Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: RztmHUFuthIUckrPXwo2yHbi3Rcsd3hdAAsh/4tBaqA=
Subject key identifier: 60:D4:2C:10:AA:80:0B:E6:F3:83:4D:FA:8B:14:9F:2D:45:A5:B5:A5
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019A70DC37C4CB771407A47D76D4A31DE6E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 03:01:11 +0000
Manifest this update: Tue 11 Nov 2025 03:01:11 +0000
Manifest next update: Wed 12 Nov 2025 03:01:11 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: qPj6Gv3ceHm9n1HHhcDfeGZKCn7drX8/ZGz7E0kdiIM=)
2: _d5sQjAqDWf1j4CIit8rsE25AME.roa (hash: RxeX2YNDuil9ac/AHR6OmQjklSZPEl3KjGtvZpjNDfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:37:c4:cb:77:14:07:a4:7d:76:d4:a3:1d:e6:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Nov 11 03:01:11 2025 GMT
Not After : Nov 12 03:01:11 2025 GMT
Subject: CN=60d42c10aa800be6f3834dfa8b149f2d45a5b5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:07:ad:0d:b3:8d:7f:30:4c:63:b7:64:31:b5:
66:03:cd:36:14:31:17:9e:c1:a6:19:2c:cc:bb:5c:
c3:80:9d:c0:55:a3:52:71:52:8f:f8:18:69:9b:96:
07:67:e4:0d:46:55:a5:b3:45:26:dd:1a:6e:b4:b9:
05:76:3e:6d:05:82:3f:39:7c:e7:4e:ce:ab:fc:71:
e2:cd:07:a6:89:9a:1c:21:15:2c:27:fb:ff:d7:8d:
5e:45:9e:f2:7d:e0:04:38:68:0f:3a:a3:57:29:a1:
3a:68:52:fc:f0:17:63:3f:ab:ae:32:b7:ec:4f:60:
b4:86:3f:d7:c3:81:8b:a5:93:36:c2:59:a2:fd:17:
a2:36:dc:1c:7a:76:ef:19:44:e1:43:39:28:03:a7:
26:0c:78:67:3f:c9:cc:85:75:bc:07:b7:68:76:9a:
d2:64:64:d6:5b:c2:fc:c5:83:b0:88:80:29:c1:e8:
b0:12:e1:75:7a:7c:34:84:13:c9:be:f7:fe:fb:46:
a2:01:00:d2:96:fe:4a:80:d8:df:88:7a:2c:66:56:
01:72:c5:ef:a9:cb:e9:2a:0c:cb:b8:1c:93:cb:64:
44:69:86:d4:ad:5d:f4:0b:6a:10:d7:95:53:a9:79:
4b:08:50:c8:a3:3b:4c:60:95:f9:ea:07:f6:84:76:
b5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:D4:2C:10:AA:80:0B:E6:F3:83:4D:FA:8B:14:9F:2D:45:A5:B5:A5
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:f3:45:4d:58:3c:54:9c:f9:37:f8:00:03:f5:6f:10:90:b6:
c1:63:5e:f3:ec:df:38:1a:11:a0:03:9d:62:1b:01:94:8f:0b:
98:4d:bb:7d:46:f8:e5:07:fc:ce:9d:5b:a3:61:93:8d:89:79:
fb:35:02:0b:40:d7:f1:35:db:86:d8:64:f0:ca:a6:52:85:bf:
21:db:bf:50:65:a0:b9:fe:ce:83:5e:91:4a:e4:d3:c8:93:45:
ae:dc:26:4b:23:3b:29:21:e4:72:83:e4:5e:96:c8:8f:a5:56:
89:bc:26:6c:57:9f:36:38:7c:65:91:63:eb:d1:c4:47:8b:91:
11:84:83:0c:cc:60:a2:bf:36:59:05:69:a7:62:16:37:cf:cc:
59:3d:f2:ef:a0:d2:23:89:d1:c7:97:50:2b:71:65:58:29:ed:
da:31:83:0c:93:b7:56:fc:a6:7b:e4:ef:e0:ad:55:34:29:a0:
30:10:9b:1f:ce:6b:7d:39:a4:44:16:bf:1e:a5:ce:97:86:32:
4a:98:f9:70:c1:22:41:46:5b:e5:14:4d:04:14:54:c8:60:44:
a2:3c:3e:59:23:0e:4d:d5:f2:0a:f9:8c:83:5c:68:6f:de:29:
8a:d0:28:5b:1f:7b:e8:2d:fb:3f:c7:5e:55:ca:e3:17:b1:e7:
c4:d5:6d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:43:54 2025 by rpki-client