Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: W0GSIgPJb6wMKbefx1G6ujjfBW7v1wkpOlqCA3lQBIw=
Subject key identifier: 71:58:69:AA:C6:93:E6:FE:CF:E5:0E:53:1C:35:03:A7:9A:59:6E:B3
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 019A4EF432548C9BEF212A6BD52B5D58B09E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 10D4
Signing time: Tue 04 Nov 2025 13:00:17 +0000
Manifest this update: Tue 04 Nov 2025 13:00:17 +0000
Manifest next update: Wed 05 Nov 2025 13:00:17 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: /Yq9IR6YOzuC+o5DNtJ3N/Wo05gNdt7QdJhzZkCgMVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:32:54:8c:9b:ef:21:2a:6b:d5:2b:5d:58:b0:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Nov 4 13:00:17 2025 GMT
Not After : Nov 5 13:00:17 2025 GMT
Subject: CN=715869aac693e6fecfe50e531c3503a79a596eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:08:95:7c:e7:ff:34:32:28:3e:36:b3:49:49:
f3:e9:fe:a0:61:1e:81:41:3e:41:69:86:61:01:3d:
b2:17:f1:08:3c:0f:ff:3b:f3:9c:25:01:e1:38:b8:
24:9c:2e:69:ef:28:a2:cc:51:38:e3:d3:2a:8a:1b:
cf:dd:ac:46:31:0c:29:68:e5:ae:80:3e:87:35:84:
2e:a3:9a:ef:56:29:6b:0b:6f:39:59:50:7a:14:0d:
95:10:88:2b:ad:c2:6d:db:a6:7c:df:35:1d:13:0f:
d4:b0:bc:dc:ba:7a:33:ed:e1:e8:6e:ca:5e:12:c5:
14:8d:9c:e1:83:97:95:c2:fe:5e:3e:aa:03:9e:ac:
1d:43:34:d6:c2:82:e8:9f:72:08:7a:73:ce:5c:fa:
0b:ff:5e:b9:88:eb:85:d1:01:b3:b2:3c:2a:63:4e:
32:0b:16:77:c9:e1:99:a1:ad:23:39:19:f9:9c:d2:
98:c9:f2:be:5d:8e:de:24:6b:8f:60:0e:76:26:af:
96:b5:20:a9:08:ec:4d:96:15:e7:b8:56:c3:0d:a8:
69:4c:97:6d:7d:96:7a:63:fc:d1:c0:c1:cb:df:31:
48:54:7d:c9:da:3c:0f:fc:32:8e:e2:cc:37:7e:99:
12:c5:be:16:dc:a2:ed:bf:b5:df:d1:bd:41:1e:b8:
ab:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:58:69:AA:C6:93:E6:FE:CF:E5:0E:53:1C:35:03:A7:9A:59:6E:B3
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:09:9f:14:9a:10:61:71:94:8b:8c:af:44:1c:be:cc:51:a8:
a0:96:79:28:91:0f:e2:e7:59:c1:ab:06:b9:64:67:3d:30:08:
0b:a7:0f:87:94:bf:dd:1b:98:b9:30:40:ed:3b:db:0b:12:5f:
90:80:fe:88:99:56:32:89:1e:ed:15:03:b0:3a:4c:75:9e:2f:
85:37:e6:44:bb:07:20:02:a4:5c:99:71:bb:d5:27:d5:4e:fd:
7e:bb:1f:0d:63:56:5b:91:f0:23:f0:5e:d7:f4:e2:48:a1:85:
83:bc:2b:6f:9a:97:d4:92:2a:1a:60:a9:b8:92:88:55:09:28:
5a:c7:df:e1:de:be:d5:25:eb:6f:89:41:6e:04:90:90:63:d4:
2d:89:59:7b:13:f1:6a:a6:8a:6c:a3:5e:21:02:81:ed:a1:3e:
d1:1d:49:6d:4a:03:3e:0e:c2:ed:f9:1b:95:88:c7:9c:3c:90:
a4:5a:54:a3:ad:a7:36:88:d5:dc:2e:db:af:ad:1c:8d:b1:c4:
49:f6:f5:c0:6d:c5:a1:b4:07:f1:ea:e9:69:e8:59:80:66:b6:
91:48:37:4b:70:09:9e:a7:3f:c4:73:74:c0:0c:83:40:6f:e2:
61:37:48:37:01:25:b1:e3:bd:0f:44:49:75:49:4b:00:01:d7:
f5:56:fe:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:52:11 2025 by rpki-client