Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: pP2ic/Xx9ek5agIwRU9isbN/gI6VSRpZ+WdlVaBziQs=
Subject key identifier: CB:94:F8:27:FF:12:E9:14:AA:78:F1:4D:04:F1:2C:FC:1F:95:B5:EA
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 0199FDD8F1A8EB559DCDA819C0CDF5576E26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 068E
Signing time: Sun 19 Oct 2025 19:01:17 +0000
Manifest this update: Sun 19 Oct 2025 19:01:17 +0000
Manifest next update: Mon 20 Oct 2025 19:01:17 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: Dx/QsekeaZDDRs7M6LQ1aUm2AxFnuxelNWFFCP3dchk=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:f1:a8:eb:55:9d:cd:a8:19:c0:cd:f5:57:6e:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Oct 19 19:01:17 2025 GMT
Not After : Oct 20 19:01:17 2025 GMT
Subject: CN=cb94f827ff12e914aa78f14d04f12cfc1f95b5ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:29:e9:ba:85:d4:ea:d5:c1:9d:d1:67:ab:0c:
a4:2a:cd:ae:e1:5e:70:0a:87:9a:93:4b:23:58:3f:
ee:20:0a:63:3f:c0:da:e7:dd:c4:47:44:38:64:86:
f2:a3:b8:f5:17:f9:08:dc:e5:13:37:10:3c:3f:6f:
95:31:c1:8e:c2:58:0e:60:fd:50:19:37:8b:ef:28:
cd:01:42:ff:19:e6:6d:c5:d9:d9:8b:0f:58:62:f7:
37:ef:49:1e:5f:d6:ca:a6:1d:b5:3e:d4:51:1a:e2:
07:a7:d3:d3:d4:b1:9c:7a:a7:88:6e:66:c4:b2:3c:
b6:23:5f:56:48:b2:a5:13:95:5d:07:c8:8c:ff:91:
ba:93:a6:ae:9a:f7:19:51:30:39:e1:54:da:da:09:
b3:5d:a9:6d:b9:23:63:5e:27:f3:88:f8:e3:0a:e0:
a5:00:d0:9f:6d:95:8f:53:78:56:08:8a:6a:e6:3e:
ab:7f:0f:0e:d7:3d:b2:e0:2c:b0:0f:f5:d4:0c:6a:
6c:02:4f:de:34:68:8f:e8:75:63:05:a6:e6:3b:8d:
15:d5:8e:63:8a:b9:bf:11:61:6a:eb:ca:b0:50:38:
78:0f:10:cd:87:0f:da:f9:c7:da:ba:2e:f8:4c:7f:
a5:63:36:04:91:a8:93:66:43:4d:7a:0d:cd:5a:e5:
1a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:94:F8:27:FF:12:E9:14:AA:78:F1:4D:04:F1:2C:FC:1F:95:B5:EA
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:ed:ca:8b:37:79:06:ab:0b:a4:0e:3f:b9:0f:d8:8e:2a:d9:
4a:f1:23:44:46:06:d4:e0:39:f9:78:0b:1a:e1:43:91:31:25:
33:25:bd:2e:a3:94:11:0f:8d:76:8e:e2:d4:4a:df:9b:54:8a:
37:ac:1b:9b:a4:c0:a0:64:75:dc:d2:e6:a7:fc:16:81:4f:57:
03:d1:70:9a:a7:74:42:1e:9f:06:2f:df:9e:62:ad:fb:fc:32:
f3:c0:29:d4:ca:42:a3:f4:26:98:a5:73:f4:4b:4c:ba:99:39:
e3:dc:5e:cc:bd:55:de:62:62:e5:70:a6:0a:ab:d8:2d:c8:e8:
b4:e6:db:cc:b0:fe:90:cb:f4:5c:f9:86:22:f7:61:30:53:36:
98:99:b3:de:38:f7:5b:b6:45:88:49:40:1e:c8:8b:e8:db:2c:
28:2a:28:53:d4:65:19:e9:98:76:0e:7a:b8:af:93:61:aa:3f:
eb:0d:30:56:84:23:d8:d6:ed:3b:d4:3c:e6:79:43:65:90:4e:
36:9c:d5:cc:41:e4:32:64:d9:bf:bc:41:8e:05:ec:92:ae:5b:
e8:58:d7:87:9d:85:ed:61:58:55:c8:9e:0a:59:67:9a:f8:5b:
ba:39:c4:a6:73:6d:23:2a:5a:0e:f5:87:1f:92:fd:19:cf:18:
3e:d8:2e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 00:01:49 2025 by rpki-client