Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
File: 66zZjeeRkjV63PnfCtvoMZIii9U.mft (raw, json)
Hash identifier: zVZ/KEOscfaVcVcJ5RtcK2pQv9YBTUamromU/48BKa4=
Subject key identifier: 5C:DD:C1:16:4C:D8:73:DC:1E:69:AE:0D:5E:93:9A:C3:84:08:7B:25
Authority key identifier: EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
Certificate issuer: /CN=ebacd98de79192357adcf9df0adbe83192228bd5
Certificate serial: 01987D52B8CB201F0D2F9DDC6E4181ACFDF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
Manifest number: 28
Signing time: Wed 06 Aug 2025 03:00:29 +0000
Manifest this update: Wed 06 Aug 2025 03:00:29 +0000
Manifest next update: Thu 07 Aug 2025 03:00:29 +0000
Files and hashes: 1: 66zZjeeRkjV63PnfCtvoMZIii9U.crl (hash: 9dTVDWsPEo9eF/JNilfy3Sc8HHjAofcLcT12jHgZu1I=)
2: agy8dh7oDcXyau0N2KAm1cVd3JU.roa (hash: ExhTvpiuAXqgbI1NGXcF7MEEy8MEvXvPS618kr0Fdk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:52:b8:cb:20:1f:0d:2f:9d:dc:6e:41:81:ac:fd:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebacd98de79192357adcf9df0adbe83192228bd5
Validity
Not Before: Aug 6 03:00:29 2025 GMT
Not After : Aug 7 03:00:29 2025 GMT
Subject: CN=5cddc1164cd873dc1e69ae0d5e939ac384087b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ed:ec:fb:c4:2a:c2:44:ca:97:fc:52:0c:32:
9b:08:79:e7:0e:67:f8:34:a1:d7:71:5e:97:e6:8b:
87:4a:33:80:5d:96:3e:35:0a:e8:d8:44:f4:20:7f:
80:d6:c6:1b:9b:b2:ac:89:66:28:bf:ac:06:9f:5f:
bb:6d:66:ab:d3:ae:95:28:2a:ed:04:a3:79:4c:95:
c7:cd:de:77:b1:8d:41:90:98:ec:71:66:ee:43:81:
b8:dc:75:1f:7d:00:0c:63:22:62:2e:cf:44:3b:08:
0b:9d:df:5a:90:25:64:a0:23:0b:31:a8:b5:2a:27:
2d:22:e6:0e:e8:d1:b8:b1:1a:15:d0:c2:a8:42:41:
77:d6:56:82:96:65:72:56:a2:ea:45:aa:25:68:e6:
76:28:ef:d3:b3:03:83:70:99:64:21:98:4f:f2:c5:
79:27:44:c2:85:9a:59:6c:f4:f4:17:5b:96:2b:fb:
ee:7b:1d:93:7d:c9:f3:a5:3a:e0:20:eb:96:5b:0c:
33:e1:b7:dc:d5:db:3a:fc:8b:35:c5:d6:82:0f:50:
23:d5:73:ce:03:f1:7f:be:99:c5:9e:b4:6e:6b:a1:
cd:c5:c0:f8:e4:6b:2f:35:77:4c:12:ba:6e:cc:2f:
37:1a:31:16:cf:0b:a9:71:aa:9b:b2:bb:14:da:e3:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DD:C1:16:4C:D8:73:DC:1E:69:AE:0D:5E:93:9A:C3:84:08:7B:25
X509v3 Authority Key Identifier:
keyid:EB:AC:D9:8D:E7:91:92:35:7A:DC:F9:DF:0A:DB:E8:31:92:22:8B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/66zZjeeRkjV63PnfCtvoMZIii9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/8a64ec-85e2-4a69-85d8-699c45ba7e58/1/66zZjeeRkjV63PnfCtvoMZIii9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f2:5b:f2:04:67:4a:82:98:b1:d0:21:0a:db:e4:3c:d2:29:
49:5a:f0:5e:95:2e:e4:e1:8b:25:b6:51:f7:2f:0c:46:c1:35:
0f:22:9c:01:bb:e6:a2:ff:6d:2e:2c:1a:f3:41:93:a5:8f:ca:
b0:5e:b9:0e:d4:b0:b6:c2:71:8c:5e:5a:f4:75:d2:9e:ff:0d:
19:5e:72:ed:60:50:15:5e:d9:07:b2:d1:66:ac:c7:96:3c:42:
4c:b4:20:65:bb:bf:52:77:4f:d4:1b:80:41:5b:e7:a4:35:e8:
15:e0:c4:dc:d3:d8:ac:58:57:e6:1e:89:27:85:77:48:75:39:
5b:fd:39:fc:4b:78:c3:8d:2f:ef:42:c9:7a:8b:41:86:16:c7:
45:62:5b:db:45:0a:20:2a:b8:44:d7:9c:ee:4e:45:c7:46:8c:
7d:89:d2:43:63:86:77:2e:a2:45:70:e3:9f:68:bf:37:0c:e1:
1a:6f:2e:8e:b0:c6:55:f8:a6:42:f3:ec:2c:d3:01:22:de:e9:
c3:bb:87:11:48:fe:ac:15:c5:b9:48:4e:ad:fa:33:d6:6e:43:
1a:25:8b:49:69:d6:27:db:e4:92:46:cc:a8:a7:36:22:8f:21:
23:52:83:83:e4:e2:ea:64:53:e8:39:e7:2c:7b:8b:ee:f8:52:
b9:a1:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:30:58 2025 by rpki-client