Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: S92NKPhQYISXO6tg3VNDCJJA0NynKAtcMaFuX15wgJA=
Subject key identifier: 67:5C:3E:EC:63:47:6E:98:FD:E8:D2:F9:0C:C8:C6:D9:0D:06:6C:3A
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 0199FC5893CBDAC01ADB4498F7370794118C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 1643
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: Bq7D7gxRFjlhr3QAlA9sgcDrBkSYqdAJ2zRhv/3JYNU=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:93:cb:da:c0:1a:db:44:98:f7:37:07:94:11:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=675c3eec63476e98fde8d2f90cc8c6d90d066c3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:80:55:f4:39:43:be:f2:3b:6a:4e:0c:0f:d5:
d2:f1:61:21:2b:a0:d1:ba:87:18:82:0a:fd:a3:79:
8e:8d:0e:dc:92:26:64:42:7a:0e:12:fd:2e:63:c3:
7d:2d:a6:4e:1a:a3:5e:8b:92:fb:2c:16:7a:2f:3d:
a5:c2:75:30:b6:4c:9d:ee:62:df:0c:f3:c2:f0:bc:
8c:d7:01:38:a9:86:e2:5a:b6:26:6c:43:25:8f:a2:
5a:cb:08:71:ad:9a:d7:17:70:54:15:a1:21:09:b6:
93:14:9d:8c:7c:f7:2f:5d:35:33:f0:09:f7:10:6a:
b2:c8:7a:0b:b2:99:9a:19:86:d6:14:5d:e3:3d:86:
58:6f:64:6c:a3:a6:34:0c:12:ea:59:6d:10:e0:78:
12:8b:95:c7:e6:1a:7a:57:15:74:79:ae:26:99:3a:
e3:c6:20:70:f4:ab:97:e8:7e:1c:66:0d:56:4c:73:
bb:25:fa:48:5d:d6:77:fc:2a:3a:69:bf:07:8e:3c:
cb:a7:3f:d1:cf:be:02:6d:7c:4f:2a:57:e3:e7:35:
cc:2a:3c:8a:cb:18:f6:e9:d1:a6:21:52:1f:fd:e5:
d4:ea:80:ed:9a:84:9c:f4:64:fc:ef:54:aa:c7:c3:
73:d6:28:97:55:75:e9:2f:c9:c7:f6:d4:59:1f:34:
b6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5C:3E:EC:63:47:6E:98:FD:E8:D2:F9:0C:C8:C6:D9:0D:06:6C:3A
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:ba:d6:b5:6e:54:ce:9a:83:2e:85:6d:bd:11:94:e3:92:30:
81:69:60:61:2b:ac:8c:92:de:b9:cd:74:2d:c0:de:fc:6d:a5:
b0:18:c0:37:32:61:47:db:8d:c7:10:28:8e:0e:d8:5b:29:cc:
15:e4:33:d0:da:30:90:b6:ec:7c:53:36:45:a8:01:31:cb:0b:
de:36:4f:41:e9:13:79:03:16:4b:ab:ff:c6:ec:09:bb:91:ce:
61:8c:2d:c7:e2:a5:89:73:7c:86:69:6d:fb:fa:b7:3b:6b:40:
fd:44:41:c4:6d:38:f0:8e:e0:e8:16:49:d7:74:1f:fc:4f:69:
42:19:73:ba:51:49:93:fd:71:25:bc:75:43:61:a6:a9:4f:3d:
94:4c:60:79:53:d9:37:b3:d9:02:dc:d1:0b:59:2f:96:67:be:
d4:fd:64:2e:26:69:91:53:1f:2d:9e:6d:7e:c4:3c:13:6a:fd:
44:80:b3:23:55:46:fa:d5:e2:fc:c2:94:6d:1c:f3:09:d6:b1:
6f:27:d2:6b:94:e2:7a:75:f0:de:f0:79:53:ab:64:3f:64:fa:
3f:3d:74:c3:ca:76:ce:fb:1f:77:18:82:8a:74:c8:d7:54:39:
34:f6:bc:8c:d4:af:00:f0:04:da:77:51:8d:a0:a0:4b:ea:f4:
6a:31:b5:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:58:57 2025 by rpki-client