Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: 0EIttomt/ZpY5A4iuEi3YWb1TDozMh2s70bpncYNfnk=
Subject key identifier: 27:3C:32:68:A8:3B:55:04:70:BA:AA:FA:81:55:4D:67:F5:4C:22:A4
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 0199FC8FACFCEEAAEB7EF7360C20297D1DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: 0206
Signing time: Sun 19 Oct 2025 13:01:38 +0000
Manifest this update: Sun 19 Oct 2025 13:01:38 +0000
Manifest next update: Mon 20 Oct 2025 13:01:38 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: oxLBzQaAh5OQ31uwicKsHiZI7Cu3pGeun1SL78wCLbo=)
2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:ac:fc:ee:aa:eb:7e:f7:36:0c:20:29:7d:1d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Oct 19 13:01:38 2025 GMT
Not After : Oct 20 13:01:38 2025 GMT
Subject: CN=273c3268a83b550470baaafa81554d67f54c22a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:30:43:0c:60:d6:80:c6:a1:db:bd:02:be:6c:
75:d4:6b:86:7d:fa:0e:8f:8b:cc:52:2a:aa:4e:9e:
55:eb:ea:83:89:cb:34:af:2c:fe:c1:54:f3:e3:0d:
36:c9:85:12:e3:dd:b5:09:e9:0c:ed:b5:d3:c7:39:
f1:c3:33:bb:ad:a3:99:76:69:7f:0c:6a:6d:07:b1:
24:9c:0c:d1:e0:01:e7:e1:68:bc:d8:9e:4b:39:a3:
d3:76:6e:21:d5:84:ad:df:de:96:e3:63:2e:49:af:
e5:34:ac:66:08:14:c3:b4:c2:21:b3:2f:44:39:8c:
20:cf:9e:3d:df:f6:1d:cc:47:c0:df:a4:97:52:16:
75:f9:b6:0b:04:36:54:9b:6e:74:70:2e:4c:40:c4:
0d:32:71:89:53:e5:cf:0d:dc:ca:70:67:3c:4a:aa:
79:53:03:4f:a2:b2:db:b7:0e:d7:ed:ba:01:52:43:
73:1e:7f:b4:da:2c:eb:40:71:c6:7a:e5:b9:9f:ab:
59:84:6c:a2:f7:8e:e4:16:92:a0:2a:bc:cf:e1:1e:
26:65:83:77:2d:dc:19:20:4d:0a:5c:db:60:d4:ab:
06:85:0a:31:97:f8:61:60:16:60:20:af:7f:2c:e5:
cb:29:0d:7e:93:0a:89:ea:bc:10:52:8f:27:35:77:
de:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:32:68:A8:3B:55:04:70:BA:AA:FA:81:55:4D:67:F5:4C:22:A4
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:c4:df:4d:08:24:d5:0a:1f:60:16:99:97:c1:63:27:01:7c:
10:53:2b:b6:44:c8:37:3f:cb:36:2c:12:a0:b7:21:1d:e1:00:
30:66:af:1c:a7:20:be:84:50:67:eb:8b:d3:4f:bb:fc:34:4e:
ce:9d:a6:4a:3c:e3:50:c8:25:08:c0:32:12:2d:a3:b9:8c:6a:
35:fe:5e:3a:17:c6:cb:d6:f3:cd:d3:2e:ed:13:31:c5:c4:01:
b3:9a:0e:42:7e:73:30:97:ab:12:32:08:e7:94:e5:00:5e:75:
a4:90:83:5f:ab:67:5a:95:ab:28:e3:9e:c0:7d:02:1e:a4:1d:
15:9b:1d:b1:55:dd:d1:11:fa:72:b9:c2:ef:48:1b:98:45:c7:
72:55:0a:13:ee:c6:03:71:21:c6:4d:50:2b:25:ea:b9:ab:59:
0b:17:76:5a:f3:e9:a2:ef:9d:1c:80:70:3f:99:41:b2:5e:99:
4f:43:0e:f9:ae:2f:b9:f6:a6:16:87:14:f8:6d:38:6d:f7:a9:
63:77:16:c0:78:f3:59:cc:73:7c:19:a9:f3:b6:27:94:cc:dc:
e3:7b:c7:16:5a:17:1f:7c:b3:5b:f9:4a:1e:03:c0:62:ca:bd:
cc:ee:81:1c:9f:19:0d:4e:e7:62:2e:22:45:1f:25:f7:a8:e0:
3f:06:9b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:37:50 2025 by rpki-client