Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
File: 68ZkA60MRTevnDKw3vDFKsKqsQQ.mft (raw, json)
Hash identifier: OwsFYGNPGRBKY78ESNpzgQ6t13RBblw/vEWg6wfXbz8=
Subject key identifier: DA:F8:1F:F3:C6:D2:98:65:41:E5:35:2E:7D:E3:9D:B9:5A:4B:60:80
Authority key identifier: EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
Certificate issuer: /CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Certificate serial: 0197B632E499BDBDAC78321DA5712D0D1624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
Manifest number: 15C8
Signing time: Sat 28 Jun 2025 11:01:17 +0000
Manifest this update: Sat 28 Jun 2025 11:01:17 +0000
Manifest next update: Sun 29 Jun 2025 11:01:17 +0000
Files and hashes: 1: 68ZkA60MRTevnDKw3vDFKsKqsQQ.crl (hash: 0xcD99Wci6b5NS2+tOyrSpyQlxICoOY3FMivOao9xS0=)
2: VCA4mhEUpJ_JkE8W6YzbJO06bkk.roa (hash: Ey27v1VSvBG1kOCOG9N8A9sC+9f+2KfQyTxQVT7GEW4=)
3: Yhr8lSQPkVNE2nE3dAVuTYK9ZTE.roa (hash: DYAfTfRN42C4dDlnu2IUI5X6rPDqQbV+Vyawh6lte/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e4:99:bd:bd:ac:78:32:1d:a5:71:2d:0d:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc66403ad0c4537af9c32b0def0c52ac2aab104
Validity
Not Before: Jun 28 11:01:17 2025 GMT
Not After : Jun 29 11:01:17 2025 GMT
Subject: CN=daf81ff3c6d2986541e5352e7de39db95a4b6080
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:00:0e:3d:c3:c7:fd:18:ab:94:60:5c:3a:bd:
a7:5d:a8:95:d4:ea:75:8f:2d:34:a4:f4:08:78:84:
d5:50:22:c8:ff:a6:00:40:4f:cb:78:2d:39:db:ea:
c5:c1:d5:9f:14:57:d1:0d:46:b2:e7:9c:1d:c8:8e:
cb:51:10:db:9f:58:7f:74:1f:ce:b5:48:1e:da:96:
a9:5d:77:b4:54:19:db:b7:f5:ce:53:9a:1d:8c:10:
5e:cd:37:4b:d6:02:51:39:12:21:51:2d:44:8c:2b:
78:49:65:33:12:85:9e:42:0c:3b:19:ca:48:80:03:
f1:4e:dd:ca:20:2c:f6:b6:88:7b:87:85:7c:ed:12:
79:ca:f9:98:94:56:a3:ed:58:48:75:b3:ad:d4:6d:
f2:34:56:61:4c:75:95:a9:72:d6:b3:12:d4:f0:e1:
7d:09:37:96:ca:fd:21:d0:7a:a2:3f:42:54:5d:30:
9a:18:09:cb:31:e2:45:ab:a2:90:8d:74:e2:70:44:
b9:77:9b:8d:b6:98:5b:90:71:ef:f4:04:5c:d2:2e:
5f:d4:dc:b1:78:8c:fb:0d:8a:41:c6:75:3f:17:cd:
1e:aa:59:c1:9e:68:95:5f:d0:88:2c:07:25:2c:54:
ec:5b:86:17:76:2d:8c:e4:ac:6b:95:1b:37:7e:35:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:1F:F3:C6:D2:98:65:41:E5:35:2E:7D:E3:9D:B9:5A:4B:60:80
X509v3 Authority Key Identifier:
keyid:EB:C6:64:03:AD:0C:45:37:AF:9C:32:B0:DE:F0:C5:2A:C2:AA:B1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68ZkA60MRTevnDKw3vDFKsKqsQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/7281da-0eb0-40a8-9983-d1a9da4a130d/1/68ZkA60MRTevnDKw3vDFKsKqsQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:29:0f:bd:bb:20:03:78:dc:23:bb:38:f0:86:96:58:b0:56:
92:70:f6:f1:af:3d:d1:41:2b:1d:bd:16:81:21:17:40:81:8a:
97:78:b0:e0:c4:0d:a5:d4:27:1d:86:27:4a:e6:11:63:c9:c0:
eb:8e:fe:67:3b:31:0c:cd:cf:f1:9c:79:7b:ac:d4:48:f9:e8:
e7:a1:a2:ea:a4:30:68:83:00:1d:42:6a:7a:e0:ba:05:ee:a8:
d1:50:04:69:c5:04:7e:4d:8e:be:70:10:ca:9a:cf:3a:79:fe:
85:d2:46:2f:a0:69:b3:ad:be:a0:c3:fc:0e:b3:ef:ac:bc:b6:
24:63:a8:9e:17:8c:c1:55:97:51:c5:74:2f:01:5f:07:79:66:
58:83:65:93:88:96:cf:a9:1f:78:8a:8c:66:b6:b3:0f:52:cc:
e5:0a:e4:b1:14:8f:0b:6d:cb:93:ad:b6:07:e6:83:47:ce:84:
31:2d:b8:7c:07:35:9e:d8:df:7d:35:9f:e3:21:79:d4:a1:d7:
1b:f5:33:07:cb:6a:eb:b2:f7:a1:46:bf:7f:f1:06:e5:0d:e8:
d2:e6:2e:dd:6a:7a:b3:f2:9d:75:46:b7:52:eb:3b:05:03:f3:
70:3d:76:c0:bd:25:4f:e3:fe:7e:39:dc:7a:ec:7a:6d:b9:0e:
34:cd:1b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:01:34 2025 by rpki-client