
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: ACPOxv6/FZ81EWUws6v0F2l72xFRJcTu4mBP3Y7rlk0=
Subject key identifier: FE:D4:5B:26:C5:DC:2D:DE:7F:7C:CD:B3:FC:6F:87:A3:2F:BD:E5:5A
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0199FBB3754E3FBD360C659ED0CC65C2AC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 16F6
Signing time: Sun 19 Oct 2025 09:01:06 +0000
Manifest this update: Sun 19 Oct 2025 09:01:06 +0000
Manifest next update: Mon 20 Oct 2025 09:01:06 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: +OYGsV9DWAoXLGC0jyDgMwfkFOnod5mOxTwVxkddLxc=)
2: KZug6FKGZZRd25xEmWgbfg0_wdw.roa (hash: ctBKd+yf9Znf9nJH1GwdvGB/+F5ODDOhs9z06Ml25Ow=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:75:4e:3f:bd:36:0c:65:9e:d0:cc:65:c2:ac:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Oct 19 09:01:06 2025 GMT
Not After : Oct 20 09:01:06 2025 GMT
Subject: CN=fed45b26c5dc2dde7f7ccdb3fc6f87a32fbde55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:0d:37:db:3e:67:d2:c0:21:32:a1:04:9a:
94:31:35:69:c3:af:1c:ef:71:83:e6:7a:d8:fd:8f:
cc:db:7b:6f:8c:23:5c:4e:71:4e:9d:2e:86:ab:e6:
3e:52:d1:b2:2d:4b:8b:31:54:27:83:7e:61:d4:58:
93:76:28:9c:fc:6a:66:e9:17:fc:97:04:2a:a7:da:
26:c9:90:b6:2c:ca:c9:f3:2b:cc:05:ec:6a:c4:95:
7f:12:ce:11:77:f3:4c:98:32:39:32:aa:74:4a:7a:
75:46:01:5f:b9:96:29:d0:29:63:10:8c:1d:1d:12:
e2:22:ee:04:cc:80:d2:1a:78:4c:c3:12:e4:94:86:
4f:fe:20:48:fa:24:bf:14:ce:3f:9a:43:52:ce:95:
70:56:92:a1:03:97:c5:f4:d4:75:b8:88:d7:f7:d6:
e6:30:00:7a:2e:9f:e4:26:a9:a6:d6:05:8a:c6:e8:
a5:0a:ba:65:d8:e6:f5:f7:1f:a2:2a:b7:cc:aa:3a:
94:cb:70:1a:e5:a5:b7:88:b7:22:54:50:ec:ca:6e:
38:5d:33:e9:1b:94:77:9b:44:33:b4:82:11:73:54:
f9:1c:3a:0d:76:a6:48:fa:08:d2:ac:6f:e7:87:7d:
29:de:93:8f:7f:16:d3:5c:0f:4c:fe:8a:9e:77:c3:
51:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:5B:26:C5:DC:2D:DE:7F:7C:CD:B3:FC:6F:87:A3:2F:BD:E5:5A
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:91:ce:84:81:55:56:ad:d8:d3:27:e4:2c:a6:e8:7b:fe:1e:
f5:d6:07:29:3f:d4:a9:a9:cd:4d:78:f7:e8:4f:31:2e:5e:31:
cd:8c:35:04:24:db:e4:60:72:66:ce:3a:79:43:0c:18:67:91:
fd:a3:4e:79:5d:74:5b:ab:fb:59:ac:10:95:ed:5c:e4:09:76:
9d:37:4e:fd:32:ae:c3:67:3b:bb:45:64:58:8c:c7:c1:32:e3:
e7:43:5a:c0:5f:13:f2:62:82:0c:6a:14:36:f1:48:ff:88:48:
32:3a:65:88:ff:f8:19:6f:51:79:6e:cb:81:93:36:28:8e:e1:
9b:40:71:13:86:d0:fb:1f:4c:c6:87:d5:ee:68:d8:3f:e2:88:
73:91:0f:b9:72:46:33:6c:5b:d8:f6:db:c2:23:b9:f6:f9:d3:
03:a2:fe:60:81:83:ab:10:f7:28:c3:b8:1a:6f:47:83:f2:31:
f4:c9:6c:dd:5b:6b:6e:51:ee:29:af:05:0f:a7:3c:24:5b:94:
b1:86:26:3d:2e:6e:3b:6f:d9:50:3a:27:e6:f7:54:92:3a:a0:
0c:4e:1a:99:39:e0:e4:35:af:93:d7:3d:99:0b:30:35:71:c1:
60:b4:c1:2a:52:99:d0:6b:7f:b6:16:90:c0:63:7e:91:7d:32:
10:e6:4a:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7s3VOP702DGWe0Mxlwqw/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYzY2NDAzYWQwYzQ1MzdhZjljMzJiMGRlZjBjNTJhYzJh
YWIxMDQwHhcNMjUxMDE5MDkwMTA2WhcNMjUxMDIwMDkwMTA2WjAzMTEwLwYDVQQD
EyhmZWQ0NWIyNmM1ZGMyZGRlN2Y3Y2NkYjNmYzZmODdhMzJmYmRlNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbMNN9s+Z9LAITKhBJqUMTVpw68c
73GD5nrY/Y/M23tvjCNcTnFOnS6Gq+Y+UtGyLUuLMVQng35h1FiTdiic/Gpm6Rf8
lwQqp9omyZC2LMrJ8yvMBexqxJV/Es4Rd/NMmDI5Mqp0Snp1RgFfuZYp0CljEIwd
HRLiIu4EzIDSGnhMwxLklIZP/iBI+iS/FM4/mkNSzpVwVpKhA5fF9NR1uIjX99bm
MAB6Lp/kJqmm1gWKxuilCrpl2Ob19x+iKrfMqjqUy3Aa5aW3iLciVFDsym44XTPp
G5R3m0QztIIRc1T5HDoNdqZI+gjSrG/nh30p3pOPfxbTXA9M/oqed8NRkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP7UWybF3C3ef3zNs/xvh6MvveVaMB8GA1UdIwQY
MBaAFOvGZAOtDEU3r5wysN7wxSrCqrEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMt
ZDFhOWRhNGExMzBkLzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MjgxZGEtMGViMC00MGE4LTk5ODMtZDFhOWRhNGExMzBk
LzEvNjhaa0E2ME1SVGV2bkRLdzN2REZLc0txc1FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepHOhIFV
Vq3Y0yfkLKboe/4e9dYHKT/UqanNTXj36E8xLl4xzYw1BCTb5GByZs46eUMMGGeR
/aNOeV10W6v7WawQle1c5Al2nTdO/TKuw2c7u0VkWIzHwTLj50NawF8T8mKCDGoU
NvFI/4hIMjpliP/4GW9ReW7LgZM2KI7hm0BxE4bQ+x9MxofV7mjYP+KIc5EPuXJG
M2xb2PbbwiO59vnTA6L+YIGDqxD3KMO4Gm9Hg/Ix9Mls3VtrblHuKa8FD6c8JFuU
sYYmPS5uO2/ZUDon5vdUkjqgDE4amTng5DWvk9c9mQswNXHBYLTBKlKZ0Gt/thaQ
wGN+kX0yEOZKIQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 13:07:07 2025 by rpki-client