
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
File: 52CwD7DMWV_lQtYibj8KPlFl8cw.mft (raw, json)
Hash identifier: 2Ac9sDokzCN0pw9o30v90TOIIAF1sa9Xxx3lR0B/6ek=
Subject key identifier: CE:04:E1:D5:62:64:88:A5:C8:9B:D3:26:42:02:5B:F7:DD:D0:B1:07
Authority key identifier: E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
Certificate issuer: /CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Certificate serial: 0199FBEC67D7E5B4B79033567A848AB12A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
Manifest number: 068A
Signing time: Sun 19 Oct 2025 10:03:18 +0000
Manifest this update: Sun 19 Oct 2025 10:03:18 +0000
Manifest next update: Mon 20 Oct 2025 10:03:18 +0000
Files and hashes: 1: 52CwD7DMWV_lQtYibj8KPlFl8cw.crl (hash: ZCkssPptcNDlI9A0Pzkbk2tBUWl9qn1OTd4y7tS3czU=)
2: rKGVKqiZpnbfrBEvUIL3z2bcD3w.roa (hash: GqgeMXx+9CHaMaMRbd16hQlhBApo1up4EaH0YwEA5E8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:67:d7:e5:b4:b7:90:33:56:7a:84:8a:b1:2a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760b00fb0cc595fe542d6226e3f0a3e5165f1cc
Validity
Not Before: Oct 19 10:03:18 2025 GMT
Not After : Oct 20 10:03:18 2025 GMT
Subject: CN=ce04e1d5626488a5c89bd32642025bf7ddd0b107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5b:a6:78:44:af:1d:34:b6:06:7f:d1:5a:64:
6f:da:61:4d:36:d5:21:57:f1:de:06:6e:90:e8:b6:
21:53:77:71:3e:97:02:68:a2:c0:42:99:4d:7f:15:
16:23:91:93:bd:56:c4:eb:91:31:00:05:86:c6:a3:
c2:71:78:79:47:07:cc:b1:b5:be:dd:79:98:fe:ea:
24:9e:bc:89:bb:4d:b9:0d:5c:49:93:35:05:86:9e:
c0:ae:15:d4:30:e3:2b:a9:d7:96:4f:37:ff:be:ad:
40:4e:26:2d:1a:36:58:2c:f0:8f:44:32:99:5d:99:
9c:bc:32:91:1c:ba:7f:6f:6c:05:de:63:69:ed:11:
74:a6:25:ad:57:25:3d:4b:5d:ca:0d:59:a4:53:37:
f6:f7:7e:d1:fd:aa:1d:10:f8:1c:d3:45:3a:a8:d2:
47:d8:67:2b:d4:29:ec:2f:6a:5a:40:bb:40:18:0f:
53:5d:c4:0c:8a:e4:d9:26:b5:4b:13:76:45:a6:3c:
96:b3:5c:7d:84:44:a6:3a:98:1d:61:fa:4b:9e:09:
e4:92:8d:5b:ce:a7:32:bf:bb:fa:5a:64:b1:42:36:
02:e7:5a:51:43:c9:af:2c:da:9a:94:c5:27:f1:2d:
87:53:06:d1:6e:b0:aa:84:d7:56:e3:22:3e:85:96:
b5:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:04:E1:D5:62:64:88:A5:C8:9B:D3:26:42:02:5B:F7:DD:D0:B1:07
X509v3 Authority Key Identifier:
keyid:E7:60:B0:0F:B0:CC:59:5F:E5:42:D6:22:6E:3F:0A:3E:51:65:F1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52CwD7DMWV_lQtYibj8KPlFl8cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/bea3d0-d33e-44bc-8296-94e4c9fd718a/1/52CwD7DMWV_lQtYibj8KPlFl8cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:70:76:0e:6b:f9:e6:52:be:27:d8:58:04:f5:80:de:ef:db:
24:7e:45:47:eb:f1:06:d0:af:ef:82:42:28:e5:54:ed:07:f0:
43:f1:de:ac:c5:40:26:b3:05:2e:0f:95:da:e7:37:d7:00:4b:
89:91:de:7b:89:87:2a:f4:ed:13:de:af:58:9b:72:99:60:c6:
61:03:4f:d4:37:ba:ef:0c:8d:7f:c1:86:35:17:e2:ca:e7:73:
8f:56:dc:97:bb:b1:b2:fc:fd:81:e0:65:9a:22:43:52:4e:f2:
f2:c8:10:8c:98:ad:ef:25:70:71:c5:5e:20:40:f3:29:46:1a:
c3:b2:0d:fe:fd:a5:7b:2a:25:95:40:8d:e9:6a:5c:60:1c:ff:
0c:d7:83:ee:05:9d:3e:71:04:c0:98:3f:41:59:70:20:86:c2:
7e:e1:72:4d:ec:60:33:f5:7c:62:07:5a:61:fe:a3:c7:2c:43:
be:38:68:67:41:eb:10:e6:07:8d:1f:01:85:7a:16:65:e8:91:
c0:bb:09:e9:e7:30:a1:99:55:af:60:f2:50:b4:00:74:0e:23:
fe:6d:ff:7a:e4:e6:80:4b:24:f4:f5:b3:10:3f:74:8b:16:c3:
8e:f0:86:cd:26:2f:b4:da:aa:63:1a:37:4b:73:9e:0a:a6:46:
06:cc:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:00 2025 by rpki-client