Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: Vt2hvp7fJazxpAA3DdJuP+DT2YI+yuM/7kXfTOQIf88=
Subject key identifier: 2B:A9:55:F8:4D:5C:E7:FD:F8:59:53:CC:06:EE:5C:6F:E2:21:95:13
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019A50E3A1D68AF688693F12A5231E422887
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0FAA
Signing time: Tue 04 Nov 2025 22:01:26 +0000
Manifest this update: Tue 04 Nov 2025 22:01:26 +0000
Manifest next update: Wed 05 Nov 2025 22:01:26 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: jvEGuZx3d+YR15tATiX4uXqmmru1y19Qdv3UEgkA8pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:a1:d6:8a:f6:88:69:3f:12:a5:23:1e:42:28:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Nov 4 22:01:26 2025 GMT
Not After : Nov 5 22:01:26 2025 GMT
Subject: CN=2ba955f84d5ce7fdf85953cc06ee5c6fe2219513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ea:90:b3:e6:40:38:28:35:d7:a5:58:99:79:
1f:1a:8e:88:48:84:60:97:d0:6a:7c:4f:a1:f4:aa:
d1:65:fe:9c:24:86:f7:15:10:5d:9a:d5:c3:ab:1e:
3b:f1:69:27:35:93:19:fd:6d:c2:5a:1e:7f:01:1c:
27:f1:fb:80:cd:4c:b7:92:81:36:30:7d:30:87:0f:
a2:a6:28:6f:3d:b8:61:ae:93:c1:1a:c2:1d:00:99:
4e:f1:7b:0c:68:1a:7b:fc:a3:48:f5:d2:47:43:76:
ff:55:84:31:f0:34:99:72:bd:84:d4:ab:d2:5e:66:
8f:56:29:bd:da:f6:51:72:23:0f:d2:4c:15:66:e2:
37:55:e9:5b:e9:d4:48:b0:a4:df:2f:aa:63:bc:20:
f6:e1:82:0b:57:bd:4f:3c:03:a0:a2:2e:d2:ae:9d:
e1:05:24:56:80:d7:e1:bf:84:29:0b:63:af:14:aa:
94:b7:cf:54:e3:f4:65:a5:27:79:c3:72:47:41:b5:
ec:b9:e4:3e:9a:02:36:07:be:c2:64:b5:c6:ea:51:
f2:1a:48:bd:e3:98:df:b1:40:1c:cc:0c:ee:ca:3b:
58:1e:49:14:13:e4:37:d4:21:44:89:22:68:96:74:
42:c8:3e:28:eb:8d:e9:51:7c:74:f3:d4:19:23:01:
cb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A9:55:F8:4D:5C:E7:FD:F8:59:53:CC:06:EE:5C:6F:E2:21:95:13
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1e:26:4e:af:30:8d:75:5d:19:21:38:09:5b:24:a4:c9:bd:
f4:9d:93:1e:72:cc:b1:cd:c4:8a:26:4b:c5:00:fb:5a:48:88:
98:16:f9:88:b8:6a:e3:3e:9b:70:82:37:b0:e9:e6:f7:cb:80:
df:10:10:61:da:97:f1:3b:18:e8:19:1b:42:59:c9:34:a1:2b:
2c:c8:0c:80:7a:e5:26:d2:ba:54:5d:b4:68:bc:55:c6:00:c0:
32:ba:4f:94:8e:d4:45:b2:06:9b:2b:eb:ae:33:0c:0a:0b:a6:
8d:79:73:7c:c1:e3:3f:ff:45:15:19:f3:2a:f5:76:49:b7:e4:
7e:aa:a9:c8:5f:29:ad:f4:48:f3:8f:da:ed:c3:5d:95:3a:04:
ac:7e:df:55:f3:41:b3:a1:10:36:49:70:9a:61:3b:06:dc:ef:
d6:a7:94:fd:2e:7f:19:72:84:3c:2c:65:26:75:61:8f:a6:f5:
4e:7c:da:d8:07:bc:ea:43:60:db:1b:04:e1:c0:c3:5f:6f:c9:
8b:ed:04:33:1e:0b:d8:1c:8c:c2:d4:82:e4:e3:cf:2f:ec:a5:
06:74:05:81:3b:8a:1a:98:43:ba:0f:68:b6:67:d6:68:5b:2d:
50:8b:42:5d:7d:20:5b:59:93:88:0c:05:cd:07:41:19:ed:6a:
c8:e6:a0:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:44:13 2025 by rpki-client