b:6a:c1:79:c6:63:6a:f1:95:ab:4b:
21:94:b6:15:36:8a:1f:b2:35:d2:01:e0:10:bc:69:
ea:cb:db:40:fc:10:33:d9:ad:24:d5:98:ce:52:a2:
5c:37:af:2d:36:e5:50:e2:25:8a:b7:fd:45:c3:02:
28:5f:22:ab:a0:45:58:37:eb:ae:b8:ec:31:72:c1:
d8:8c:9e:1c:3e:d3:37:82:80:02:44:9f:99:c7:8e:
fe:cf:d3:b0:60:82:5c:7d:a5:fd:8d:72:8b:d2:a4:
57:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:A8:4E:89:99:2F:B8:2B:06:CE:D9:5D:A0:5B:9E:43:12:9A:BC:86
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:af:c0:75:c0:ab:c0:af:b2:2c:d8:f2:80:15:4c:7f:8b:dc:
1b:f2:30:9c:f5:05:23:dc:ea:8d:ce:21:c3:7f:f1:ca:b7:81:
0c:03:75:4c:a5:66:79:2a:36:52:7b:89:c6:f7:1a:6d:a9:e1:
97:6f:22:77:a4:fc:b2:fc:5a:52:63:bd:31:fb:bb:79:c0:a3:
62:3e:da:b7:19:97:cf:cc:80:a1:ad:fd:15:6e:a5:f0:a1:1e:
2e:5d:a8:bd:88:59:77:fb:ee:e5:84:86:57:d2:01:a8:58:0b:
aa:0a:ac:9a:3b:19:17:d3:11:86:00:28:3e:eb:18:07:e8:45:
18:b8:72:33:dd:21:96:d2:ca:3c:f1:63:99:19:dd:60:19:a7:
2e:79:e3:d4:68:85:85:bd:d0:26:b3:90:c1:b1:a5:c7:d7:d3:
08:74:83:dc:58:81:73:65:07:e1:21:8f:f8:cb:fc:9f:4c:c1:
a1:05:a2:92:9c:d1:71:d4:e9:78:0d:e6:2d:65:30:58:d9:8f:
df:82:5b:e9:de:f3:0b:0e:70:d4:09:46:21:50:ef:45:5f:53:
14:a6:f9:20:c4:e3:9d:ea:3b:f1:51:a1:fb:6c:1d:3c:e3:ad:
cc:2b:62:f3:e5:1f:9e:94:be:c4:ec:d9:34:c4:50:03:a3:e6:
89:40:7f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:25 2025 by rpki-client