Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: wuID19bFPxxTlKTWwp9MNEPk4tPpLtHHQdYYBn61wvk=
Subject key identifier: 26:79:CA:6B:7B:3F:AA:86:B7:DA:6B:3C:1E:93:E9:C5:34:E5:91:93
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 019774891F2228AC32D31B9370839E66F974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 15A6
Signing time: Sun 15 Jun 2025 17:00:32 +0000
Manifest this update: Sun 15 Jun 2025 17:00:32 +0000
Manifest next update: Mon 16 Jun 2025 17:00:32 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 70p+5ZSRS9usgcUcI0eKhUhQzdJuJ7OgL5DwtMG8hc4=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:1f:22:28:ac:32:d3:1b:93:70:83:9e:66:f9:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jun 15 17:00:32 2025 GMT
Not After : Jun 16 17:00:32 2025 GMT
Subject: CN=2679ca6b7b3faa86b7da6b3c1e93e9c534e59193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c1:ee:65:88:c0:f3:56:a8:d9:40:7a:a0:34:
8c:04:fa:89:52:01:73:4d:e9:85:03:11:50:2b:6d:
00:c3:14:e5:97:58:d7:ce:79:16:07:44:ce:65:9e:
e5:ad:f6:7d:63:2c:0b:51:c0:05:b8:0c:36:36:ae:
24:d3:c3:79:4b:19:8d:0f:0d:5d:29:f3:a8:92:ed:
9a:1c:29:68:10:dc:30:cd:bc:00:7e:4f:69:91:3b:
90:2a:7c:25:15:78:68:94:c4:41:0d:79:3f:26:9e:
7e:a3:65:25:63:37:fb:9b:26:06:92:fe:83:61:0d:
6c:2f:07:92:74:42:5d:6f:f4:07:ae:81:f2:c7:30:
53:08:cd:06:02:e2:00:f3:8a:cd:9b:ce:40:41:aa:
35:b9:2b:25:07:68:b6:65:96:92:00:00:60:36:4c:
e8:03:6c:a7:d8:11:00:62:3a:75:04:9d:68:80:6f:
9c:52:f3:74:e0:94:8f:14:3b:3f:0f:d0:c8:57:44:
6c:f7:91:7a:5c:42:03:09:0e:6a:e0:81:e6:ac:93:
f8:ad:26:e1:24:7d:bc:f9:34:7b:9b:39:5e:d2:cd:
03:2e:89:d6:e8:51:1f:9e:fb:64:d5:0e:94:76:f1:
df:62:df:5d:9e:7a:63:d9:eb:1a:56:8d:fe:ed:e5:
00:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:79:CA:6B:7B:3F:AA:86:B7:DA:6B:3C:1E:93:E9:C5:34:E5:91:93
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:61:60:0e:ab:d0:f4:b5:a0:94:85:80:29:5f:a2:95:02:8b:
72:69:ca:66:a8:13:72:74:e7:61:35:8f:1d:09:b8:d5:5b:06:
07:0a:aa:51:6a:1a:88:d0:ae:da:12:7b:62:20:cd:14:67:23:
b9:b3:53:09:c1:cd:5e:ef:62:7a:e2:22:b0:6c:02:d5:e1:48:
0c:38:ee:ee:07:94:4e:9b:a7:9c:58:c2:c3:dc:79:cb:25:1b:
22:40:77:82:95:6a:6c:3d:41:9e:1c:f1:96:17:23:06:ac:26:
18:28:92:09:a3:fd:6d:fb:ee:cb:1d:27:dc:41:96:e8:19:0a:
d9:1a:79:ea:34:c5:ca:f5:a1:87:4b:5e:56:64:a4:f9:7d:8b:
be:e6:2b:9a:37:cd:ef:1e:02:b4:94:c2:e0:49:5f:a5:65:b0:
50:9f:32:8c:64:db:ff:cf:f2:70:c6:f9:43:25:43:25:f3:1d:
21:56:f2:2b:cf:91:30:0f:9e:52:34:cb:6a:eb:55:66:46:8b:
79:32:2d:a0:21:b9:37:ff:c3:7f:c6:0d:d5:32:1d:f3:a7:e7:
65:25:d0:ee:29:32:81:28:d5:d1:dc:9d:28:14:7d:46:0e:5b:
6e:a9:5a:5a:61:b8:f1:51:2c:6e:75:81:21:74:37:0b:c6:70:
c3:5c:fb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 00:01:19 2025 by rpki-client