Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
File: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft (raw, json)
Hash identifier: 0a/VImZGulsvv5/vC2vHPzpTIUjzYekFLjpl54SVEPI=
Subject key identifier: 9A:B0:3A:A1:52:C3:42:EE:11:AD:20:CE:51:7B:A4:10:BA:68:9E:7C
Authority key identifier: EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
Certificate issuer: /CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Certificate serial: 0198D4E07587D4A6D9C1436F251A4002E4C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
Manifest number: 0F56
Signing time: Sat 23 Aug 2025 03:02:16 +0000
Manifest this update: Sat 23 Aug 2025 03:02:16 +0000
Manifest next update: Sun 24 Aug 2025 03:02:16 +0000
Files and hashes: 1: 68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl (hash: MbC9riQGhtjZUhDiP0GkI+QP64PQj9jDm1DVGDu33d4=)
2: oYCCEaHZDFeU07vWfgI3VuJzA2k.roa (hash: ZelDCAPq5Lk9TPNRJeopu8e/ZIbjOUyl0w35TbZibt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:75:87:d4:a6:d9:c1:43:6f:25:1a:40:02:e4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebc8c4a066e2c150313ee1c087471f3c8b0de054
Validity
Not Before: Aug 23 03:02:16 2025 GMT
Not After : Aug 24 03:02:16 2025 GMT
Subject: CN=9ab03aa152c342ee11ad20ce517ba410ba689e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b8:a3:73:c7:46:fc:dc:5f:15:31:41:cf:27:
08:c0:49:2d:d2:eb:c6:33:02:43:2f:58:b2:52:61:
73:bc:30:e7:e9:28:f0:05:72:21:fd:2e:bc:ad:01:
6f:4c:5d:c3:99:90:04:7c:b2:21:90:b1:2a:8d:a9:
09:0b:4b:fc:0f:4e:82:58:7d:2f:a7:04:fb:d9:d8:
8f:b5:30:4a:94:1b:f5:97:e5:7b:25:21:68:34:be:
d6:f0:dc:da:e8:89:c8:f6:9c:3f:62:77:69:6e:63:
c0:82:9b:78:03:88:8f:05:4b:0b:dd:f8:40:aa:85:
1f:76:c1:0d:91:1a:c9:cc:26:c0:71:24:1f:ff:1e:
a9:2d:b5:74:d4:6b:a3:98:44:00:f5:26:ec:4f:53:
72:99:5f:38:ad:66:48:71:87:77:a3:57:e0:cc:2d:
48:92:63:0c:47:39:af:10:7f:58:6a:8e:bc:fb:cf:
94:e2:ae:d9:f2:09:81:05:04:84:4e:3f:3b:4d:14:
85:9a:00:85:81:c3:76:47:5e:9e:43:f5:ea:43:2e:
66:df:db:b9:af:30:78:98:37:50:51:06:e3:7b:ec:
36:c9:34:ec:7f:e3:c9:96:b0:cb:51:ab:6c:d1:01:
b1:3c:ce:72:1a:ae:16:f4:20:bf:67:8e:bb:99:62:
80:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:B0:3A:A1:52:C3:42:EE:11:AD:20:CE:51:7B:A4:10:BA:68:9E:7C
X509v3 Authority Key Identifier:
keyid:EB:C8:C4:A0:66:E2:C1:50:31:3E:E1:C0:87:47:1F:3C:8B:0D:E0:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/68jEoGbiwVAxPuHAh0cfPIsN4FQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/8e44e3-1b54-479e-a54c-47ead5372bfb/1/68jEoGbiwVAxPuHAh0cfPIsN4FQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:a6:ff:c6:7b:33:37:b8:68:a7:52:9a:4c:70:b7:8f:a9:e9:
c2:8f:d0:ad:e1:c6:ba:98:8e:35:99:32:99:78:9e:65:4e:8d:
58:b7:c2:ba:ba:73:7a:d6:15:3e:33:71:1b:5a:2c:a9:c1:70:
da:d2:5d:b5:b1:7a:d5:5b:2d:47:03:1b:e2:41:c9:15:32:3e:
5b:c1:86:21:6c:d8:36:0c:22:c2:11:c4:a4:67:79:ec:b6:c4:
2d:cd:b3:6d:6a:46:00:9b:bb:33:df:62:6b:08:52:b1:c0:d3:
cd:e7:2c:91:66:d2:a8:1c:9c:52:53:e4:ac:e8:38:44:b5:1f:
7e:f1:b3:c5:e1:ae:5c:8e:e0:ae:d8:7c:d6:5d:a3:3f:09:58:
48:a5:80:17:da:c7:ae:c7:a3:0c:a3:d1:62:a3:cd:cc:f8:29:
b6:6c:ba:b6:95:13:99:d1:fa:0a:de:07:75:b0:8b:e3:40:28:
38:56:8d:fa:3c:6a:26:3d:3b:b8:bb:2a:83:53:31:2c:6e:1d:
76:ef:22:ed:5c:a4:0b:b3:b4:53:29:a9:fe:aa:69:39:b4:06:
1b:ed:39:98:46:ff:d6:6d:4b:a4:d6:b4:bc:ed:de:1f:de:4d:
aa:9e:00:6f:cb:e5:91:ff:03:95:99:8f:5e:4c:bd:80:08:5c:
e3:e1:85:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:58 2025 by rpki-client