Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
File: 67Ulb-PgcwKrcye3R7jfOCRcTt8.mft (raw, json)
Hash identifier: HxlwQc4qTuAcErS64Ikz1bKFGQaxg0oNpBADkYJ8Wjg=
Subject key identifier: F8:B1:3E:ED:77:B2:90:6B:2F:4B:E0:37:4B:33:7A:2E:DD:B2:25:F3
Authority key identifier: EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
Certificate issuer: /CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Certificate serial: 0197B745717DD9F5D305C81BCC8C644F49F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
Manifest number: D9
Signing time: Sat 28 Jun 2025 16:01:10 +0000
Manifest this update: Sat 28 Jun 2025 16:01:10 +0000
Manifest next update: Sun 29 Jun 2025 16:01:10 +0000
Files and hashes: 1: 67Ulb-PgcwKrcye3R7jfOCRcTt8.crl (hash: RKj29qwwku5gu8cc9v+L7hck+AIg6lweAFL/HklIa4Y=)
2: R2qc8xIB7ETeFtMUELFMOTQfjZ4.roa (hash: BfeJlxl1OQPY3ScyZzCp1zSxOdUPgq5TTtPThWNATH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:71:7d:d9:f5:d3:05:c8:1b:cc:8c:64:4f:49:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb5256fe3e07302ab7327b747b8df38245c4edf
Validity
Not Before: Jun 28 16:01:10 2025 GMT
Not After : Jun 29 16:01:10 2025 GMT
Subject: CN=f8b13eed77b2906b2f4be0374b337a2eddb225f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:81:0b:d7:8f:6b:81:ee:08:d2:86:e4:dc:5b:
c5:6c:16:13:28:2e:7c:7d:00:a4:e2:1f:95:a4:3e:
00:5a:e8:7c:1d:d7:14:ec:ef:a7:05:0c:86:b5:cd:
c4:49:7e:b2:e9:d9:25:56:d7:49:9f:9b:07:40:18:
60:6a:ca:aa:8a:72:fc:c1:d1:c7:7e:13:03:89:eb:
83:1e:31:0d:c2:90:c6:ed:f2:3d:34:06:e8:a4:31:
1a:a1:8c:98:e3:3a:9f:1c:31:0d:66:a2:76:85:81:
0a:6a:da:97:0e:f7:d4:19:1a:99:2a:60:92:24:e2:
59:40:7b:32:cd:32:18:2c:42:3a:37:24:80:f1:d2:
4f:c6:1c:72:14:38:8d:3b:36:06:16:11:ee:42:63:
b8:3f:ad:c8:ef:a3:31:44:2f:de:2c:64:5c:f1:c4:
98:a2:37:d8:d8:c1:a1:63:b2:89:75:c5:54:07:80:
44:f2:d8:af:ac:f2:7d:51:04:35:0a:b2:42:b9:ff:
49:5c:4f:78:e8:ed:2b:21:98:7d:8e:85:1b:5d:16:
cb:85:c6:56:c0:ba:e9:49:c9:60:99:53:b3:9d:f4:
9c:e7:0d:7c:09:d6:83:d6:4a:ff:01:2b:51:09:29:
ec:c2:ae:e0:19:5e:5e:af:cf:39:29:36:d4:58:36:
99:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B1:3E:ED:77:B2:90:6B:2F:4B:E0:37:4B:33:7A:2E:DD:B2:25:F3
X509v3 Authority Key Identifier:
keyid:EB:B5:25:6F:E3:E0:73:02:AB:73:27:B7:47:B8:DF:38:24:5C:4E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67Ulb-PgcwKrcye3R7jfOCRcTt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/40b2a9-b2c7-4223-8848-0d2e4205686f/1/67Ulb-PgcwKrcye3R7jfOCRcTt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:06:43:6a:c3:22:f2:20:c4:5b:76:38:8b:f7:8e:15:58:90:
2b:9b:54:4b:59:97:7d:a0:9f:67:ae:53:9a:27:ac:a9:5f:98:
ef:8f:1f:fe:7e:43:50:e6:20:2a:70:33:82:cf:9c:a3:83:0d:
e4:36:0d:a3:9e:d4:cd:2a:f6:3f:d8:6b:d6:a4:4f:82:67:d4:
cf:a3:35:27:cd:08:da:af:69:8e:96:13:17:1a:bb:cf:62:e2:
af:6c:29:2b:fc:83:bf:48:9c:bb:32:95:85:27:7b:d1:cc:05:
8d:b0:bc:ab:f9:7e:d8:48:51:f8:73:cc:2f:7d:48:82:96:6f:
4c:d4:7a:a0:5a:32:f2:a9:19:7e:65:f3:f4:f6:51:ee:dd:b7:
ce:50:56:48:1b:36:24:4c:89:73:e5:b3:7c:18:b8:65:61:25:
00:61:a4:60:5f:c9:b8:30:89:df:98:b7:32:e0:05:24:5b:d3:
6a:55:4e:0d:d2:38:6d:94:79:05:52:30:99:14:ab:59:5c:c4:
ee:ef:82:0c:42:3f:44:0f:a6:35:22:48:f1:1e:9a:cc:06:04:
84:30:ee:96:9c:c0:35:51:48:37:6e:e7:1b:e5:13:cf:e1:75:
bf:ab:6d:90:25:1b:11:85:0e:2b:80:3c:23:f6:42:31:38:fa:
c4:0d:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:41:23 2025 by rpki-client