Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
File: 63yFxELMq3Xizm3inbX9APMmdJ0.mft (raw, json)
Hash identifier: cOLI5w0Z5l0vLtJ9K2j33SG5FByTUrMSovdq8YqDgOE=
Subject key identifier: DD:99:C2:20:F8:51:7A:07:E3:26:6F:63:D7:88:B0:B4:F8:BE:59:6C
Authority key identifier: EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
Certificate issuer: /CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Certificate serial: 019A725C3F2AF0310721E08761C0BEAB6285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
Manifest number: 1227
Signing time: Tue 11 Nov 2025 10:00:39 +0000
Manifest this update: Tue 11 Nov 2025 10:00:39 +0000
Manifest next update: Wed 12 Nov 2025 10:00:39 +0000
Files and hashes: 1: 63yFxELMq3Xizm3inbX9APMmdJ0.crl (hash: b5DF+pAnhAwQRYwckjmO/1dt60WTM0VOz0Es8N7bNPY=)
2: fA_2P2jt8DuWvjRgi0qDLxLu8Uw.roa (hash: SzZb8wCnKFHeHDxJHKqTuj/wLWWWWYz/mnokDgrqWtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:3f:2a:f0:31:07:21:e0:87:61:c0:be:ab:62:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7c85c442ccab75e2ce6de29db5fd00f326749d
Validity
Not Before: Nov 11 10:00:39 2025 GMT
Not After : Nov 12 10:00:39 2025 GMT
Subject: CN=dd99c220f8517a07e3266f63d788b0b4f8be596c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:eb:14:5e:ea:be:6d:af:1e:7f:15:4d:78:65:
f7:b9:5b:26:e2:ae:90:00:51:b6:d9:09:35:ba:cd:
06:5a:2a:4b:ed:cb:2e:88:68:4f:dc:71:8e:08:e3:
6e:db:23:a9:77:a1:cd:11:36:6e:71:d3:38:89:1b:
3d:49:cd:9d:88:43:70:a4:e1:bb:e6:05:e0:b0:ab:
f3:52:48:fa:67:ba:27:c5:da:bf:f1:f1:71:7e:04:
c5:39:13:94:37:98:30:54:d4:32:65:29:ee:b5:42:
a2:68:f2:36:f4:2a:f1:cc:b5:9f:17:34:3a:c2:b4:
6f:8a:e6:72:c4:82:ec:30:73:0a:cc:6b:49:a5:94:
81:64:b4:e1:34:66:e6:45:a9:e9:78:bd:1a:93:ea:
0a:c6:49:7f:9b:ba:c9:68:22:4a:be:4d:c5:94:c6:
08:1e:86:31:c4:36:7f:d9:94:dc:b0:b6:a4:25:b1:
8a:f9:41:61:01:69:41:6f:53:64:73:a3:d9:77:31:
49:bc:59:77:27:0e:98:f5:fd:84:c1:1f:1e:6a:76:
66:f3:bd:52:c5:a0:30:0c:40:9e:a5:18:00:dc:dc:
5b:16:48:85:8b:b4:fc:44:58:3d:6f:53:1b:02:8e:
d8:9c:8d:9e:d4:27:dd:af:f2:a6:c3:c9:c0:7e:18:
84:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:99:C2:20:F8:51:7A:07:E3:26:6F:63:D7:88:B0:B4:F8:BE:59:6C
X509v3 Authority Key Identifier:
keyid:EB:7C:85:C4:42:CC:AB:75:E2:CE:6D:E2:9D:B5:FD:00:F3:26:74:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63yFxELMq3Xizm3inbX9APMmdJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/72a168-dc1c-46f4-b31c-4e659d2be654/1/63yFxELMq3Xizm3inbX9APMmdJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:1c:84:ad:7a:36:5a:55:19:80:24:a4:ca:d7:bf:d5:be:72:
e7:6f:d1:85:c8:08:5e:9b:66:3d:1a:cf:75:5e:4b:56:31:f4:
ea:2f:41:cb:f5:25:c6:3b:1f:4f:bf:cb:88:eb:d8:b3:39:11:
06:5f:01:8f:0a:55:cb:8f:0f:74:fe:53:e2:d4:af:69:88:78:
08:af:75:eb:bd:45:af:d3:fa:5f:48:c1:b0:c5:aa:ca:67:17:
2e:86:3e:b6:9e:e1:d6:ab:ae:17:2c:fa:2f:30:10:cd:72:af:
ee:67:26:99:df:4f:16:33:7b:42:b1:5a:e3:b7:fc:40:02:db:
b4:d3:2b:2d:4c:69:cf:e5:2c:db:66:ee:40:e1:30:98:55:ee:
62:cc:14:48:d8:04:91:ca:e6:1f:c8:8c:c3:51:92:74:bc:3f:
63:e0:ed:d4:ce:41:51:0d:bb:3e:95:21:e3:fc:43:e6:e8:c9:
9c:e1:bc:b7:b9:f9:15:5c:34:f0:6a:60:10:83:3d:e5:41:97:
47:f9:c7:43:b5:47:53:1e:f0:d1:76:ee:74:c4:6f:f6:4b:f9:
2d:34:c5:a7:0e:0b:76:1f:16:93:d6:51:77:df:52:50:2e:d2:
ac:b6:b4:6c:b3:c6:a5:49:cb:04:63:04:ef:51:84:d4:27:fd:
22:47:af:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:12:29 2025 by rpki-client