Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
File: 63ZBEa7_qGvR7DyohbY95_VlD24.mft (raw, json)
Hash identifier: AiX8Cc1khQkGuAnKDaXgSEZsy6Fmwk190vpd+UwZSso=
Subject key identifier: 8A:DA:4D:1B:EC:39:96:7F:60:74:69:9D:3D:AA:9C:46:D2:61:72:FD
Authority key identifier: EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
Certificate issuer: /CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Certificate serial: 019A71B791A28E143112C63B5F88B937A8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
Manifest number: 0BAB
Signing time: Tue 11 Nov 2025 07:00:46 +0000
Manifest this update: Tue 11 Nov 2025 07:00:46 +0000
Manifest next update: Wed 12 Nov 2025 07:00:46 +0000
Files and hashes: 1: 63ZBEa7_qGvR7DyohbY95_VlD24.crl (hash: OSINJwlrUnOIdzjEReo/ZSIVR9sJtaAGh9J6WG/rKmk=)
2: DoCQ0WPbgwcXZ4qLqyGmmLKcBIU.roa (hash: LDl36XNVECsld58k0VIf2xAj0pQ9aqDkf1O/p+KSfsg=)
3: f31JM5R62FkZoMTgS5ZW91aPR_M.roa (hash: QVIqQ/SGAQ5wpWVY00S0uRTQWsOXv08QV+Inv0hjrjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:91:a2:8e:14:31:12:c6:3b:5f:88:b9:37:a8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb764111aeffa86bd1ec3ca885b63de7f5650f6e
Validity
Not Before: Nov 11 07:00:46 2025 GMT
Not After : Nov 12 07:00:46 2025 GMT
Subject: CN=8ada4d1bec39967f6074699d3daa9c46d26172fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:55:0d:f4:9f:35:37:2d:0d:ac:d2:f1:42:
cc:a0:da:b5:2f:cd:86:87:5a:10:12:b4:9f:7e:98:
e1:b3:92:3c:ec:1f:b1:40:b8:dc:75:ba:01:5b:b2:
85:59:60:dc:97:a3:90:2a:a5:39:fe:59:f0:62:cb:
9f:10:fc:86:bf:d0:57:ac:f8:7d:6d:fa:39:63:cf:
34:04:36:08:50:3c:db:05:8d:47:77:60:2e:bc:04:
57:65:7f:0b:9b:b4:7d:0f:aa:e9:72:bc:68:35:da:
45:e1:b6:78:16:d9:63:01:14:ab:c7:39:e0:b8:47:
10:e6:2b:e1:d3:de:c2:a7:77:fe:95:70:c8:11:8c:
00:35:aa:fe:6f:9a:79:87:e4:0a:22:ea:7c:80:f9:
62:d5:b5:ff:a3:ca:70:d2:b5:6d:02:f3:c1:6b:1b:
95:01:0d:c5:3f:3d:18:c6:17:92:0a:ee:1f:c3:c9:
72:58:32:f2:ea:3b:ca:3b:d2:31:88:58:99:bd:9a:
5d:aa:1f:de:bf:d2:26:53:28:ad:4c:36:54:ba:d9:
d9:9a:31:ed:19:c9:2c:3f:a9:31:6c:1a:c3:d0:61:
68:2d:9e:a7:f9:2e:b6:a8:c6:28:5c:85:e6:12:4b:
77:86:08:ee:dc:df:79:69:03:58:40:c8:9d:e7:ba:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:DA:4D:1B:EC:39:96:7F:60:74:69:9D:3D:AA:9C:46:D2:61:72:FD
X509v3 Authority Key Identifier:
keyid:EB:76:41:11:AE:FF:A8:6B:D1:EC:3C:A8:85:B6:3D:E7:F5:65:0F:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63ZBEa7_qGvR7DyohbY95_VlD24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/03b1e7-3113-48d6-9b78-b2884888ad3f/1/63ZBEa7_qGvR7DyohbY95_VlD24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:0a:9b:e9:68:4a:0b:ad:46:73:90:0c:8e:a5:af:32:02:d5:
d5:cc:12:03:7a:a8:a3:67:69:4c:59:80:2c:04:d5:de:bf:bc:
2c:53:fd:4d:62:c6:a6:d7:f0:ca:3f:28:39:2d:46:4c:b1:53:
40:1f:cc:7c:c7:d0:f7:1f:2d:6b:79:3c:ae:a0:06:7f:41:cf:
0f:b2:99:c2:08:ca:b7:20:ec:be:cd:f5:d1:b3:a4:2f:00:e2:
c1:c7:f8:be:1e:14:43:d1:04:d8:04:6b:56:af:37:99:08:65:
f2:15:4b:84:b6:00:f2:a5:88:2e:96:98:5d:7d:aa:1e:d4:62:
a5:e3:7c:cf:5b:80:3a:6b:b1:82:96:b5:6c:40:f0:67:8a:96:
c8:0f:47:56:05:29:08:0e:62:03:50:60:b3:55:79:4a:e0:ec:
35:e0:80:dc:37:f4:c4:e9:ac:05:a6:71:cd:3a:09:b9:80:47:
1a:6a:a8:51:51:3a:0f:2f:44:f4:ba:97:53:b8:ab:a2:31:b0:
eb:8c:5a:a4:ab:a8:fd:a0:52:bd:24:4b:a5:2b:5c:72:0f:b1:
c9:37:76:26:27:8a:20:4a:55:a1:cb:c7:d1:29:02:b3:c9:d6:
39:53:b5:a3:f3:75:62:12:03:1b:27:1c:59:8b:37:08:27:0e:
95:ab:de:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:13 2025 by rpki-client