Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File: v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier: YpfzvAIBmJT4UZW+Oe0NZJ0TB322cfYg/Z9zL509mrc=
Subject key identifier: 87:95:ED:33:ED:EF:41:2B:B1:24:0F:36:E0:95:80:B5:4F:AA:AE:C0
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer: /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial: 019A5074B5816BF186A4ECF750F7A98C8D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number: 13E1
Signing time: Tue 04 Nov 2025 20:00:17 +0000
Manifest this update: Tue 04 Nov 2025 20:00:17 +0000
Manifest next update: Wed 05 Nov 2025 20:00:17 +0000
Files and hashes: 1: PVx9315HXPnPOTLeQcr5qcZngYo.roa (hash: kEXPY9i0jPlv+x61rf6B3m34sobHRCkgbuQLWEQLQ8s=)
2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: KLiwFW3N9zKJjTXz81LNoGR61SST39rqx9YCHRG/oIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:b5:81:6b:f1:86:a4:ec:f7:50:f7:a9:8c:8d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Validity
Not Before: Nov 4 20:00:17 2025 GMT
Not After : Nov 5 20:00:17 2025 GMT
Subject: CN=8795ed33edef412bb1240f36e09580b54faaaec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:43:51:ce:b4:e6:78:a3:f8:ce:de:a2:11:01:
c9:e1:15:ea:76:6a:7c:79:76:1c:29:44:f4:69:8a:
d4:ef:4a:c7:1a:98:e5:33:78:b3:7a:87:72:70:2e:
55:a3:74:a8:f9:b0:4b:92:e4:20:ba:43:21:f4:f1:
f3:f9:50:2d:f2:ad:c4:2f:30:8c:f7:53:2b:17:82:
31:76:1d:ed:96:b1:96:ce:60:cb:c4:b0:bd:0e:72:
bc:54:5d:82:ed:cf:bf:3f:05:30:3b:9c:64:e7:98:
f4:53:4a:09:64:2c:86:41:85:85:77:aa:66:c0:14:
48:18:dd:f1:35:c5:3c:b9:1b:da:80:31:90:ea:3a:
ba:29:bb:81:15:2d:29:04:fd:42:a9:90:43:1d:0f:
d2:52:f2:84:97:36:30:ec:97:12:d5:a8:e2:71:cf:
84:35:f6:23:7b:4c:28:56:56:f7:2e:42:f7:b2:36:
67:20:9d:3a:b1:f5:cf:65:12:2e:fe:62:a1:50:61:
56:35:c7:d7:84:97:87:69:6a:93:0d:dc:51:2e:67:
fa:dd:12:78:a1:3d:69:75:02:7c:a2:9e:cb:cb:48:
b5:31:9e:57:99:60:b5:5f:b0:f8:54:c9:9d:0c:f7:
c9:f7:e7:20:47:5d:a9:e7:56:97:b9:e7:6e:a4:a8:
2d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:95:ED:33:ED:EF:41:2B:B1:24:0F:36:E0:95:80:B5:4F:AA:AE:C0
X509v3 Authority Key Identifier:
keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5d:8b:16:75:12:73:a4:95:37:cb:a8:a5:bd:9d:8c:3a:2c:
01:ec:2d:b5:d8:f3:75:7a:c2:cd:37:f3:da:3b:4b:df:f7:ac:
56:de:15:87:59:11:3b:17:0a:cd:ab:4c:2b:a3:7b:4b:c4:89:
5a:e7:2e:fa:68:e1:c8:23:e4:bc:e2:d9:5f:61:a9:2f:b2:a2:
fa:be:de:6a:3a:88:81:90:94:46:5a:d1:f7:a0:90:01:2a:0d:
c6:ca:d8:d3:75:ba:9c:ca:55:77:c2:2f:e8:f7:91:1d:9d:a1:
69:8d:f7:fc:d2:26:c0:4d:f7:2a:d2:47:3d:4a:f9:cd:07:25:
13:59:e2:11:f8:68:c5:a3:32:ee:00:5f:79:29:56:83:ac:3f:
9a:49:05:af:2b:12:a7:5a:81:4c:ef:48:3d:6a:e5:3c:5a:2d:
8e:5d:99:25:43:f1:08:ad:79:f3:14:e1:fc:8e:52:e7:62:fb:
0d:6e:bd:c4:2f:bb:86:ed:7e:54:21:ac:0b:55:16:60:39:e0:
2c:dc:c4:29:1b:60:6d:d0:b0:36:44:35:60:99:c5:32:92:83:
28:7f:11:de:93:e7:35:b1:7e:b6:a6:85:37:72:d2:2a:fe:cd:
9f:dc:ce:45:bb:fe:60:73:d3:f4:14:c6:35:c1:53:05:d7:1a:
65:1f:e5:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:56:29 2025 by rpki-client