Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
File: 67CL6AASZRHP-NJWmdmsE27Q7Iw.mft (raw, json)
Hash identifier: HD95tyjAoULlh/h6yAZ1DIHjimQLclIBiGN+OSi0ypo=
Subject key identifier: 47:10:7B:EE:C4:A4:A4:F7:9E:4E:E0:9A:10:E8:12:5E:36:CC:B9:40
Authority key identifier: EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
Certificate issuer: /CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Certificate serial: 0199FC21B858293FCC5E698236BE6ABF3E9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 11:01:32 +0000
Manifest this update: Sun 19 Oct 2025 11:01:32 +0000
Manifest next update: Mon 20 Oct 2025 11:01:32 +0000
Files and hashes: 1: 67CL6AASZRHP-NJWmdmsE27Q7Iw.crl (hash: ZlFZ+0HBNQPyceFybPJiC1AmWKa1mQCHy5DEEXHseFM=)
2: EqkXgOY99e-iUkXVNdA5xYmgxlo.roa (hash: veZu9uXJXJvhWX4xtP47S8hZ9s5IMdM1R7TmdJX9vpU=)
3: wrDqtsAOuC7Agc1zIPRkhKVhP8U.roa (hash: kfogXl8tGYAhJxfycDCrALmBGs+Zy+SyeMiS4IsU5B8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:b8:58:29:3f:cc:5e:69:82:36:be:6a:bf:3e:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb08be800126511cff8d25699d9ac136ed0ec8c
Validity
Not Before: Oct 19 11:01:32 2025 GMT
Not After : Oct 20 11:01:32 2025 GMT
Subject: CN=47107beec4a4a4f79e4ee09a10e8125e36ccb940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d0:bc:c6:1f:ce:9e:55:f8:ec:ce:e9:71:54:
15:36:fb:2e:1a:80:0a:2a:bb:6c:29:8d:87:21:48:
ca:ba:a4:2e:b6:fe:88:31:61:3a:a9:7a:eb:4a:f7:
73:5f:d4:a1:46:88:e3:d6:45:d2:59:94:83:0a:68:
74:f9:42:d5:7a:64:1e:3e:ad:62:91:5b:76:00:4b:
57:ab:7e:6b:b1:5f:de:f0:54:81:5d:4d:0b:d6:84:
aa:56:3f:7d:8c:c3:07:55:c0:94:9b:c4:c6:aa:a5:
bf:12:f6:17:3c:dc:0f:6e:3e:92:02:f0:cf:6f:2e:
95:51:f5:4e:49:aa:2e:2a:3e:33:f1:80:d8:9a:57:
d7:c0:ef:b5:3c:c2:74:62:f9:79:44:cc:2e:84:31:
74:77:47:76:78:5e:37:b9:1f:70:86:6f:34:f1:90:
6d:50:af:da:c9:e2:a3:2a:c3:d1:20:9a:10:a8:60:
14:4b:ff:11:6d:d4:cc:06:79:53:5b:73:a7:21:88:
4e:56:e0:a2:c3:c4:fc:f1:30:35:82:8d:64:77:2c:
af:40:23:b0:7a:e7:4b:56:42:cd:17:8d:89:56:c0:
f7:08:c8:4b:4f:16:97:46:90:5c:7e:9f:e6:00:d5:
be:0b:d4:d3:7a:17:ef:c1:4a:2c:49:f5:c0:bf:42:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:10:7B:EE:C4:A4:A4:F7:9E:4E:E0:9A:10:E8:12:5E:36:CC:B9:40
X509v3 Authority Key Identifier:
keyid:EB:B0:8B:E8:00:12:65:11:CF:F8:D2:56:99:D9:AC:13:6E:D0:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67CL6AASZRHP-NJWmdmsE27Q7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6c142a-2b5e-416b-94de-ba9d51fe9e2b/1/67CL6AASZRHP-NJWmdmsE27Q7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:de:fe:37:b6:a6:fb:95:f6:35:6a:ef:57:e1:f2:96:29:c2:
26:b4:3c:87:be:a2:4d:21:aa:fc:3c:7c:ce:99:9b:00:46:bd:
1f:08:fd:31:86:1f:cd:eb:eb:bf:f9:68:02:d8:e5:27:2f:bc:
83:9d:cc:e9:96:86:9b:36:b5:76:56:c5:73:81:fb:7d:a8:85:
e0:a0:64:53:35:b2:05:fb:56:40:15:ad:47:30:7a:94:f1:8e:
00:c2:4c:a6:bc:51:79:23:17:e0:15:5d:f9:bf:cb:31:33:d5:
1e:84:c1:28:b7:35:cf:89:ce:59:6a:0d:46:19:4d:32:17:45:
90:ac:e6:d1:7a:48:29:11:63:1b:12:6f:b1:e2:05:95:78:37:
30:fd:4b:c9:71:19:45:1c:26:27:51:44:69:5d:92:c3:4c:58:
60:a8:1f:31:f2:1b:e2:d7:2f:a4:96:39:d6:6b:eb:d8:0c:db:
db:ad:e9:1a:e9:c8:b8:c5:e8:25:52:b5:b0:e1:c2:fc:b0:aa:
17:87:c5:1e:68:19:93:a1:12:5c:df:04:14:4a:27:0c:dc:bb:
06:2c:ee:f5:3f:72:8c:83:95:1f:a9:ce:b4:eb:15:5c:8f:e1:
69:89:fe:b3:91:33:bd:2f:7c:ee:32:a9:f2:1c:95:35:29:54:
97:64:12:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:12:06 2025 by rpki-client