Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: NnzYkX8O4BRhShKHT5JScNZpKv0T4bX1U9dZgwIWZBM=
Subject key identifier: 8C:5D:5B:AD:45:1D:53:8B:5A:25:09:09:6F:C5:EE:E0:64:FA:E6:BF
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 0198D4A7CFE9488414068021FC31063C1891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 02:00:24 +0000
Manifest this update: Sat 23 Aug 2025 02:00:24 +0000
Manifest next update: Sun 24 Aug 2025 02:00:24 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: VD4PdyAChBJb4GpsIFceN2dx4s0IwmeH/mOdntnHUtU=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:cf:e9:48:84:14:06:80:21:fc:31:06:3c:18:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Aug 23 02:00:24 2025 GMT
Not After : Aug 24 02:00:24 2025 GMT
Subject: CN=8c5d5bad451d538b5a2509096fc5eee064fae6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:81:d6:b3:f5:f6:cb:22:c4:88:0b:ee:c5:3d:
60:b8:4c:91:46:cd:f4:4f:58:e9:6a:fd:26:13:ed:
38:5a:ce:41:24:07:9f:bd:f6:d2:be:c3:05:89:48:
a4:82:c1:65:e7:c9:b8:7e:f5:e8:f0:80:f0:35:14:
b9:7d:d7:55:67:de:79:7b:e2:51:87:14:0b:fa:34:
27:d6:b3:35:18:ad:3c:e3:dd:df:8d:3a:4a:57:68:
44:de:1d:3e:37:2d:94:70:ab:0b:38:0b:82:2e:31:
59:6d:62:53:06:ec:3d:ae:40:aa:8b:52:93:32:e1:
ae:f4:0b:d3:64:67:03:9e:48:df:36:c4:37:ce:da:
11:4d:47:e3:fd:ec:09:7a:78:1f:eb:4b:67:70:b2:
f5:09:61:96:9e:b2:89:22:fa:58:38:f2:ac:06:54:
d6:ba:97:87:cb:6b:55:32:26:35:62:68:aa:08:31:
ef:06:bd:47:bc:4e:d0:ea:2e:77:d9:81:11:4f:68:
91:a6:66:e0:ab:f9:80:35:4d:d7:3b:c6:26:72:d9:
88:a2:cd:fe:6e:89:dc:6d:e0:67:77:3c:8d:76:2b:
79:b3:99:fe:a2:3c:09:69:0c:14:ab:21:6f:89:9e:
cf:3f:15:cd:12:dd:b6:16:ac:bb:2e:b2:4f:8b:e9:
37:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5D:5B:AD:45:1D:53:8B:5A:25:09:09:6F:C5:EE:E0:64:FA:E6:BF
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:41:e7:1c:65:df:e0:e8:f5:05:58:99:93:00:e9:42:3e:b7:
a9:6c:91:df:d1:aa:8b:f5:91:9c:a9:1d:e9:24:3f:a2:08:a0:
d6:93:55:e1:37:99:2d:f3:42:1d:e3:00:ee:ef:05:af:be:c9:
68:e5:75:69:44:44:19:60:d2:03:4e:1a:cd:e1:f1:31:a1:f0:
22:49:41:48:83:dc:ac:7b:1e:4c:eb:27:f7:fc:b5:da:a4:01:
69:29:d1:58:75:07:4e:e4:cf:2d:7b:b1:4a:34:80:b6:d6:09:
08:d3:54:05:70:c4:b2:b0:a5:9f:61:2f:f1:c2:e3:11:5a:85:
de:a1:2f:d2:0d:a3:cd:bf:93:d4:08:a9:7f:34:87:bf:8a:24:
6d:22:b1:49:dd:8a:3e:c8:02:ec:07:4a:04:d6:b2:14:a6:19:
aa:e5:d2:2a:92:48:b7:c6:a6:cf:d6:84:e8:eb:e3:37:29:7b:
b3:be:bc:1c:f7:65:8d:d8:cb:76:91:77:2d:3d:33:94:44:24:
b4:5d:e2:16:8b:d5:d9:67:c0:29:e4:e4:5b:e0:95:49:0e:d7:
5f:72:ec:18:06:69:8a:21:76:89:8f:d5:c0:c7:e4:89:74:d7:
15:a9:d6:ac:0e:cf:84:ba:bc:14:dc:a7:af:d9:6d:18:4e:6d:
93:f3:06:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:34:58 2025 by rpki-client