Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
File: 63yCLR6UUXyIUVzJs_wr3hKbRUw.mft (raw, json)
Hash identifier: NobZ3Dc/WG0Aq1D1nPz4I7Ib6wUVClNqwUJTXSeNrWc=
Subject key identifier: BF:CE:6B:00:0B:D3:A2:DE:3E:12:00:CB:DE:F1:4C:FE:B5:CC:18:9A
Authority key identifier: EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
Certificate issuer: /CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Certificate serial: 019896DBFFD51C1827A43DE6DA8C74926A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
Manifest number: 1627
Signing time: Mon 11 Aug 2025 02:00:56 +0000
Manifest this update: Mon 11 Aug 2025 02:00:56 +0000
Manifest next update: Tue 12 Aug 2025 02:00:56 +0000
Files and hashes: 1: 63yCLR6UUXyIUVzJs_wr3hKbRUw.crl (hash: IIxTnYjqI7l2rCJDDCsJ2ruGGjSG5hdK+JDWemJRGyo=)
2: Hped2Nzw9BDgcMc7ThR7ZTJVfxo.roa (hash: EKotSeR3NXVLufe9gjVtCFUvkJNJlOJcwE3m9ndLGj4=)
3: hEjknnJNpRTS-Fn_xua20G61iFo.roa (hash: KjipElk/Xw3oiobuJ6dReVGkdCa06cXee6pklMf/SxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:db:ff:d5:1c:18:27:a4:3d:e6:da:8c:74:92:6a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7c822d1e94517c88515cc9b3fc2bde129b454c
Validity
Not Before: Aug 11 02:00:56 2025 GMT
Not After : Aug 12 02:00:56 2025 GMT
Subject: CN=bfce6b000bd3a2de3e1200cbdef14cfeb5cc189a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:68:c3:12:0d:4f:47:0c:be:06:c2:29:b1:71:
11:9c:70:0b:42:64:a0:ad:d1:93:28:c7:8b:18:f7:
80:67:93:14:ea:fe:d1:b5:fb:04:ed:ca:78:c3:0a:
b1:1c:e3:57:50:0f:07:5c:fd:b4:28:a0:82:9d:81:
20:64:30:01:82:9f:d1:22:33:88:5b:b1:8f:b4:4c:
2f:cf:e4:2c:8c:11:c0:3f:11:ce:7d:31:37:ca:1a:
aa:6e:8d:a7:b3:1d:57:8a:29:1f:20:d2:d5:57:b6:
dd:a6:85:c6:1f:a8:32:e9:05:3c:e6:61:25:1d:77:
83:9e:9c:72:7b:2e:02:b5:a0:50:68:66:d1:91:81:
39:68:b1:8a:39:df:9c:d7:79:50:e6:70:bc:0e:e2:
b7:f8:d4:c6:a5:5a:86:d8:d2:de:3a:76:46:66:ef:
5c:6a:36:21:5e:a4:5f:69:dd:0b:05:5a:7b:dc:8f:
8f:a4:44:a7:4d:68:0f:b5:fc:7b:0f:89:f0:41:33:
4d:76:a9:99:99:01:00:1c:24:38:a7:13:ec:d3:7c:
1a:a2:7b:20:77:50:a7:06:90:88:ec:21:07:78:46:
44:b7:42:7e:86:98:63:06:3b:35:b4:46:0b:67:ba:
02:c9:30:7b:0a:ff:ff:11:82:b4:36:42:44:d7:06:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:6B:00:0B:D3:A2:DE:3E:12:00:CB:DE:F1:4C:FE:B5:CC:18:9A
X509v3 Authority Key Identifier:
keyid:EB:7C:82:2D:1E:94:51:7C:88:51:5C:C9:B3:FC:2B:DE:12:9B:45:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yCLR6UUXyIUVzJs_wr3hKbRUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/11933b-fc0b-410f-9c34-1064504e2b97/1/63yCLR6UUXyIUVzJs_wr3hKbRUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:55:13:61:43:6c:72:5a:d4:28:72:1f:03:ad:3b:5d:a8:92:
4e:2b:91:2d:a6:83:18:8e:e2:ea:4f:93:66:6e:72:e8:82:01:
2c:83:c2:db:de:29:e0:43:4c:56:b1:ae:fb:ba:85:c6:a7:92:
39:5e:9d:dc:e9:ed:59:92:49:cc:df:6f:c8:0a:a4:69:fd:6c:
63:5e:8b:6a:1f:03:5e:d1:0a:87:14:72:31:c4:c3:b7:3f:b9:
98:d3:17:09:ac:5e:69:4c:e4:95:4c:36:33:5c:e9:5e:2e:c5:
59:f4:4a:65:9b:6b:b5:9e:9c:d8:f9:f3:5d:df:c9:54:42:85:
dc:29:63:5a:69:aa:26:c1:f7:ec:83:33:a0:88:25:50:0d:62:
5f:33:02:6a:ac:a3:f0:5d:33:7c:ec:10:56:b7:8a:fb:a8:9d:
1c:7e:2b:cb:50:81:0b:c9:57:8c:ec:8a:5f:61:4c:ab:b9:d2:
4c:9d:da:43:d1:4d:52:ce:e4:ff:ec:4e:f3:c1:05:b1:ef:48:
bf:ed:fd:fc:a4:ef:9b:f3:0b:55:7a:c8:b2:49:97:fd:6d:c1:
0e:68:56:c5:7b:fd:ab:84:49:13:4e:a0:6c:61:37:78:16:ab:
41:a9:26:5e:1c:c7:12:f2:d3:3d:df:45:66:11:f6:ad:53:9d:
0e:b2:41:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:22 2025 by rpki-client