Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: 74O86ITlS7Be5ts4PFx+63mlNjQtWLWag/9P24fHCFw=
Subject key identifier: BD:B8:E8:E5:93:BD:90:C9:02:00:7D:AD:11:94:2C:AF:53:A1:70:AE
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 019A725CC5D8A01BA3D38E9666E4B4A6A0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 012C
Signing time: Tue 11 Nov 2025 10:01:13 +0000
Manifest this update: Tue 11 Nov 2025 10:01:13 +0000
Manifest next update: Wed 12 Nov 2025 10:01:13 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: X8fzMJNKSEkAh9/PzVvylc1Qk11OsF509ECTW7A5wd0=)
2: eGSHlG0EkLHxKJr3m4XWKvi4FDE.roa (hash: KSBVppHXh5GaOp6rIqFzma8M+CxkT9xkf7FurYUushA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:c5:d8:a0:1b:a3:d3:8e:96:66:e4:b4:a6:a0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Nov 11 10:01:13 2025 GMT
Not After : Nov 12 10:01:13 2025 GMT
Subject: CN=bdb8e8e593bd90c902007dad11942caf53a170ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:1a:c2:85:e2:d2:04:d0:17:96:51:f2:f9:
55:c4:f6:aa:c9:99:e9:f8:21:35:95:38:43:fe:64:
39:02:f9:9e:ee:b3:4b:0c:d9:f4:66:3d:c2:dd:a8:
b8:0e:d5:4c:03:2a:58:57:12:c7:5a:a0:10:8d:c2:
b4:8b:49:a8:4d:77:9e:d8:db:69:a3:be:0c:23:ec:
e9:f8:07:2d:d3:16:0c:d1:04:ea:04:ab:a6:16:df:
1c:ea:17:83:7f:ce:7c:90:95:39:2c:9f:6a:ef:34:
85:95:44:bc:73:ca:5c:27:7d:35:28:f2:17:45:02:
ad:24:18:46:9f:4a:92:66:26:f5:00:dc:7a:79:6a:
b3:d4:48:fd:00:f4:be:57:2e:1b:4e:8c:86:11:c4:
7b:f6:30:73:77:88:98:02:b1:db:46:2c:09:5a:ff:
05:65:d0:d8:29:8a:96:e3:bd:8f:30:96:a0:3c:23:
17:08:2f:73:6a:e0:3e:85:08:ae:47:8c:77:61:ee:
97:ae:f5:bd:9a:06:81:de:f2:13:3a:07:59:58:07:
b7:ad:f8:0b:38:13:3e:b3:fe:66:6d:d7:f5:a3:8d:
71:ad:a4:c7:66:83:a9:46:86:d0:16:ad:af:fa:b1:
ee:22:7c:48:bf:64:5c:6a:38:7c:b6:13:95:77:25:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B8:E8:E5:93:BD:90:C9:02:00:7D:AD:11:94:2C:AF:53:A1:70:AE
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:84:2a:ad:68:bc:72:80:d4:67:9c:d2:fc:db:54:3d:b4:93:
7e:2d:19:fe:90:f2:0e:26:e4:2a:af:1d:48:06:2e:83:50:6b:
62:ef:01:04:0c:1e:72:41:c9:ce:c4:e9:a3:e7:6c:29:99:38:
f9:ff:68:f7:46:46:e7:a2:6e:d6:a5:27:e1:7e:e0:9d:cc:8f:
d3:40:7c:1c:fc:45:43:14:1f:4b:19:eb:f6:d7:48:1e:aa:d1:
ea:16:92:ee:f8:df:86:ef:5b:c4:08:41:f3:f0:ab:47:6d:88:
bf:d9:84:c9:4e:f7:14:2a:f1:cc:5c:d7:5f:99:4e:26:47:4e:
54:fe:37:b1:02:ed:5e:2a:7a:13:5c:80:22:36:88:04:54:52:
1f:82:db:5b:6c:69:ce:20:78:af:17:d3:54:18:61:29:f7:0f:
87:dc:48:13:87:0b:0c:da:2f:f5:f1:1d:b7:0f:b7:a3:0c:8b:
2f:ce:7f:d7:c1:52:a8:ba:24:a8:c0:e1:48:d8:21:10:07:52:
13:30:92:a2:13:0a:92:6e:b3:e8:6f:34:06:5c:4a:5e:1b:41:
cb:df:52:1a:35:62:8e:b5:8b:4e:15:81:6d:7c:a5:25:42:ec:
2d:fd:02:60:43:39:ec:8b:ac:a5:df:51:3c:13:ed:a4:a9:55:
49:46:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:51:31 2025 by rpki-client