Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: OV2fb8yvE5VpC5mojGJPX1r6a0HmLaCMo25/hCN4KGc=
Subject key identifier: 65:A5:FD:4B:47:04:AC:B9:FC:E1:9A:AC:30:76:53:07:AB:3A:8D:DA
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 019A537615937A35E239479D43A418ED2B22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 056A
Signing time: Wed 05 Nov 2025 10:00:38 +0000
Manifest this update: Wed 05 Nov 2025 10:00:38 +0000
Manifest next update: Thu 06 Nov 2025 10:00:38 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: CUCGWpwBmzXkv98aD9jt8YkZa6uG2KKH6NuUZuxKfR8=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:76:15:93:7a:35:e2:39:47:9d:43:a4:18:ed:2b:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Nov 5 10:00:38 2025 GMT
Not After : Nov 6 10:00:38 2025 GMT
Subject: CN=65a5fd4b4704acb9fce19aac30765307ab3a8dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7b:24:92:ce:cc:ae:4a:03:d6:89:bb:14:e3:
dc:d1:5c:c2:4c:33:10:ec:d3:b7:3a:0f:28:15:43:
23:12:1f:b4:7d:b5:e8:79:fa:b5:c1:3a:7a:23:7a:
60:4a:23:81:2d:48:67:03:07:ff:cb:f7:06:5d:0b:
17:ad:09:7d:0d:4b:71:a0:c0:1b:19:de:c1:fa:2f:
d1:1e:e1:9e:d1:72:56:a3:93:de:b7:64:62:b6:7c:
bc:58:ec:cb:a3:d1:37:30:36:c6:f8:55:24:30:eb:
37:26:35:e0:c5:ab:d2:6e:54:4d:6c:51:fb:4c:bd:
89:6d:1d:41:bd:8f:60:5e:c9:37:49:92:00:4f:3e:
ad:ff:73:8c:4b:13:fc:dc:b8:e5:d6:5b:54:47:3a:
17:a9:41:54:28:4f:85:31:87:06:7f:d1:9a:9b:db:
9c:a4:47:22:24:f6:f2:8e:f8:5e:bb:00:95:1b:8f:
b2:87:72:bc:9e:cb:e6:8e:e6:8a:4d:1f:1e:f6:b2:
97:c3:3e:d0:c6:82:ee:62:ea:67:07:d2:f8:19:19:
89:ef:24:c6:03:08:2d:58:71:06:e6:8e:56:4e:c4:
66:8f:37:23:99:c9:b5:5a:ec:d3:dc:11:e5:fb:51:
0d:0b:d3:bc:dd:b2:b6:ab:04:8a:89:14:65:be:9e:
a0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:A5:FD:4B:47:04:AC:B9:FC:E1:9A:AC:30:76:53:07:AB:3A:8D:DA
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a8:b6:b6:9e:6e:52:98:31:fe:56:b2:7f:70:97:1d:7e:78:
f4:e6:78:07:e7:27:2c:f7:72:1f:a4:28:ab:62:ae:fe:78:74:
4e:f0:b1:9a:a5:91:af:e2:a3:59:48:4b:0e:f2:3c:66:f6:b1:
f3:23:ff:bf:52:ad:0b:da:ca:ab:c3:70:d9:2f:7a:76:ec:26:
df:c7:4d:51:ca:56:a0:7c:bc:a8:a4:b2:4b:bb:e2:ee:fc:26:
9f:78:58:12:b3:b7:a1:a0:8b:7d:62:11:60:f1:8b:ad:e7:5b:
49:59:25:03:61:4b:66:1a:f8:fa:04:4a:08:fa:8a:e1:2f:f3:
59:51:08:14:db:ba:df:a4:f2:90:d6:95:e4:5c:d2:f7:cc:8f:
54:6f:36:23:3b:89:ba:26:f7:43:56:15:3c:fa:b3:d4:ce:3f:
42:25:d1:92:0d:19:12:24:4a:00:51:d3:08:54:6d:d0:f5:63:
63:6d:0f:77:9c:f1:ff:3b:d6:17:e6:ae:e5:85:19:3a:ef:2b:
9d:4a:49:68:d5:cf:cf:81:ea:95:e5:9f:42:16:d1:9a:cd:5b:
4b:71:3d:e2:6f:ba:a1:c3:34:61:52:f4:41:ec:17:90:cf:17:
a4:a7:aa:cd:06:b4:b7:c1:11:74:79:52:86:eb:82:5b:b2:2c:
32:6e:87:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:49:40 2025 by rpki-client