Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: qkGjjAXKX0sbDR/b1nyPJJXkwwML5NN2ftQd7MhdfEY=
Subject key identifier: CC:4A:F3:CE:71:B3:89:65:C9:5E:40:66:61:7D:6F:3A:96:3A:1D:25
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 0198D4DFC96F1F0A3339426AA3AFFD2C0EC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 15AA
Signing time: Sat 23 Aug 2025 03:01:32 +0000
Manifest this update: Sat 23 Aug 2025 03:01:32 +0000
Manifest next update: Sun 24 Aug 2025 03:01:32 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: yvW6/XAI/FVHemipz/ZYW171UVRbj6oJlxnWNHVXyRU=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:c9:6f:1f:0a:33:39:42:6a:a3:af:fd:2c:0e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Aug 23 03:01:32 2025 GMT
Not After : Aug 24 03:01:32 2025 GMT
Subject: CN=cc4af3ce71b38965c95e4066617d6f3a963a1d25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:75:40:73:05:30:19:32:97:bc:7f:ba:8d:
45:7d:23:cc:0d:cb:55:95:97:70:f9:05:8b:8f:b7:
71:6d:93:8a:40:a9:f8:6f:45:c9:bf:74:29:99:4b:
62:c2:28:9e:57:5a:98:98:48:50:e5:8f:d5:34:27:
3c:fa:50:bd:0e:8a:de:bf:ab:24:11:4b:0d:35:f9:
22:74:74:f5:4a:51:8f:e6:07:6b:25:af:49:06:c5:
18:77:c8:ad:5d:19:da:bb:23:0a:6f:a3:c1:8b:9f:
b4:84:dd:78:75:37:cd:f6:c1:8d:8d:3b:76:6a:44:
71:23:86:d5:95:67:64:34:f6:2b:3d:35:e4:24:21:
03:b8:4b:96:62:9a:1c:ab:ca:43:93:93:5a:f3:0d:
6e:5c:64:e0:23:21:f0:14:c1:93:16:89:d3:0b:58:
34:22:e8:17:f9:de:af:05:06:a0:20:2d:b1:a9:84:
06:09:3e:39:37:5a:c4:25:dc:55:a7:5f:65:91:3f:
49:42:2b:3d:01:90:75:22:1a:62:f2:e0:57:8c:81:
c5:a9:de:16:e4:9e:3c:af:9d:e3:25:30:58:ec:79:
5f:8c:04:3f:97:99:82:03:92:12:a3:97:11:aa:0c:
aa:d7:8e:06:6b:b8:1b:1f:04:cb:93:ad:23:62:bf:
e9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4A:F3:CE:71:B3:89:65:C9:5E:40:66:61:7D:6F:3A:96:3A:1D:25
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:54:89:3d:47:3f:5c:60:ed:4c:d3:83:23:f6:2e:1d:83:bd:
db:54:70:20:78:3f:d5:4a:2f:3a:69:66:01:75:eb:3b:95:0b:
90:83:1e:20:1e:3a:b8:17:68:ea:48:52:12:a8:fe:4d:ca:6d:
d4:05:b6:bf:be:81:31:17:fa:03:bc:8a:c4:fd:34:43:ac:a6:
26:7b:58:aa:61:69:30:be:f9:49:7d:f2:da:58:d1:28:50:39:
6e:92:0f:9a:95:d6:fb:2c:5a:2d:84:9e:bb:0b:f9:fb:e7:81:
35:9f:59:49:91:a3:f5:a9:13:76:4b:f7:91:fe:12:68:80:9b:
2c:96:41:8c:67:40:34:09:be:f3:00:82:54:fd:62:43:b3:4b:
f3:74:ef:31:52:d5:1a:d7:2a:65:a1:36:89:db:cd:c2:10:8e:
2c:49:94:cc:81:6c:dc:05:ee:50:96:45:b3:58:df:c8:12:0f:
09:27:0a:ff:f8:72:97:e0:54:af:b1:87:e2:1b:fe:09:9c:25:
9f:60:4a:17:69:f3:8b:b5:85:6e:36:85:ed:ce:96:8e:83:94:
b3:ad:2d:e7:b2:24:4b:75:20:cc:7a:45:39:24:fe:06:a4:91:
9c:b0:16:d1:bb:0b:b1:ab:81:90:35:d0:77:07:e7:0c:f1:b6:
ae:a4:32:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:50:23 2025 by rpki-client