Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: LKiRVz+xUHj6jw7Iq+WlZVKuDmcIOOp2EKYn1lqHZg0=
Subject key identifier: 4C:6D:A4:CC:E6:77:FC:36:37:22:8B:0E:5E:BE:83:09:F1:BE:F6:CC
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 019A725C750D67DD1FF9AB8122C8698FA50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 057A
Signing time: Tue 11 Nov 2025 10:00:53 +0000
Manifest this update: Tue 11 Nov 2025 10:00:53 +0000
Manifest next update: Wed 12 Nov 2025 10:00:53 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: anL9XtSNSFVV1hSbtz4luxWOfW0E6DPDt14X9xSBZww=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:75:0d:67:dd:1f:f9:ab:81:22:c8:69:8f:a5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Nov 11 10:00:53 2025 GMT
Not After : Nov 12 10:00:53 2025 GMT
Subject: CN=4c6da4cce677fc3637228b0e5ebe8309f1bef6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c0:30:44:3e:6c:7a:17:68:07:ec:44:cb:10:
58:e6:35:28:5a:b1:1b:52:ff:44:0f:58:97:4f:4d:
79:23:f6:3e:2b:36:24:be:02:25:73:3b:81:f4:e0:
5f:c7:d2:22:07:85:2c:71:f5:3b:f8:ad:0f:64:3f:
0e:2f:cd:a9:5a:71:0e:20:69:f3:7c:fc:83:b1:89:
95:6c:0b:6e:d5:da:e0:84:ac:25:f8:9c:64:80:3e:
f9:ac:cc:79:63:82:83:b3:c0:cf:89:a0:99:dc:23:
b7:6e:6a:93:21:60:40:4d:10:ea:ec:74:31:02:8a:
a2:04:bf:a1:36:c5:70:68:d7:89:58:4c:e1:34:d6:
ce:f5:88:ac:4c:70:ed:53:24:79:94:27:f8:e2:ff:
4c:66:95:fe:cf:c0:ef:b9:71:1d:3d:35:24:be:5f:
88:e2:97:e8:43:40:e5:c8:3d:33:e8:c2:03:e0:38:
89:a5:3b:fc:b9:f7:fc:ad:23:cc:cb:c7:bf:58:a4:
6a:0e:ae:52:98:ee:f6:e8:af:b2:7a:18:ab:10:42:
d8:bb:fe:8c:fe:6e:8c:b2:73:bb:ad:73:9a:7d:06:
8b:7b:7b:fd:46:9e:60:6a:9b:dc:06:43:d5:e6:8b:
a2:96:72:0b:74:23:ae:c4:8f:b2:a2:78:ce:bb:03:
8f:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6D:A4:CC:E6:77:FC:36:37:22:8B:0E:5E:BE:83:09:F1:BE:F6:CC
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7a:91:f0:1e:70:8d:22:86:b6:9b:c2:80:71:d3:c5:3e:07:
dd:ef:ec:33:e0:07:f7:cb:96:96:fd:a1:e3:ec:94:7c:a5:19:
8e:b1:6d:a4:69:98:db:56:ce:6e:76:6d:8f:a2:ac:94:0a:3b:
15:33:15:a7:5b:67:ae:8f:fa:5d:27:4e:b2:dc:70:95:bb:c4:
bf:f8:f8:f2:37:c8:60:ed:74:ce:69:b7:36:c9:d0:e6:6a:f8:
09:f3:e5:db:e8:e6:3d:cc:7a:2a:38:c6:1c:6e:dd:52:f3:0d:
62:30:bd:88:41:3c:13:66:6e:a3:3d:55:59:cc:3a:16:e8:9d:
40:61:54:9c:29:05:44:f9:e5:6d:37:9e:73:11:c0:b7:f1:bb:
f1:e5:de:fc:1a:58:8e:62:c8:0c:55:35:88:c6:05:b4:cd:78:
96:d1:8f:d2:a1:68:1d:04:7b:f7:45:14:8b:ed:6c:dd:0e:3c:
d4:ee:3e:dc:b1:47:57:29:3a:bf:60:ba:ea:5a:e1:09:17:92:
97:94:35:37:b8:74:62:23:99:4d:b6:8d:e2:bc:c3:42:64:80:
64:cb:6c:59:1f:9f:10:6d:00:42:f7:cf:28:75:56:a2:0c:c4:
72:85:23:0c:0c:1a:65:d8:24:fc:d6:55:29:ef:15:5f:23:1d:
01:a6:72:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:51 2025 by rpki-client