Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: kJu4VqCAOFUqfkw3tzpO19hzP1/m9Ci006pDZ/6GlMo=
Subject key identifier: 04:82:03:13:9E:42:5B:7C:DB:4A:19:68:EC:3F:B9:53:E6:FA:E8:FC
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019933B7594C62CDD855AE0BEFBE689EFBF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 019E
Signing time: Wed 10 Sep 2025 13:01:17 +0000
Manifest this update: Wed 10 Sep 2025 13:01:17 +0000
Manifest next update: Thu 11 Sep 2025 13:01:17 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: owhplsGFb0g8mpZHOnNBxMcgEiQ4WHPZaXLT38rWgNM=)
2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:b7:59:4c:62:cd:d8:55:ae:0b:ef:be:68:9e:fb:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Sep 10 13:01:17 2025 GMT
Not After : Sep 11 13:01:17 2025 GMT
Subject: CN=048203139e425b7cdb4a1968ec3fb953e6fae8fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:ac:3b:17:fc:09:e3:b7:34:b9:aa:66:da:
59:70:9e:58:94:df:69:2b:71:3e:a1:1d:65:9e:c8:
d9:cc:0a:d9:4e:db:a9:5f:83:be:18:45:79:a1:a4:
ef:a2:06:d4:01:46:4f:0a:9d:03:38:22:66:11:ca:
47:d2:b6:f8:44:d2:1c:25:73:56:f7:b0:ab:df:79:
68:70:1e:ca:e3:a4:09:ab:b0:28:43:ee:13:b6:15:
ce:5a:47:0e:07:51:8a:f4:04:6e:24:db:24:b0:61:
db:55:61:2d:7b:8d:07:02:28:38:17:98:5c:b0:45:
c3:58:aa:45:02:a8:68:93:3c:5e:59:22:d6:c6:5f:
77:62:f5:93:43:39:14:3a:23:8a:17:f7:f7:c0:d0:
a0:c6:49:33:0b:86:90:46:5e:75:66:73:7c:bd:37:
cb:06:3e:3c:9b:d1:ef:02:2c:52:98:d4:fc:61:d3:
77:22:50:94:97:67:dc:c9:d8:6b:5f:0a:32:1c:79:
d4:89:8d:03:01:26:6c:22:65:f3:2d:8c:bd:c6:d0:
a5:e9:10:55:ab:36:14:65:cb:a8:c9:7a:25:a3:72:
77:9c:4b:82:21:01:7b:b0:22:e3:cd:ec:0c:a7:9c:
fb:af:db:bd:25:b2:ec:cf:b4:8d:23:bc:16:77:e0:
17:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:82:03:13:9E:42:5B:7C:DB:4A:19:68:EC:3F:B9:53:E6:FA:E8:FC
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e7:75:90:91:10:82:eb:23:0e:47:68:e0:ce:3b:49:28:fc:
90:79:48:58:f9:a2:36:f1:e6:2c:c6:b5:e7:f8:b1:f7:1d:60:
aa:6b:02:a0:42:22:ff:27:00:2d:2f:d5:45:d9:54:66:f7:b5:
9a:5e:a9:1c:39:1a:d3:72:c9:c9:10:28:57:d2:47:d2:f1:5b:
c4:69:51:ab:b7:bf:4b:9d:89:de:db:7f:68:03:cf:31:e8:47:
10:a0:a3:b1:2c:d0:8f:bd:20:f5:76:e1:89:76:a3:7a:81:8b:
0f:a4:c5:06:31:36:89:e2:50:6c:84:16:e8:a4:0c:44:7d:c5:
97:0d:e1:7a:3a:73:30:77:b1:ac:39:c1:85:d3:38:92:bd:1b:
7a:2d:a7:40:33:c5:2d:1f:f0:f2:09:ac:2a:16:e1:da:77:8c:
67:60:98:3c:e0:5e:8f:63:66:b5:71:1b:3d:7e:7d:ca:95:23:
e5:e8:6d:5d:fb:6d:7a:7b:52:5c:c0:82:ea:46:0b:ff:6d:91:
d9:b0:89:fb:43:f2:8a:d3:f9:a1:92:4a:35:19:50:90:b0:c6:
9f:45:f1:2a:b4:fb:e7:96:20:ab:d4:89:9c:9e:8c:dd:5d:b6:
a7:24:9c:24:8f:0b:f3:6e:5c:c5:5e:a9:13:50:29:7c:5a:9f:
19:12:2c:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 19:01:18 2025 by rpki-client