Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
File: c63mtioyesxAP-7D4asctt4tXgw.mft (raw, json)
Hash identifier: NX2r88yuZIeAS9FM59Q4pmJ7M5C5SpFK+7VsUyQ9ig8=
Subject key identifier: E2:3F:A5:81:92:B0:0B:EF:64:64:DB:58:DE:CD:3D:0B:5F:39:2B:61
Authority key identifier: 73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
Certificate issuer: /CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Certificate serial: 019A71B8D6FF8057AB2DFFACA51A4B53E32F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
Manifest number: 10E6
Signing time: Tue 11 Nov 2025 07:02:10 +0000
Manifest this update: Tue 11 Nov 2025 07:02:10 +0000
Manifest next update: Wed 12 Nov 2025 07:02:10 +0000
Files and hashes: 1: c63mtioyesxAP-7D4asctt4tXgw.crl (hash: rDFSG+heXgRnd3j1pYzEdLHeZSRvdFMJpnYRgOM2a7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:d6:ff:80:57:ab:2d:ff:ac:a5:1a:4b:53:e3:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ade6b62a327acc403feec3e1ab1cb6de2d5e0c
Validity
Not Before: Nov 11 07:02:10 2025 GMT
Not After : Nov 12 07:02:10 2025 GMT
Subject: CN=e23fa58192b00bef6464db58decd3d0b5f392b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e9:78:b5:09:a1:9c:ba:12:a3:46:c6:80:49:
22:30:f0:b1:5e:53:b4:7a:a1:93:e6:01:59:db:6a:
55:57:98:64:5b:81:02:ae:0c:05:8c:d3:8b:a7:e0:
08:8e:20:99:af:32:1a:8f:75:5c:0e:0f:d3:4c:0b:
64:18:7f:9c:a5:1e:6a:a0:bd:d7:d0:23:e7:e9:37:
d8:e7:b5:db:b1:db:dc:a5:6d:82:33:aa:2a:5a:6c:
95:0e:5d:3b:bd:5f:be:70:99:19:d7:97:70:f2:73:
75:3d:e8:29:c6:ad:ee:53:5f:66:c9:fc:ea:9e:7c:
e0:2a:fe:e3:dc:eb:5e:cc:0e:70:2a:bf:7a:c1:b4:
71:60:bc:7d:62:95:21:df:aa:77:ef:bc:c9:b6:77:
2c:40:e2:59:72:9f:a4:12:2d:d3:46:81:74:bd:6e:
b1:df:7f:e1:99:10:af:19:08:4e:2a:a3:ff:e5:bd:
f1:8d:ba:b3:d1:d7:a7:b8:ce:19:3b:91:77:3c:7b:
f6:32:c1:32:40:14:f8:24:56:cc:78:d8:e8:f9:70:
d6:17:33:86:b0:58:f2:a4:78:fd:a2:e0:c9:bd:7f:
f8:96:e0:dd:7f:e7:92:cb:f3:44:ef:cf:4e:1e:12:
36:cd:3d:39:84:99:e4:b2:31:66:5b:de:07:de:cf:
a9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:3F:A5:81:92:B0:0B:EF:64:64:DB:58:DE:CD:3D:0B:5F:39:2B:61
X509v3 Authority Key Identifier:
keyid:73:AD:E6:B6:2A:32:7A:CC:40:3F:EE:C3:E1:AB:1C:B6:DE:2D:5E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c63mtioyesxAP-7D4asctt4tXgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a1aef4-9dca-4bc1-a9e7-876b55643d07/1/c63mtioyesxAP-7D4asctt4tXgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:76:95:51:b6:56:81:79:2a:48:1a:3a:fb:61:7a:b5:e3:3f:
a0:f2:b4:58:ce:86:9d:3e:e2:91:1e:15:ad:04:ae:30:89:73:
75:97:e5:30:db:45:36:27:d8:6d:2e:f6:52:2c:41:64:ac:f6:
5e:8a:cc:d3:b1:bf:fe:a1:c0:05:39:c4:f7:ed:83:70:d8:99:
ee:9f:e7:a4:d9:5a:9c:f1:fd:77:54:3b:b6:ac:ed:fc:62:2f:
da:b4:be:09:de:bc:7a:db:f6:d7:61:65:15:a0:ff:04:5f:0f:
3c:c1:2f:6b:30:12:ea:d9:64:c4:0a:4a:6c:b1:0d:32:3a:ad:
7e:54:66:1a:8a:40:a4:67:45:29:b3:3d:46:23:a1:a2:84:74:
8d:45:65:31:81:1c:9c:12:5c:0b:10:6d:09:c5:67:e7:7e:78:
f0:c6:af:c0:65:75:77:e1:49:34:24:f2:de:bf:f4:eb:e1:1c:
95:8e:85:10:2f:4b:ea:a0:06:31:d4:cb:ba:0a:d4:cb:f0:ac:
db:ee:91:55:d3:ee:75:90:d7:91:6d:c6:5b:ff:18:01:6b:46:
b4:c6:c7:61:79:63:7e:a7:37:14:48:29:fa:68:31:c1:16:77:
1b:25:b9:4e:40:73:15:4b:ec:4b:a0:45:eb:87:c1:62:11:65:
d8:ef:16:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:23:53 2025 by rpki-client