
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
File: 67yRzMqwFtO5EodhqcTlU5dhIcg.mft (raw, json)
Hash identifier: IoD19m7jlN9jVhkd+O2mt594ZdTiARhu66qaHjeo2dA=
Subject key identifier: 73:02:5E:90:33:C9:F6:EA:89:A1:89:16:0D:87:7E:0C:B1:3D:B3:59
Authority key identifier: EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
Certificate issuer: /CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Certificate serial: 019769CE61F5EE0F06BB8C03E83BD9DCDCD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
Manifest number: 0114
Signing time: Fri 13 Jun 2025 15:00:22 +0000
Manifest this update: Fri 13 Jun 2025 15:00:22 +0000
Manifest next update: Sat 14 Jun 2025 15:00:22 +0000
Files and hashes: 1: 67yRzMqwFtO5EodhqcTlU5dhIcg.crl (hash: QU8skjvViiikhOPDNBMKLuGlJxZmfEAKt/OXpWe5pP8=)
2: W66TeYTw-t7EMoHzkCaUwVfLkDI.roa (hash: Ox2U/eJQb+R2Hy97s4rI93U5aSqmhZSgt5Xa460suhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:61:f5:ee:0f:06:bb:8c:03:e8:3b:d9:dc:dc:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebbc91cccab016d3b9128761a9c4e553976121c8
Validity
Not Before: Jun 13 15:00:22 2025 GMT
Not After : Jun 14 15:00:22 2025 GMT
Subject: CN=73025e9033c9f6ea89a189160d877e0cb13db359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:32:b0:0e:93:c8:a3:02:b4:99:6d:48:6f:a6:
f8:ef:e5:5b:88:42:da:1f:ae:7a:05:fc:13:46:b0:
9a:98:05:ba:dc:96:2a:35:d2:77:71:43:8e:65:9d:
0a:ce:0b:a0:be:04:49:db:ec:4c:eb:65:0b:11:1f:
5c:f3:62:8d:d7:2a:e7:0b:df:76:1f:b9:c7:66:7e:
88:cc:3d:ab:0e:4d:e4:97:af:3a:4c:55:41:03:f6:
76:93:9e:a4:2d:50:3d:da:cc:10:2e:71:85:ff:75:
7c:f3:f4:92:05:bb:cb:b6:09:d3:00:02:f5:3f:32:
28:c9:65:e7:e8:1f:8f:a2:5c:b7:ea:3a:c0:57:20:
66:27:21:58:1d:cb:21:b4:db:53:70:4e:48:a8:61:
4b:24:52:86:52:bc:51:e1:77:cc:72:b0:c3:c5:49:
65:dd:fe:93:6a:40:33:f9:da:50:fc:84:ca:00:93:
dd:35:52:17:11:b1:cd:e7:a7:c5:67:9d:c8:ee:c6:
4b:ac:97:aa:dc:ce:e5:af:7e:c9:2c:8d:2c:02:fb:
23:a0:69:89:78:42:0e:72:81:34:56:5f:6e:5b:3e:
3a:99:81:09:ad:67:bf:3f:a1:d2:58:f2:73:9c:70:
31:9c:a3:91:50:2d:6a:e9:cb:ef:39:b5:a7:43:67:
1f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:5E:90:33:C9:F6:EA:89:A1:89:16:0D:87:7E:0C:B1:3D:B3:59
X509v3 Authority Key Identifier:
keyid:EB:BC:91:CC:CA:B0:16:D3:B9:12:87:61:A9:C4:E5:53:97:61:21:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67yRzMqwFtO5EodhqcTlU5dhIcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/eaddae-3783-4fdb-a301-a001a29c23f0/1/67yRzMqwFtO5EodhqcTlU5dhIcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
da:94:bf:0c:3c:d2:4c:6e:7c:c3:79:08:32:50:5d:f2:47:7c:
5e:d1:96:aa:b3:0d:ef:71:96:bf:a5:2c:09:95:fe:cf:9c:9b:
20:5f:80:ed:6a:d3:14:6c:c4:5e:5b:91:c8:fd:06:9c:b5:13:
be:54:00:90:6a:6d:9b:c9:b3:63:64:6c:c9:82:a7:0a:bf:86:
67:19:3e:6f:ae:59:b2:69:26:6c:f6:a4:af:9b:fa:e3:33:06:
f0:87:f1:57:5b:4c:d1:ae:4e:ad:b5:8a:80:f1:6f:8b:30:2f:
84:d2:d5:82:67:a5:3a:89:31:ea:6d:ac:b6:71:1f:1b:ac:d7:
87:e1:7d:ab:87:7d:ea:d2:1b:4f:1e:93:77:43:54:f2:04:be:
72:12:35:76:0e:ca:6d:2c:ae:aa:9f:11:3f:4b:0a:66:4d:e0:
04:07:ff:dc:c6:7b:27:eb:67:84:c3:7b:2e:d0:90:d4:1e:43:
b8:cf:ca:34:8e:9d:bb:ac:ee:8e:33:f0:da:97:fc:f2:0c:76:
df:ec:22:0d:75:de:52:ee:c7:b5:0f:3b:78:43:83:d1:5d:71:
55:43:35:02:bd:d3:1a:1e:8b:2a:62:d8:04:f8:f3:a2:3b:5d:
db:8d:9e:22:d5:72:f7:36:31:19:c8:17:14:32:41:00:ac:7f:
23:ea:2e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:57 2025 by rpki-client