Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
File: 67KkJVDl4rSqGkc7KzcbwoNBoWo.mft (raw, json)
Hash identifier: le4Llwh5TkVpxVG2dNnTuHnKsDWS4qo1EFR+QP2ixzY=
Subject key identifier: 2D:02:DF:06:45:59:78:F5:AC:C0:67:EE:AF:DD:BD:C1:AD:4B:DF:1F
Authority key identifier: EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
Certificate issuer: /CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Certificate serial: 0199FD6AF652E969AE7E1144393BD5105859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
Manifest number: 0E45
Signing time: Sun 19 Oct 2025 17:01:09 +0000
Manifest this update: Sun 19 Oct 2025 17:01:09 +0000
Manifest next update: Mon 20 Oct 2025 17:01:09 +0000
Files and hashes: 1: 67KkJVDl4rSqGkc7KzcbwoNBoWo.crl (hash: GTzgnYrZ21J+WpDvCZqyNZ/sA93FcveyOOUuQEdU0Yg=)
2: UGLv7iIWQ-5niuk1r5Vedx_SrIM.roa (hash: +rlvmMS0hKnH04ERI3SbO3F5bnx5NVtVmXo36GJpU3I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:f6:52:e9:69:ae:7e:11:44:39:3b:d5:10:58:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb2a42550e5e2b4aa1a473b2b371bc28341a16a
Validity
Not Before: Oct 19 17:01:09 2025 GMT
Not After : Oct 20 17:01:09 2025 GMT
Subject: CN=2d02df06455978f5acc067eeafddbdc1ad4bdf1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e7:e8:6a:df:86:bd:07:09:83:f7:16:1c:99:
4d:cf:05:c7:b0:15:9f:39:a6:93:83:98:68:21:af:
39:85:70:cc:a9:63:46:57:0f:83:e2:aa:5c:63:15:
87:cf:78:8f:9e:ed:54:64:c1:f6:b0:2a:c0:8f:6d:
f8:74:01:a7:14:86:fb:1f:ff:29:df:0d:2e:e7:8a:
fd:f3:fc:31:d6:ea:51:e6:7d:a1:aa:92:2a:12:54:
60:11:4a:bb:31:66:c1:d3:ac:23:8a:b4:59:2f:74:
78:99:bc:4a:12:da:6d:fa:7b:9e:3a:5f:3d:40:c7:
ce:07:9b:9f:da:14:93:88:04:16:29:48:ef:52:dd:
04:ed:bb:6d:15:47:69:53:aa:7d:40:57:91:06:df:
fa:15:7d:ea:1d:72:5c:0a:e2:58:7f:27:fe:b4:1d:
0c:9c:86:41:6d:d1:6f:40:d8:07:01:2d:80:1a:fe:
fa:a1:21:1b:36:4d:6d:a5:64:91:c6:16:24:2e:98:
d4:01:b7:dc:da:5e:21:2f:c8:d7:66:56:6f:d5:17:
62:da:34:ec:fd:9c:90:d8:be:19:db:1b:19:9b:a7:
30:72:a9:f9:c0:2a:04:cd:3d:0c:43:bd:db:d5:57:
80:f2:1c:ab:8b:d8:1c:74:e4:f1:79:8d:44:46:da:
e0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:02:DF:06:45:59:78:F5:AC:C0:67:EE:AF:DD:BD:C1:AD:4B:DF:1F
X509v3 Authority Key Identifier:
keyid:EB:B2:A4:25:50:E5:E2:B4:AA:1A:47:3B:2B:37:1B:C2:83:41:A1:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67KkJVDl4rSqGkc7KzcbwoNBoWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e58b40-dde6-4840-810c-31f92945dffd/1/67KkJVDl4rSqGkc7KzcbwoNBoWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:1c:f7:67:cb:04:08:9a:98:3e:8b:73:a6:a6:ea:9b:61:12:
e3:59:4c:a7:84:cb:30:7e:8d:65:23:f1:8a:61:bb:1f:92:c9:
38:ea:95:d7:d0:ca:e4:44:36:a1:f0:60:be:f3:9f:88:97:0b:
4b:6e:49:d0:f2:cf:7d:ea:9d:40:74:49:5b:88:73:a0:e2:96:
6f:96:81:b3:fa:29:e0:9f:38:e7:5d:9e:75:0b:eb:82:3e:12:
06:94:b6:b1:e6:03:73:8d:f5:2d:0a:d1:1d:86:49:c2:15:bd:
88:fa:bd:b3:31:5c:a4:e7:be:27:8e:c2:59:05:ed:3f:5e:cd:
dd:d5:d0:08:a3:7c:fa:8e:9a:24:1d:af:00:00:ee:97:9e:29:
75:1c:f4:43:2d:0b:35:89:14:1d:1f:fd:63:16:7a:38:69:87:
34:25:9a:8a:8f:55:dd:84:b4:f5:08:3c:61:28:e7:17:ae:71:
c2:42:39:bb:c6:91:7a:10:db:59:0b:81:d0:a2:ac:68:95:63:
c2:6e:24:12:35:20:15:4b:23:e3:b6:13:99:23:db:19:6b:93:
44:66:7b:e1:89:67:8f:d9:a4:27:3d:bb:59:c6:05:81:6f:cb:
f9:8d:fd:f4:99:1a:28:f9:89:ac:c8:9b:15:a3:4b:15:fd:73:
c0:ba:51:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn9avZS6WmufhFEOTvVEFhZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViYjJhNDI1NTBlNWUyYjRhYTFhNDczYjJiMzcxYmMyODM0
MWExNmEwHhcNMjUxMDE5MTcwMTA5WhcNMjUxMDIwMTcwMTA5WjAzMTEwLwYDVQQD
EygyZDAyZGYwNjQ1NTk3OGY1YWNjMDY3ZWVhZmRkYmRjMWFkNGJkZjFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsufoat+GvQcJg/cWHJlNzwXHsBWf
OaaTg5hoIa85hXDMqWNGVw+D4qpcYxWHz3iPnu1UZMH2sCrAj234dAGnFIb7H/8p
3w0u54r98/wx1upR5n2hqpIqElRgEUq7MWbB06wjirRZL3R4mbxKEtpt+nueOl89
QMfOB5uf2hSTiAQWKUjvUt0E7bttFUdpU6p9QFeRBt/6FX3qHXJcCuJYfyf+tB0M
nIZBbdFvQNgHAS2AGv76oSEbNk1tpWSRxhYkLpjUAbfc2l4hL8jXZlZv1Rdi2jTs
/ZyQ2L4Z2xsZm6cwcqn5wCoEzT0MQ73b1VeA8hyri9gcdOTxeY1ERtrg1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0C3wZFWXj1rMBn7q/dvcGtS98fMB8GA1UdIwQY
MBaAFOuypCVQ5eK0qhpHOys3G8KDQaFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMt
MzFmOTI5NDVkZmZkLzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC9lNThiNDAtZGRlNi00ODQwLTgxMGMtMzFmOTI5NDVkZmZk
LzEvNjdLa0pWRGw0clNxR2tjN0t6Y2J3b05Cb1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZxz3Z8sE
CJqYPotzpqbqm2ES41lMp4TLMH6NZSPximG7H5LJOOqV19DK5EQ2ofBgvvOfiJcL
S25J0PLPfeqdQHRJW4hzoOKWb5aBs/op4J84512edQvrgj4SBpS2seYDc431LQrR
HYZJwhW9iPq9szFcpOe+J47CWQXtP17N3dXQCKN8+o6aJB2vAADul54pdRz0Qy0L
NYkUHR/9YxZ6OGmHNCWaio9V3YS09Qg8YSjnF65xwkI5u8aRehDbWQuB0KKsaJVj
wm4kEjUgFUsj47YTmSPbGWuTRGZ74Ylnj9mkJz27WcYFgW/L+Y399JkaKPmJrMib
FaNLFf1zwLpR6Q==
-----END CERTIFICATE-----
Generated at Sun Oct 19 20:41:28 2025 by rpki-client