Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: uYfJuFJzwPKyrc+yUHnHYBDg309e01isADj7h2bcMew=
Subject key identifier: 7D:D2:98:71:A3:DE:0B:B6:BF:7E:1A:0D:10:1B:C1:B6:15:03:6D:B8
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 019A4D3CD655919AB8A9792C75C62A0455A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 05:00:23 +0000
Manifest this update: Tue 04 Nov 2025 05:00:23 +0000
Manifest next update: Wed 05 Nov 2025 05:00:23 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: soknaNOcbOnVQ1J1cTx9h8CPmI0HRy73yacw2hZz7iE=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:3c:d6:55:91:9a:b8:a9:79:2c:75:c6:2a:04:55:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Nov 4 05:00:23 2025 GMT
Not After : Nov 5 05:00:23 2025 GMT
Subject: CN=7dd29871a3de0bb6bf7e1a0d101bc1b615036db8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:42:4e:b3:96:ac:8c:77:88:0d:01:7f:27:36:
0b:b6:0b:d8:3f:ac:46:95:03:70:de:4d:0c:c9:ad:
64:6d:30:99:ac:41:ae:1d:24:e3:0e:80:88:32:83:
98:ca:cb:e6:8d:e6:e0:86:86:e3:22:0a:15:a2:06:
1a:a3:29:16:57:d9:09:64:f7:22:e2:81:dc:9c:1b:
5a:52:62:13:0a:ac:38:de:ba:dc:e3:02:0d:d3:fa:
f5:9e:4f:80:1c:42:ac:be:96:62:8e:bc:c6:30:a3:
d4:ae:6a:26:e9:45:52:7e:88:59:7f:53:e8:a2:6b:
f0:fc:89:05:13:d5:ba:bb:1e:4b:96:a7:4a:b8:18:
f9:ab:89:39:7d:d8:4d:52:2e:7d:72:88:71:65:70:
7a:dc:3c:1e:8d:eb:d7:7d:ef:3a:c7:12:bc:0b:5e:
f4:fa:8e:6e:c3:27:c6:fa:fa:ec:e1:5d:2e:11:7d:
a2:29:f0:5a:b4:63:1c:a8:05:8f:64:f4:02:8e:bf:
7e:c7:05:69:1f:3b:b2:03:7b:ce:15:f8:e8:6d:d6:
93:d5:0b:22:ba:51:1d:62:fc:e8:bd:6a:91:02:73:
fd:5a:83:ad:08:37:49:a6:90:cd:02:38:9b:50:6f:
58:4b:58:c0:e9:30:73:ea:e6:11:87:d6:4c:e2:f6:
44:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:98:71:A3:DE:0B:B6:BF:7E:1A:0D:10:1B:C1:B6:15:03:6D:B8
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5d:af:4d:5b:24:43:a7:38:cf:8e:a8:d7:b3:7b:7c:b5:a1:
be:cb:ea:b1:11:d5:cc:60:64:78:c1:d0:a1:b3:11:ff:15:e4:
d2:4c:cc:f7:25:02:90:41:52:71:9e:96:65:b9:98:4b:f6:5f:
1e:c6:ca:71:49:9a:35:04:e6:39:03:19:b5:8a:90:21:73:a8:
c1:ba:39:ee:84:af:0e:53:64:39:49:77:01:54:93:7e:a2:1b:
1c:28:bc:70:86:3a:ae:03:76:96:1f:81:40:e9:12:84:06:40:
d0:46:7e:96:c2:03:da:bf:ff:cf:e0:e0:80:bc:6d:ca:6f:60:
3b:99:01:e2:ca:35:76:89:14:7f:83:17:a9:44:b4:72:87:54:
52:76:0e:4d:f7:f1:3d:11:cb:ba:76:2c:be:58:68:0e:56:0f:
51:c3:e1:49:bd:91:80:52:ec:02:57:95:4b:bb:2e:f6:55:8e:
6c:3c:66:c1:11:c4:4b:18:3f:7f:b2:74:4c:a3:b9:e5:b5:4a:
c0:be:4a:30:db:32:6b:d6:61:4a:8e:d2:24:5f:16:58:f6:57:
6b:ce:56:0f:ec:4e:88:7e:80:e7:c5:1a:cd:7a:ed:cf:5c:42:
72:8b:94:1e:c3:0d:35:38:9c:92:bd:d6:83:27:e7:28:f6:c9:
82:46:83:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:41:33 2025 by rpki-client