Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: UAhDp90tJQD0X9a788jW5/yUg7hhKZF4Myqrd5ZcTwg=
Subject key identifier: 2E:D0:54:88:0C:9B:18:90:EA:6C:F4:7C:A3:37:DF:F2:87:0D:82:8D
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 019A5150BC490AECB204C92B3A992116B0BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 101B
Signing time: Wed 05 Nov 2025 00:00:36 +0000
Manifest this update: Wed 05 Nov 2025 00:00:36 +0000
Manifest next update: Thu 06 Nov 2025 00:00:36 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: 8rtdoTczWjESq24p4jBQ7rJ69XaTm2vkVkp+/eD/DHI=)
2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:50:bc:49:0a:ec:b2:04:c9:2b:3a:99:21:16:b0:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Nov 5 00:00:36 2025 GMT
Not After : Nov 6 00:00:36 2025 GMT
Subject: CN=2ed054880c9b1890ea6cf47ca337dff2870d828d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:df:ff:71:32:fc:a9:87:d5:72:4b:ef:67:bf:
92:de:cc:fc:a8:e4:cc:8e:b9:dc:81:b1:7d:ef:4f:
07:03:d6:25:17:19:a1:73:ab:39:9d:28:e3:80:cf:
d7:a7:7b:e5:1b:e6:1f:ca:e6:75:ad:a7:8d:b8:af:
8b:8a:1f:6e:01:fe:12:0d:dc:16:75:5a:c0:3c:fe:
96:d0:2e:24:bd:24:2f:81:af:c3:75:87:2d:f7:59:
73:0a:c5:ce:ef:73:a6:ba:68:e0:4e:f1:24:a4:5c:
18:f6:b1:46:a5:69:96:83:48:ec:f0:cf:c0:8f:cb:
62:50:3e:66:69:5c:af:cb:08:e9:b2:4a:7a:1e:bd:
4f:d8:47:42:8a:e0:85:de:11:4a:dc:f9:3c:f0:da:
9a:70:ed:29:2f:2a:1b:18:44:c6:ad:57:77:1e:d9:
13:2c:c7:6f:ed:44:bd:a9:bb:ee:12:69:b2:0e:ea:
22:13:64:a7:05:ac:4f:19:6d:0c:bb:f0:ea:7f:20:
e7:59:f1:6b:10:7a:f2:26:51:61:7a:56:b5:d2:fe:
77:04:3a:27:95:b5:95:64:ac:20:8f:8b:b5:7d:c7:
22:fa:3d:c2:85:81:f7:03:94:15:69:63:31:3a:23:
8d:5a:e0:c4:ed:77:f7:59:a8:9f:32:45:ad:77:20:
ad:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D0:54:88:0C:9B:18:90:EA:6C:F4:7C:A3:37:DF:F2:87:0D:82:8D
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:01:30:0b:ca:12:6f:8a:68:74:5f:44:4f:94:3a:d3:f7:0d:
34:ba:03:c5:dc:04:af:c9:f5:22:f7:1e:48:3b:1f:c2:e3:e1:
9b:a0:4e:ae:cd:18:45:b4:ed:14:ef:1b:ea:08:f8:0c:fc:8f:
c3:35:f1:13:39:93:21:c9:30:ae:6d:cd:b0:9c:7f:47:40:4a:
b0:a0:72:02:02:f2:62:97:e4:31:e9:cd:75:4b:73:2f:15:8e:
f8:0c:11:6c:cb:66:2f:17:6a:02:14:f1:5e:51:24:3f:00:76:
20:1b:35:ff:03:4d:cd:cf:d1:65:e7:c5:39:be:ef:74:a4:81:
7d:43:00:5c:35:4a:16:28:c8:14:15:c4:63:46:ac:3d:2e:81:
4e:18:dd:5a:2f:01:88:67:4f:77:f0:9a:c7:84:68:18:d1:cb:
d6:38:29:a0:72:3e:94:6d:55:12:08:8b:6d:52:ce:78:61:a5:
a4:57:72:2e:65:ee:52:e0:96:3f:3a:95:43:f4:d5:12:c4:29:
6c:ba:fa:b9:c6:bb:1c:6c:9e:8a:a8:70:ce:91:a1:44:73:8d:
78:8e:ea:2d:f7:9b:c8:41:71:26:a4:ca:18:d9:9f:0e:6a:2f:
29:7b:87:e2:1a:6c:1c:6c:d9:64:7e:df:9d:e9:a7:bf:6e:9a:
24:eb:90:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRULxJCuyyBMkrOpkhFrC/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzhjNGEwNjZlMmMxNTAzMTNlZTFjMDg3NDcxZjNjOGIw
ZGUwNTQwHhcNMjUxMTA1MDAwMDM2WhcNMjUxMTA2MDAwMDM2WjAzMTEwLwYDVQQD
EygyZWQwNTQ4ODBjOWIxODkwZWE2Y2Y0N2NhMzM3ZGZmMjg3MGQ4MjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsN//cTL8qYfVckvvZ7+S3sz8qOTM
jrncgbF9708HA9YlFxmhc6s5nSjjgM/Xp3vlG+YfyuZ1raeNuK+Lih9uAf4SDdwW
dVrAPP6W0C4kvSQvga/DdYct91lzCsXO73OmumjgTvEkpFwY9rFGpWmWg0js8M/A
j8tiUD5maVyvywjpskp6Hr1P2EdCiuCF3hFK3Pk88NqacO0pLyobGETGrVd3HtkT
LMdv7US9qbvuEmmyDuoiE2SnBaxPGW0Mu/DqfyDnWfFrEHryJlFhela10v53BDon
lbWVZKwgj4u1fcci+j3ChYH3A5QVaWMxOiONWuDE7Xf3WaifMkWtdyCt6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7QVIgMmxiQ6mz0fKM33/KHDYKNMB8GA1UdIwQY
MBaAFOvIxKBm4sFQMT7hwIdHHzyLDeBUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMt
NDdlYWQ1MzcyYmZiLzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC84ZTQ0ZTMtMWI1NC00NzllLWE1NGMtNDdlYWQ1MzcyYmZi
LzEvNjhqRW9HYml3VkF4UHVIQWgwY2ZQSXNONEZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJAEwC8oS
b4podF9ET5Q60/cNNLoDxdwEr8n1IvceSDsfwuPhm6BOrs0YRbTtFO8b6gj4DPyP
wzXxEzmTIckwrm3NsJx/R0BKsKByAgLyYpfkMenNdUtzLxWO+AwRbMtmLxdqAhTx
XlEkPwB2IBs1/wNNzc/RZefFOb7vdKSBfUMAXDVKFijIFBXEY0asPS6BThjdWi8B
iGdPd/Cax4RoGNHL1jgpoHI+lG1VEgiLbVLOeGGlpFdyLmXuUuCWPzqVQ/TVEsQp
bLr6uca7HGyeiqhwzpGhRHONeI7qLfebyEFxJqTKGNmfDmovKXuH4hpsHGzZZH7f
nemnv26aJOuQXQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:47 2025 by rpki-client