Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: xmzgXD2JN4zrw2B4GOse66pMCJXTl9j5K7kFqZHjkgk=
Subject key identifier: 5A:40:49:BA:6D:A8:26:B5:85:D3:94:AB:4E:58:3D:A8:5C:F1:C4:AC
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019873AAC96E2E221AAFA35FE92A06D3F1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 162B
Signing time: Mon 04 Aug 2025 06:00:29 +0000
Manifest this update: Mon 04 Aug 2025 06:00:29 +0000
Manifest next update: Tue 05 Aug 2025 06:00:29 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: RoKNXsilexaapOqyyKtGvnodfo2hB4yrEudqtiHQ/wA=)
2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:aa:c9:6e:2e:22:1a:af:a3:5f:e9:2a:06:d3:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Aug 4 06:00:29 2025 GMT
Not After : Aug 5 06:00:29 2025 GMT
Subject: CN=5a4049ba6da826b585d394ab4e583da85cf1c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a3:39:11:32:27:59:75:97:4d:0e:6e:71:d5:
d3:0c:49:d9:d9:c3:2e:41:37:36:53:36:4e:76:31:
88:e7:94:b7:ce:95:57:8a:4b:36:44:c7:ca:43:3a:
31:52:5b:d4:79:5e:e5:f3:87:e8:94:5f:54:94:bc:
a8:d1:9c:b4:57:a3:30:09:07:42:10:ea:d6:75:32:
60:a6:28:79:b0:f7:27:d8:34:f5:8c:5f:e6:28:13:
bf:f0:2a:57:38:ca:a5:30:12:fe:ca:3b:36:2f:62:
f6:93:79:e1:43:20:da:20:24:40:40:37:3a:81:f3:
d7:00:4d:a2:ed:66:d8:16:1f:cf:99:bf:29:8f:79:
66:e3:54:bb:c9:90:e4:40:e0:d8:74:ae:1d:b0:c1:
3b:0d:97:15:8e:00:31:11:fb:6f:6f:cb:b9:21:fa:
b4:45:9f:67:66:66:a7:9a:6b:d7:76:07:cc:de:72:
61:f6:5b:02:00:da:b4:0d:0d:f3:bb:e2:6e:e8:1f:
07:24:13:50:1f:45:c0:d8:3e:14:24:cb:f0:46:f4:
21:a3:3b:b0:70:59:69:88:0d:56:26:4e:2f:72:e7:
50:1e:89:20:0d:a5:5e:81:92:a7:f9:e5:d4:7f:b0:
2f:39:ef:29:3a:22:61:57:93:6c:53:c4:5d:1e:14:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:40:49:BA:6D:A8:26:B5:85:D3:94:AB:4E:58:3D:A8:5C:F1:C4:AC
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:59:29:73:35:e2:74:55:1f:21:18:f2:ab:72:59:78:29:72:
cc:2d:d8:1b:93:28:08:5d:af:09:95:07:d3:76:c7:10:23:9c:
c3:bd:c2:5f:74:df:3b:b8:9f:65:88:ba:8c:2b:b0:46:f6:7f:
3d:e4:1b:22:5a:8d:19:33:d5:bb:30:a5:3a:8b:37:05:73:55:
d0:78:e2:05:27:a5:63:1a:b0:40:a1:83:a3:a0:7e:d3:76:be:
19:1c:20:df:33:b1:08:90:c9:95:f0:38:29:9d:7c:df:05:21:
27:a2:e4:7b:d2:be:56:66:b2:4b:64:7e:7d:f3:27:65:ea:b7:
99:a2:35:e7:35:6f:fb:c8:00:51:a1:4b:96:03:f3:a5:46:16:
07:1b:dd:62:ef:da:6e:80:e8:7d:a5:09:d9:d4:b2:df:bc:58:
68:bb:31:33:56:cc:57:e3:a5:6e:b0:8c:0b:cb:3c:56:d4:e9:
2e:9d:1c:1a:62:72:1b:97:71:0e:69:5a:ab:cd:cf:34:d4:7a:
97:55:2f:8c:d2:47:e9:e7:f2:48:61:b9:d7:8f:8c:31:c6:2a:
ff:e6:7a:fa:dc:e4:f3:fa:94:fd:10:73:63:00:7e:25:85:6c:
ff:9e:88:f4:6b:bd:e4:0f:b9:8b:40:7a:ed:d5:04:00:64:41:
1c:65:03:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:59 2025 by rpki-client