Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: jL+0c0E/yFa8EAF+Bm6pET/8syWLRKYltqyci5BZHrA=
Subject key identifier: F7:50:80:2C:0E:6B:33:75:02:B7:7D:F9:CD:62:2D:A4:8E:ED:C9:33
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019874F50B946D73C1B74C60816EAB291C70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 12:01:12 +0000
Manifest this update: Mon 04 Aug 2025 12:01:12 +0000
Manifest next update: Tue 05 Aug 2025 12:01:12 +0000
Files and hashes: 1: 0SO2bdDSFS2jl_PJgU_l_j97XeY.roa (hash: b5x4PF/4pc6ecIpAqqWDUvsSnbLqRaDPB8YvR8rbRKg=)
2: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: Cy8AywvSzUswcYf9tugPEjHczL1rK1tjSewjysIMvKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:0b:94:6d:73:c1:b7:4c:60:81:6e:ab:29:1c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Aug 4 12:01:12 2025 GMT
Not After : Aug 5 12:01:12 2025 GMT
Subject: CN=f750802c0e6b337502b77df9cd622da48eedc933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:38:37:90:44:43:0a:62:47:c8:f1:94:de:90:
1e:51:b6:68:65:72:16:5c:ef:fa:1f:cc:99:1a:6d:
09:4d:cf:e1:f5:84:bf:b6:ae:65:24:be:81:a2:50:
d5:3c:84:bf:8e:30:13:f3:4b:45:86:c0:a1:a7:3f:
b7:c6:aa:63:36:98:59:6f:e3:a9:63:3b:78:d4:59:
88:d7:ed:69:d6:bf:4f:aa:6c:4c:53:f2:72:16:7a:
b5:44:e0:d7:15:0d:7b:72:58:fc:63:04:01:26:83:
81:74:1d:23:a0:7e:76:ea:08:3a:fa:08:9f:f5:0a:
39:53:89:88:61:68:85:49:f0:aa:3b:9f:36:0d:00:
1d:a0:93:a4:3a:14:59:af:38:68:83:d6:53:37:ea:
fc:7b:bb:8f:c4:e4:d5:35:84:de:ec:53:cc:fb:23:
61:17:d3:36:93:4e:c9:fd:59:2d:a2:d9:7b:a2:34:
8d:8e:22:18:14:e0:dc:b5:4e:e0:4e:cd:84:dd:31:
c8:e8:0c:ac:b2:ab:17:7a:66:13:d4:44:94:0b:32:
84:66:32:8f:69:d5:c5:85:55:f8:fe:fc:79:67:fe:
ba:49:44:13:e2:15:27:63:17:62:4a:ce:c6:6d:76:
53:8e:9e:6e:c1:75:7d:5c:e6:ca:b3:e7:60:ab:d7:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:50:80:2C:0E:6B:33:75:02:B7:7D:F9:CD:62:2D:A4:8E:ED:C9:33
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e7:48:b3:eb:9a:6c:2e:74:ac:70:8f:70:ec:03:a1:68:26:e9:
de:e0:06:94:d2:1b:e5:25:d5:43:e3:5e:92:8e:cf:bd:0d:2e:
00:84:d2:89:75:42:94:c2:d4:00:14:e7:3b:cc:60:c0:d1:68:
4a:64:7c:d0:24:19:e9:e8:3e:a0:89:92:14:15:cb:4a:31:10:
0a:73:96:f0:82:d0:80:24:27:02:d7:2e:c5:d0:2a:75:8f:10:
a6:4b:c1:c6:cf:ac:3e:04:c5:90:2d:ba:df:7f:7d:a7:69:da:
c4:41:99:41:42:3a:09:29:68:a9:cc:52:9f:17:dc:53:b2:6e:
f2:6b:e0:21:6f:98:6d:e2:e5:bb:2e:e1:b7:33:fb:0f:cc:8a:
85:b0:8f:a1:5c:1c:3a:b6:2e:ff:d0:1b:fa:f1:70:e1:87:47:
c4:ce:56:66:52:89:da:b3:0e:77:09:90:8f:15:c0:ca:d8:bb:
d8:73:1b:8d:b2:54:52:ee:14:38:74:3b:c5:05:ea:c1:d0:28:
7a:63:96:29:8e:e6:2b:f3:a4:c9:84:76:71:d0:7a:ac:b5:78:
b0:85:cf:13:d6:52:f7:43:96:71:f8:9b:7d:a1:b9:e2:9d:25:
97:9e:85:6c:c0:cb:24:fb:02:17:cc:4a:bc:17:c9:0c:a9:e0:
80:ba:eb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:40:38 2025 by rpki-client