Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
File: 67AW9G3i21zDEWWZ7occdsLINMY.mft (raw, json)
Hash identifier: r3sKwZk/QkuApYobCBOCj0cnZrbnb1hYyL1XuWg7gKc=
Subject key identifier: 69:22:BC:29:A9:EE:F2:2B:5C:04:9A:AD:1C:55:0E:75:51:3C:3D:B3
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 019A4E18D31B65B9341C919BA222278BB6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 09:00:40 +0000
Manifest this update: Tue 04 Nov 2025 09:00:40 +0000
Manifest next update: Wed 05 Nov 2025 09:00:40 +0000
Files and hashes: 1: 67AW9G3i21zDEWWZ7occdsLINMY.crl (hash: +dd+kiBcSTzMS3GMQ2+iFsuaeEp34AesjPHcdOmv21I=)
2: _d5sQjAqDWf1j4CIit8rsE25AME.roa (hash: RxeX2YNDuil9ac/AHR6OmQjklSZPEl3KjGtvZpjNDfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:d3:1b:65:b9:34:1c:91:9b:a2:22:27:8b:b6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Nov 4 09:00:40 2025 GMT
Not After : Nov 5 09:00:40 2025 GMT
Subject: CN=6922bc29a9eef22b5c049aad1c550e75513c3db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:27:d5:12:14:3c:a8:b0:d0:a3:c3:3b:32:
bb:53:e3:30:54:10:cf:56:68:aa:3c:c0:b6:a7:14:
ed:b5:21:ab:73:19:6a:fd:d2:af:df:3b:43:e4:cf:
f1:4f:99:0b:97:a3:6a:b1:2d:9d:69:4e:06:e4:2d:
83:5f:d0:3d:9b:3a:0c:2f:8d:c9:7a:90:30:29:3d:
c2:b4:eb:99:7e:15:95:04:c4:ae:6f:f0:21:de:f7:
12:3b:00:2b:3b:d8:f1:a7:79:f3:23:e8:77:a5:6d:
48:0b:ec:30:c6:e1:9c:4b:d5:a4:bb:6d:d4:45:d3:
42:db:95:ed:fa:db:b8:aa:e7:2e:79:f4:67:fb:20:
ee:af:c9:b1:e7:d1:16:44:27:dd:33:51:01:b2:cf:
ec:d6:d1:4f:a1:b3:65:4d:67:4b:3c:4b:62:76:87:
62:bc:7c:55:fe:82:92:6c:aa:74:14:09:8c:ce:af:
3a:dd:7a:09:d3:e0:61:70:63:58:44:ad:cd:4c:ae:
43:de:36:46:01:d1:ef:6b:da:79:69:03:39:88:f3:
fd:93:dc:8b:f3:03:8e:49:83:a5:36:dd:43:d0:c2:
40:f4:a4:d8:4a:4f:30:ae:c7:cc:3f:5b:7e:44:85:
b2:91:ee:97:e5:6e:a6:f1:b9:03:00:df:18:ec:9f:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:22:BC:29:A9:EE:F2:2B:5C:04:9A:AD:1C:55:0E:75:51:3C:3D:B3
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:6b:58:7d:56:b4:91:83:7a:93:7e:7b:a8:26:d5:8a:c4:f2:
9d:5c:62:5b:7c:68:87:4f:7e:40:7c:98:9f:0a:d0:2e:5e:9a:
74:da:1b:28:44:bf:d4:ce:0f:7b:fd:b2:71:aa:34:c0:bf:4c:
5c:f0:89:d7:76:a7:8d:eb:94:43:80:57:96:0d:2a:63:91:e5:
22:cc:f9:cf:7d:0f:a6:dd:20:1e:8f:27:d4:3d:04:fb:23:13:
9d:00:55:d2:1a:53:27:10:7d:4b:7f:3d:44:4a:c6:4c:da:95:
c5:00:9e:71:3b:65:8e:e7:88:82:0d:1f:82:53:15:11:bc:22:
78:38:c6:a2:94:11:0e:21:6c:1d:f6:f7:ee:bc:ec:c4:98:37:
8f:43:0e:08:0e:d8:9e:2e:2b:9b:2f:2f:ad:c9:61:21:bc:f2:
5e:6b:20:dc:f8:c2:40:47:f2:6a:a9:20:05:c1:d4:be:68:f8:
61:da:0b:b4:71:fe:ae:fb:2b:ab:14:5e:1d:3f:a1:91:60:11:
ca:c4:46:c2:58:85:29:64:8f:cd:02:0f:10:9a:90:2a:4a:a9:
54:4d:0f:29:17:3a:fc:3e:2d:53:02:9f:85:90:78:e2:05:62:
9a:bf:29:b3:3a:fe:f4:be:92:82:88:8c:88:db:1d:71:f5:38:
61:08:ad:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:48:11 2025 by rpki-client