Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: H+1F+hzr1e2YxFwMcIzUErQXT17sD/rtlhKfH/vlNBA=
Subject key identifier: 11:4E:CE:57:6D:B5:D2:32:8C:54:83:53:F6:E3:6D:54:CF:58:A8:47
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 01988E7D8E71C4834A51B5F501F85C4B40BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0D87
Signing time: Sat 09 Aug 2025 11:00:49 +0000
Manifest this update: Sat 09 Aug 2025 11:00:49 +0000
Manifest next update: Sun 10 Aug 2025 11:00:49 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: 1dj4vCZMsMsYiz8aH9KfSfFDqXJw0CaMKbs9wHN8//U=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:7d:8e:71:c4:83:4a:51:b5:f5:01:f8:5c:4b:40:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Aug 9 11:00:49 2025 GMT
Not After : Aug 10 11:00:49 2025 GMT
Subject: CN=114ece576db5d2328c548353f6e36d54cf58a847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b2:eb:c6:75:d1:97:7a:98:34:bb:e9:10:ab:
8e:5e:9c:da:62:b4:23:a8:af:75:22:ba:d6:49:d1:
ab:f3:0c:ca:2c:b2:51:af:fb:5a:f0:72:f9:c6:80:
3e:87:a0:50:fa:68:c0:a5:a1:7e:ab:2f:73:c7:42:
ce:5b:31:d3:ef:29:aa:8c:55:d8:26:b7:6a:ac:96:
b1:3d:37:62:f7:9c:7f:88:1b:11:72:bd:8f:7c:39:
07:51:21:53:2f:27:09:e6:04:e9:bc:da:59:40:33:
de:2d:da:d8:ac:68:3c:2b:e9:d2:d6:02:24:a3:6a:
28:96:36:ae:95:55:48:33:c6:b6:fc:d3:09:af:e3:
7d:a4:db:d0:53:c8:59:ba:fa:7e:dc:c5:5f:16:9c:
67:35:8c:22:29:8a:a6:69:fd:b7:60:23:dd:6a:11:
8a:c4:6b:d7:e1:43:b7:de:94:a8:79:d6:6a:b0:41:
3f:f6:e5:eb:e1:6f:37:8c:87:b5:af:25:52:b7:7d:
0b:57:47:15:43:0e:82:eb:d7:34:b9:a0:35:87:bd:
49:c7:a2:5d:6c:d1:9f:7b:e1:32:f6:cf:ea:3c:37:
af:a4:df:76:a0:7d:eb:d7:f6:ce:d2:49:06:21:83:
fd:00:1a:d0:49:6b:bf:75:72:26:e9:2f:4b:14:e0:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:4E:CE:57:6D:B5:D2:32:8C:54:83:53:F6:E3:6D:54:CF:58:A8:47
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:3a:de:8c:92:4d:92:52:e4:72:aa:76:51:d0:2c:5e:f2:ce:
07:ab:9a:c6:52:8c:55:4a:12:15:d0:7f:02:2a:7c:f8:38:75:
88:9a:db:ba:86:6c:c8:a2:05:e3:ed:c4:28:a7:b6:ae:fe:94:
9d:b8:d8:b9:27:ac:80:0b:a9:38:5b:0b:9f:d7:f7:cc:ae:8e:
58:63:c6:2c:e2:b1:c2:b4:07:fa:ce:d3:a5:8b:8e:f2:72:26:
ea:98:b8:fb:88:a9:47:ba:40:f3:e6:c8:22:87:2b:68:0e:91:
11:7a:e0:6f:e0:b4:b9:4b:a6:55:6b:3c:d6:68:69:be:d7:b3:
54:b2:e1:35:bc:87:69:90:26:45:6c:21:78:01:f5:01:5b:d0:
3f:ec:78:08:59:ac:a1:73:08:b0:d9:3c:bc:26:ab:06:0e:d9:
a2:b6:a4:63:c0:6f:7a:7d:65:4c:40:41:2f:36:50:1f:8e:f5:
c2:93:4b:2c:f8:e9:29:6e:3b:fb:67:8e:d7:d1:ef:7b:e8:8f:
3a:c3:db:6a:1a:60:b8:52:0c:48:d9:ff:9f:6f:54:5d:5d:7d:
e9:7d:dc:93:2f:38:41:0a:3c:89:99:c9:94:24:e5:75:ce:c5:
62:eb:cd:39:9f:2d:f2:15:0d:bb:fb:63:b6:c7:4f:ad:76:0b:
c9:c7:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:18:15 2025 by rpki-client