Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: sHGgtBYYIc7oPie+B990SUzrjIF+NB2ZRCkTeMow8m4=
Subject key identifier: 15:B7:CF:5A:5E:03:9C:2A:B3:07:16:7B:03:01:91:88:88:70:4B:F5
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019A2667835576B0FACEE98AE12526CF837E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0F94
Signing time: Mon 27 Oct 2025 16:01:49 +0000
Manifest this update: Mon 27 Oct 2025 16:01:49 +0000
Manifest next update: Tue 28 Oct 2025 16:01:49 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: usDb4MgqerF5Ft7Ajo+1VeLHacOfJ7ZLfuuLZC9bSWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 15:57:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:26:67:83:55:76:b0:fa:ce:e9:8a:e1:25:26:cf:83:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Oct 27 16:01:49 2025 GMT
Not After : Oct 28 16:01:49 2025 GMT
Subject: CN=15b7cf5a5e039c2ab307167b0301918888704bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:0e:53:67:61:56:65:d1:74:05:a8:a5:f5:0f:
d9:2d:99:6f:14:31:6a:fe:84:f6:94:5a:e8:0b:30:
ca:49:fa:8d:cb:8d:4e:06:5a:03:ec:0d:46:7b:1e:
74:5a:fd:45:44:a3:af:2b:24:da:d6:53:eb:da:46:
aa:46:7c:53:b7:aa:66:20:0e:de:cd:8a:fe:3f:f7:
fb:28:ea:a0:08:b9:4b:b6:aa:d2:36:d1:0f:5f:75:
b8:2a:49:d9:53:00:d9:f7:cb:a8:cf:32:b3:bd:3a:
c9:65:5b:d4:cf:1e:c2:a3:7f:64:31:5a:a6:6f:e4:
d9:8b:e0:5c:e8:0c:6a:76:26:ed:00:a0:3e:b5:02:
59:d4:8f:b7:13:01:1a:c7:3e:fa:f9:51:b9:e9:43:
52:a0:cb:49:7b:1b:0f:f8:fd:25:01:60:c2:11:66:
6f:b5:3c:57:f4:c3:8b:7a:9e:58:d8:dd:3d:2b:0b:
66:6f:b7:6a:1d:0c:8c:33:61:c2:69:cc:56:e1:82:
6e:c2:3e:df:e9:e7:22:ae:1b:7a:b0:45:c9:b9:f7:
e0:93:db:39:ea:6a:7b:a6:3b:47:59:8b:2d:6f:48:
a7:f1:15:d0:bd:5e:78:49:36:24:05:8e:46:bd:14:
40:d9:ed:82:70:9d:5e:5a:34:86:c1:f4:2a:24:ad:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B7:CF:5A:5E:03:9C:2A:B3:07:16:7B:03:01:91:88:88:70:4B:F5
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:33:8d:f6:b9:f2:40:bd:95:ad:4c:7f:cd:c5:27:6b:0d:fc:
15:f1:4a:53:8d:d5:b8:db:f6:0d:a9:12:6a:7e:0d:aa:ff:33:
84:75:2f:81:6c:91:3d:90:e9:98:0e:fa:f0:1b:34:c2:9c:dc:
70:ed:62:8e:09:93:56:d0:4f:bc:c5:98:e6:69:83:fb:0f:04:
22:83:9a:3c:9d:15:23:13:18:12:43:c4:32:da:ad:ac:e0:8c:
d8:bf:54:7f:e6:6c:58:f9:b6:42:93:32:72:ab:fb:04:93:73:
48:0b:0a:2f:15:fd:33:21:a9:8f:8b:c7:7e:39:14:f1:35:1f:
1d:f8:bb:52:07:1f:59:9c:62:cd:00:79:e1:8d:85:d3:79:2f:
c1:16:63:49:9c:e8:68:9b:13:e0:d8:4b:30:75:78:b9:57:7e:
2f:4b:ef:99:63:17:c5:2b:c7:81:96:81:bd:18:60:45:d6:aa:
b7:e3:94:8a:cd:ff:d4:6d:f8:dd:79:2e:d9:ff:ed:2e:d1:1b:
37:91:ce:7c:57:7b:35:61:c9:89:78:75:5b:31:a4:9a:6e:8f:
eb:a2:e7:d3:ba:ff:25:6f:61:4b:ac:67:32:1a:d7:09:4e:ce:
7a:47:17:93:b8:f3:60:1f:2a:43:6a:a8:90:6b:34:9c:44:a2:
42:a6:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 23:38:51 2025 by rpki-client