Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
File: 68Xg5EXZRzFUru10Rpss-6NmTjU.mft (raw, json)
Hash identifier: 3Ok40xW/K11zJskCtVkfr/hA1/PR6Jo4oaBbAsYxNbg=
Subject key identifier: 85:15:D8:64:95:27:A2:F5:86:BA:87:21:AF:01:BA:0E:CF:DF:4A:5E
Authority key identifier: EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
Certificate issuer: /CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Certificate serial: 019896A4D3150171182679211CC31F2B79E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
Manifest number: 096D
Signing time: Mon 11 Aug 2025 01:00:40 +0000
Manifest this update: Mon 11 Aug 2025 01:00:40 +0000
Manifest next update: Tue 12 Aug 2025 01:00:40 +0000
Files and hashes: 1: 68Xg5EXZRzFUru10Rpss-6NmTjU.crl (hash: LKl7B2ujjcR5+9o/E2181yr/ZPW7rhqtCphtaS92S2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a4:d3:15:01:71:18:26:79:21:1c:c3:1f:2b:79:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc5e0e445d9473154aeed74469b2cfba3664e35
Validity
Not Before: Aug 11 01:00:40 2025 GMT
Not After : Aug 12 01:00:40 2025 GMT
Subject: CN=8515d8649527a2f586ba8721af01ba0ecfdf4a5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:b5:08:99:25:0f:1f:16:d9:34:d5:55:23:ad:
24:e6:c3:3c:8c:93:62:49:f4:37:76:1f:03:59:e6:
90:21:5d:b8:12:c4:6f:25:39:1f:45:76:3e:fa:bc:
ad:45:cf:51:1b:94:04:e2:ed:57:d2:4d:9e:f5:4b:
ce:cc:ff:f4:24:37:1c:b2:a5:f7:1d:fa:d1:d3:b1:
5b:e6:19:59:8f:e2:b7:e4:87:7b:b5:0d:35:fb:fa:
ac:a7:d4:7d:d3:4d:f3:4a:08:93:38:76:44:ae:12:
89:24:a1:bf:f6:d5:25:0e:d8:83:10:7e:09:b6:69:
e3:4d:73:6b:d7:53:95:99:8d:1a:09:4d:e0:b9:b6:
63:d4:8e:b0:f8:20:61:6e:b7:a0:47:23:fc:f5:17:
ee:41:10:16:17:78:bf:38:2f:9f:c2:e8:2e:13:e3:
4e:45:f2:63:de:db:d1:52:f4:a4:48:01:0f:ac:00:
6d:4e:f7:3f:ad:32:c9:3a:b2:20:9f:e2:10:41:c2:
59:db:28:67:64:db:c3:e7:14:6a:4e:87:02:74:63:
b2:ae:76:29:57:bf:a0:29:ee:e7:92:60:d8:23:8e:
4c:f4:75:7a:13:58:e9:0f:e3:8e:1e:c2:95:82:69:
8b:d2:7f:7c:46:57:bc:55:75:c3:6c:f4:96:12:1b:
a4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:15:D8:64:95:27:A2:F5:86:BA:87:21:AF:01:BA:0E:CF:DF:4A:5E
X509v3 Authority Key Identifier:
keyid:EB:C5:E0:E4:45:D9:47:31:54:AE:ED:74:46:9B:2C:FB:A3:66:4E:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68Xg5EXZRzFUru10Rpss-6NmTjU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/32abee-cf7a-44f9-8765-8dec2e163a86/1/68Xg5EXZRzFUru10Rpss-6NmTjU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:5d:79:0a:e9:b1:9c:cd:38:00:32:f0:70:75:a4:4f:97:2b:
65:56:4d:8f:65:05:f5:bc:fa:a6:97:6f:4f:88:9e:1d:f7:4d:
fe:9b:ad:64:f5:8c:db:37:6d:4a:db:c9:74:a1:3b:ba:0c:f2:
b1:e5:c1:33:72:9b:3b:a3:e3:85:9f:65:0e:6b:20:7d:bd:de:
bb:64:79:6f:5c:da:bf:ee:9d:fb:37:64:64:fa:a2:f1:01:06:
05:99:35:f8:77:3b:29:a2:5c:83:05:36:48:d0:5a:90:3e:c1:
0e:59:b7:9a:58:2e:d0:68:36:c3:c1:c7:7f:03:38:4f:c4:78:
3d:d8:c9:24:3e:21:3a:d1:a1:00:a6:4c:64:7b:14:ba:e8:66:
22:98:48:85:44:43:41:51:31:e7:6c:fc:e9:d9:57:e8:08:7d:
c3:73:17:26:a4:d1:79:69:fe:8d:1f:f8:69:49:e2:ea:67:69:
c4:6f:83:d3:8d:09:1d:2e:6e:e5:a5:25:2f:77:42:4a:a8:7e:
2d:58:4c:6a:ee:12:40:fc:15:df:55:35:76:a9:98:b1:38:79:
d5:84:0d:11:f7:8c:4c:4d:ac:e1:14:89:a0:f2:c9:e8:f4:bc:
7d:8c:ed:23:da:24:02:61:e5:a7:49:46:82:20:45:25:14:69:
90:84:74:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:14 2025 by rpki-client