Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: DeLAnuuo4lsoon+u1rhjgTWZtvuy5rXN1rVYXngNytU=
Subject key identifier: C1:19:CD:F0:F2:C8:0D:99:3C:7C:60:E6:76:7F:F1:7E:18:B9:9D:23
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 019A251C75C3FB544F1055E4B361AA715540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 021B
Signing time: Mon 27 Oct 2025 10:00:13 +0000
Manifest this update: Mon 27 Oct 2025 10:00:13 +0000
Manifest next update: Tue 28 Oct 2025 10:00:13 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: +G60eX8eI3ujMYjbKmSq8c+iDDjwj7MCQMfYqr/89sM=)
2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:75:c3:fb:54:4f:10:55:e4:b3:61:aa:71:55:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Oct 27 10:00:13 2025 GMT
Not After : Oct 28 10:00:13 2025 GMT
Subject: CN=c119cdf0f2c80d993c7c60e6767ff17e18b99d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:05:c4:c6:15:90:08:4f:38:f6:f9:2d:9b:7c:
82:2e:06:2f:0d:ab:21:1b:72:78:66:dc:b1:a0:fa:
13:98:8d:37:5b:22:66:c6:86:c4:7a:f7:29:01:90:
8f:d1:5a:42:5a:91:90:0c:5b:88:d3:2e:ef:6a:9e:
3a:cd:a1:86:71:68:19:ed:7c:6b:0a:43:82:18:ab:
54:72:a4:4c:d9:d3:31:8d:83:ce:fa:95:68:42:59:
cd:99:51:dc:9a:44:ca:59:62:51:a6:28:31:da:54:
65:8c:a8:d0:b0:d8:2a:a4:fb:86:33:36:d8:3c:f4:
cb:e5:db:45:d3:6a:e7:ff:5a:30:19:73:01:d2:05:
0f:66:c4:b0:e0:ea:b1:92:5d:08:a4:9b:02:8d:3f:
6f:1e:cc:35:06:30:48:eb:79:d7:1c:d3:3c:4a:e6:
00:9a:70:6e:27:2c:49:e7:50:70:5c:8a:6a:b3:3f:
55:0a:5f:09:0c:c5:c9:db:f0:d0:88:af:b4:08:55:
12:a4:ed:96:d7:aa:66:e2:54:2d:1f:0e:e1:28:69:
7c:e5:d6:3b:4e:08:eb:fb:c2:af:0f:4c:35:f2:16:
e4:73:4e:59:3e:43:9a:cd:29:42:21:d1:3a:87:35:
08:3f:d5:91:df:98:0e:74:82:e2:12:c3:87:f3:b3:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:19:CD:F0:F2:C8:0D:99:3C:7C:60:E6:76:7F:F1:7E:18:B9:9D:23
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:82:c9:9e:7e:76:50:c4:6a:2f:0a:4c:0d:f6:25:bd:26:22:
5c:3a:bf:8b:75:ea:a7:d1:fb:84:e6:59:1d:c7:07:95:04:ba:
a3:a2:e6:4d:38:45:35:50:35:b7:40:8d:74:88:1e:38:bd:29:
c4:35:e4:fb:c7:16:8d:27:59:ec:93:af:65:b7:04:31:ab:48:
48:4c:e6:79:21:66:ef:c4:c7:6f:f3:d1:cd:08:1a:55:76:d1:
da:a8:e9:8c:5a:c8:68:3d:e8:f1:8b:6a:f4:38:ed:ca:5d:df:
c0:ee:1f:58:dc:0b:3c:ce:4f:61:96:b0:4e:e4:1a:a0:e7:96:
a2:77:32:d2:dc:49:00:b5:93:63:68:42:51:17:c8:3b:4f:73:
b7:9a:eb:e5:61:16:ad:25:51:8c:f0:59:32:77:0e:66:16:ee:
4d:e2:cc:5a:d6:d8:b8:7f:c1:3a:39:49:6c:e1:5e:43:db:b0:
60:11:00:7c:c5:8f:d2:65:08:1c:1f:c6:e0:00:7b:fe:58:60:
8f:27:96:ff:86:fa:ec:93:10:1d:46:d3:14:cd:2c:31:e9:64:
6c:2c:63:84:a0:8f:08:37:e2:74:f8:96:c0:a2:d3:f0:ea:6a:
36:98:14:e0:74:7d:1a:ce:d8:b6:82:78:86:c5:03:81:47:f8:
f7:99:2c:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZolHHXD+1RPEFXks2GqcVVAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjUyNTZmZTNlMDczMDJhYjczMjdiNzQ3YjhkZjM4MjQ1
YzRlZGYwHhcNMjUxMDI3MTAwMDEzWhcNMjUxMDI4MTAwMDEzWjAzMTEwLwYDVQQD
EyhjMTE5Y2RmMGYyYzgwZDk5M2M3YzYwZTY3NjdmZjE3ZTE4Yjk5ZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAXExhWQCE849vktm3yCLgYvDash
G3J4ZtyxoPoTmI03WyJmxobEevcpAZCP0VpCWpGQDFuI0y7vap46zaGGcWgZ7Xxr
CkOCGKtUcqRM2dMxjYPO+pVoQlnNmVHcmkTKWWJRpigx2lRljKjQsNgqpPuGMzbY
PPTL5dtF02rn/1owGXMB0gUPZsSw4Oqxkl0IpJsCjT9vHsw1BjBI63nXHNM8SuYA
mnBuJyxJ51BwXIpqsz9VCl8JDMXJ2/DQiK+0CFUSpO2W16pm4lQtHw7hKGl85dY7
Tgjr+8KvD0w18hbkc05ZPkOazSlCIdE6hzUIP9WR35gOdILiEsOH87Nk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEZzfDyyA2ZPHxg5nZ/8X4YuZ0jMB8GA1UdIwQY
MBaAFOu1JW/j4HMCq3Mnt0e43zgkXE7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgt
MGQyZTQyMDU2ODZmLzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS80MGIyYTktYjJjNy00MjIzLTg4NDgtMGQyZTQyMDU2ODZm
LzEvNjdVbGItUGdjd0tyY3llM1I3amZPQ1JjVHQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoILJnn52
UMRqLwpMDfYlvSYiXDq/i3Xqp9H7hOZZHccHlQS6o6LmTThFNVA1t0CNdIgeOL0p
xDXk+8cWjSdZ7JOvZbcEMatISEzmeSFm78THb/PRzQgaVXbR2qjpjFrIaD3o8Ytq
9Djtyl3fwO4fWNwLPM5PYZawTuQaoOeWoncy0txJALWTY2hCURfIO09zt5rr5WEW
rSVRjPBZMncOZhbuTeLMWtbYuH/BOjlJbOFeQ9uwYBEAfMWP0mUIHB/G4AB7/lhg
jyeW/4b67JMQHUbTFM0sMelkbCxjhKCPCDfidPiWwKLT8OpqNpgU4HR9Gs7YtoJ4
hsUDgUf495ks8w==
-----END CERTIFICATE-----
Generated at Mon Oct 27 12:31:06 2025 by rpki-client