Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: mLqY5FQ1AplX6THGCcyAuj5nYA7vGBdd+0i4Hf1Bfto=
Subject key identifier: B5:67:93:CD:51:75:50:C2:F4:55:24:91:EB:C8:58:08:AA:68:C6:BB
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 019A4F62709AAA64CAF972B2B5EE90821FD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 062B
Signing time: Tue 04 Nov 2025 15:00:42 +0000
Manifest this update: Tue 04 Nov 2025 15:00:42 +0000
Manifest next update: Wed 05 Nov 2025 15:00:42 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: g2Sh8nNUyMMuYUFw9ZHl8J+XfxSdRE8tk6z5mnZ8evU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:70:9a:aa:64:ca:f9:72:b2:b5:ee:90:82:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Nov 4 15:00:42 2025 GMT
Not After : Nov 5 15:00:42 2025 GMT
Subject: CN=b56793cd517550c2f4552491ebc85808aa68c6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c8:63:ad:e9:2b:df:c3:0d:c6:10:1a:25:fd:
a8:73:df:7a:93:bb:c9:3d:e9:bd:99:e9:6c:e0:18:
c6:22:40:20:50:af:dc:36:51:3c:e1:74:42:0a:63:
14:af:07:40:05:4e:5e:38:79:ea:d3:b4:25:e3:1d:
7e:59:9f:99:1a:b4:b0:d1:18:f7:42:81:fd:3c:3b:
34:d7:38:13:aa:13:a9:21:20:ed:fc:02:50:9d:2d:
c6:34:4c:2b:2e:e8:0c:dc:9e:1c:b7:9a:f6:70:64:
bc:7d:f5:5c:88:46:27:a6:5f:b3:0e:29:2c:57:d5:
e5:c7:2a:a2:5d:db:41:a0:7b:d8:7f:68:cc:72:13:
4c:69:22:e9:27:f6:28:44:11:16:9c:d0:86:f6:38:
93:73:b9:54:a2:a3:52:d5:d7:c7:56:5b:48:83:d2:
e8:37:b7:ee:aa:dc:0e:be:9b:16:42:ce:d4:d2:40:
38:dd:ff:99:f0:ff:03:b8:b0:07:ab:6f:c9:25:93:
a0:f7:5d:d8:70:8d:e1:93:e1:b3:ef:1a:34:ad:51:
a3:89:0e:b3:50:60:d1:9a:a6:cd:ea:46:27:68:74:
45:58:ec:f0:0e:2b:97:05:32:27:1e:05:cd:8b:d9:
7d:a2:5b:f9:f1:05:a7:d8:9c:e2:9e:31:0c:2f:fc:
eb:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:67:93:CD:51:75:50:C2:F4:55:24:91:EB:C8:58:08:AA:68:C6:BB
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a1:e9:94:2b:78:b7:02:da:b6:ac:cd:81:2f:46:54:f5:63:
b9:ae:28:e8:08:54:7b:f3:74:cd:7e:35:c0:da:b7:35:88:b5:
32:0f:cd:cb:30:60:da:2a:ec:35:fa:0f:ba:ba:2e:f0:e5:79:
66:84:5c:0c:82:09:fe:97:ac:81:67:d3:6f:ee:e2:46:ac:42:
6c:97:b2:82:58:cf:23:9d:a1:0f:21:bb:35:81:55:df:a0:03:
c6:3f:c8:b5:f1:27:7f:28:78:80:82:51:7e:fd:5e:fa:a1:f3:
08:ca:19:ac:8a:ef:1f:64:c7:cd:b4:8d:ba:e0:02:8a:4f:d0:
b4:c1:c6:be:07:f4:10:14:54:c8:ce:e5:36:06:62:4c:c3:34:
db:a2:dc:42:d9:ca:51:e1:d0:2e:cc:d8:a2:86:90:e7:0f:17:
64:45:22:74:93:10:dd:2f:aa:eb:e1:25:c2:56:07:3c:a4:7b:
c2:41:ff:fa:b8:7c:22:28:d7:47:57:35:13:12:e7:b5:75:ac:
ea:d2:69:e7:01:46:41:42:bc:ea:e2:d6:c8:38:58:5d:80:4f:
c0:63:21:20:ab:fa:9f:ce:fe:ea:b8:1a:5c:d5:67:1e:9e:9f:
99:4d:b6:4f:e7:37:34:c6:5f:23:59:f0:7a:ca:09:71:77:e2:
97:96:44:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:57:57 2025 by rpki-client