Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: AESyRkvyrBpzD9YLQs0gVfFewLAKveWaMw/h+MVY6bk=
Subject key identifier: 1E:6F:31:62:72:CB:A1:3F:01:37:02:80:E1:0E:F7:32:61:BA:96:D3
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 01989F03B5D564A35E283A7584932B52B406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 0488
Signing time: Tue 12 Aug 2025 16:01:17 +0000
Manifest this update: Tue 12 Aug 2025 16:01:17 +0000
Manifest next update: Wed 13 Aug 2025 16:01:17 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: wJH+oyHZhSgHDAoSiP9LSZX3b7t1AOL8iQPOjBcdtyU=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:03:b5:d5:64:a3:5e:28:3a:75:84:93:2b:52:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Aug 12 16:01:17 2025 GMT
Not After : Aug 13 16:01:17 2025 GMT
Subject: CN=1e6f316272cba13f01370280e10ef73261ba96d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:09:84:a2:4a:a0:06:df:34:32:31:01:00:
9d:a6:ce:bb:92:32:44:62:aa:e0:cd:45:30:4a:f3:
68:4b:20:9a:5e:62:81:8c:da:7d:5b:5c:52:61:01:
4e:86:d1:2e:f0:4c:13:ae:87:8a:1d:e0:29:85:45:
ce:9d:fa:dd:10:66:22:83:90:44:6f:68:9a:69:a8:
94:36:bd:5a:fd:22:95:be:9c:40:e4:ef:9a:ea:da:
49:fb:1f:5f:89:1b:0e:75:06:95:0f:06:f2:c7:27:
8b:d6:f6:f5:67:eb:c7:f5:fb:50:25:8f:07:92:ac:
74:de:84:f4:84:fa:28:fe:91:13:62:72:03:da:03:
71:4e:a3:9f:52:0d:62:e3:fa:8f:d9:18:15:4d:e3:
d7:9a:13:b9:a5:b2:b1:6e:a7:ec:4a:1a:5a:36:6c:
00:47:ac:b2:e8:5a:89:7e:0c:95:90:f3:63:15:e2:
02:90:f9:7d:b3:67:18:05:9b:8e:85:f2:4f:33:3f:
cc:47:67:24:7e:c4:c8:24:3d:8e:72:66:cb:03:c2:
79:56:07:5b:70:fb:4e:74:ec:61:b0:ad:b1:48:2e:
c3:11:65:4a:b6:11:0b:36:eb:24:90:8f:40:b0:e2:
bf:c6:6c:02:fb:17:5e:a3:31:21:0f:0e:2e:4d:0b:
59:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:6F:31:62:72:CB:A1:3F:01:37:02:80:E1:0E:F7:32:61:BA:96:D3
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c2:49:fc:42:b0:3f:15:f9:24:56:c5:16:92:61:f9:c5:7a:
ea:f6:da:26:61:4f:a2:af:6c:a3:7b:7b:22:36:0a:b0:9d:90:
b8:c1:ca:d6:12:31:44:24:e1:6f:96:c3:a9:67:2d:2f:15:00:
a5:ac:bb:8f:68:00:5b:65:36:76:5d:0e:0d:fb:b2:aa:58:05:
d4:8f:5c:a3:69:bb:e1:21:89:3a:39:2c:a9:93:49:65:50:51:
8b:06:c9:93:6d:f7:48:d2:03:b8:72:7d:f6:31:cf:bc:ea:2d:
cd:35:99:3d:e0:6b:33:50:1a:92:56:db:d7:9d:f6:cc:12:50:
fd:b6:e5:66:98:97:f8:3f:09:c5:d6:e4:db:a0:69:c5:a9:25:
9b:08:3c:70:34:a0:e7:54:80:fc:3c:60:fe:8f:5b:11:22:b6:
b4:72:c5:99:9f:80:71:f2:04:d8:e4:68:49:cc:e1:cb:c0:3d:
3e:de:89:6a:da:a0:fa:89:ff:08:40:46:ea:5a:f7:e0:23:04:
85:7a:dd:5b:78:21:29:07:5d:71:c6:48:81:a2:94:cc:d0:b4:
d8:56:08:ba:48:e4:2a:48:4e:b7:11:fe:4b:27:57:10:f7:a1:
88:07:aa:fc:18:e6:0b:15:2f:81:04:47:92:67:d1:e9:22:09:
77:f1:b0:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifA7XVZKNeKDp1hJMrUrQGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2Y4Y2UyMTU4YzNkZjk1MDUzOTE3MWQ5ZWM1MmRmZDUx
NTYzZTQwHhcNMjUwODEyMTYwMTE3WhcNMjUwODEzMTYwMTE3WjAzMTEwLwYDVQQD
EygxZTZmMzE2MjcyY2JhMTNmMDEzNzAyODBlMTBlZjczMjYxYmE5NmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt2EJhKJKoAbfNDIxAQCdps67kjJE
YqrgzUUwSvNoSyCaXmKBjNp9W1xSYQFOhtEu8EwTroeKHeAphUXOnfrdEGYig5BE
b2iaaaiUNr1a/SKVvpxA5O+a6tpJ+x9fiRsOdQaVDwbyxyeL1vb1Z+vH9ftQJY8H
kqx03oT0hPoo/pETYnID2gNxTqOfUg1i4/qP2RgVTePXmhO5pbKxbqfsShpaNmwA
R6yy6FqJfgyVkPNjFeICkPl9s2cYBZuOhfJPMz/MR2ckfsTIJD2OcmbLA8J5Vgdb
cPtOdOxhsK2xSC7DEWVKthELNuskkI9AsOK/xmwC+xdeozEhDw4uTQtZXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5vMWJyy6E/ATcCgOEO9zJhupbTMB8GA1UdIwQY
MBaAFOt/jOIVjD35UFORcdnsUt/VFWPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQt
MzY2OGYwMDA4NjQ4LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wYjIxNDMtOTZlOS00M2QzLTg3OGQtMzY2OGYwMDA4NjQ4
LzEvNjMtTTRoV01QZmxRVTVGeDJleFMzOVVWWS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP8JJ/EKw
PxX5JFbFFpJh+cV66vbaJmFPoq9so3t7IjYKsJ2QuMHK1hIxRCThb5bDqWctLxUA
pay7j2gAW2U2dl0ODfuyqlgF1I9co2m74SGJOjksqZNJZVBRiwbJk233SNIDuHJ9
9jHPvOotzTWZPeBrM1Aaklbb1532zBJQ/bblZpiX+D8Jxdbk26Bpxaklmwg8cDSg
51SA/Dxg/o9bESK2tHLFmZ+AcfIE2ORoSczhy8A9Pt6Jatqg+on/CEBG6lr34CME
hXrdW3ghKQddccZIgaKUzNC02FYIukjkKkhOtxH+SydXEPehiAeq/BjmCxUvgQRH
kmfR6SIJd/Gw+A==
-----END CERTIFICATE-----
Generated at Tue Aug 12 18:14:33 2025 by rpki-client