Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
File: v62CMaRsZBx6swHXv77w3Ams1M4.mft (raw, json)
Hash identifier: f6Hu67blUC+Wm5e9LnC737ycANYHBM+G0t0uHiUIpRk=
Subject key identifier: AF:C7:50:F9:72:EC:0E:86:D3:BA:DA:91:DE:47:C0:38:7C:E1:FA:F2
Authority key identifier: BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
Certificate issuer: /CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Certificate serial: 019A73382812BC01FD61F2BAB3EC4828D79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
Manifest number: 13F3
Signing time: Tue 11 Nov 2025 14:00:51 +0000
Manifest this update: Tue 11 Nov 2025 14:00:51 +0000
Manifest next update: Wed 12 Nov 2025 14:00:51 +0000
Files and hashes: 1: PVx9315HXPnPOTLeQcr5qcZngYo.roa (hash: kEXPY9i0jPlv+x61rf6B3m34sobHRCkgbuQLWEQLQ8s=)
2: v62CMaRsZBx6swHXv77w3Ams1M4.crl (hash: 1mKRlvuwqQN84qKkz1IHmu5x+eHVxJSdFdlFOAmKwZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:73:38:28:12:bc:01:fd:61:f2:ba:b3:ec:48:28:d7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfad8231a46c641c7ab301d7bfbef0dc09acd4ce
Validity
Not Before: Nov 11 14:00:51 2025 GMT
Not After : Nov 12 14:00:51 2025 GMT
Subject: CN=afc750f972ec0e86d3bada91de47c0387ce1faf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5f:9a:81:27:8c:d9:71:95:92:39:db:8f:0e:
6d:3a:18:f5:da:7b:7f:80:50:da:f9:7c:63:72:c6:
49:96:e3:13:2a:a2:1f:ec:f8:05:fa:53:0d:bf:06:
4a:40:5b:d5:16:60:06:59:8c:46:a8:1f:60:e9:ae:
92:80:8e:b9:71:a7:6a:a3:c9:b2:f4:87:85:71:4d:
97:8e:0f:52:0c:54:8c:6e:13:d5:b3:93:85:96:cf:
b9:5b:bb:d5:db:64:d8:0d:f0:94:cd:0f:e5:ee:65:
14:79:fe:42:c8:c2:40:45:31:05:10:5a:d9:60:4d:
7d:12:27:f6:4a:35:ab:8e:16:d5:e2:5a:af:2a:34:
13:2d:d8:5f:53:c3:3f:84:29:fc:06:50:7e:91:49:
a3:18:a3:4d:4e:e3:8b:64:5b:e8:54:8c:88:30:2e:
e9:d8:fb:38:77:e8:de:54:39:c5:ca:b1:a6:59:40:
a1:80:80:5c:2e:05:be:6e:45:9e:5e:34:8c:9f:e1:
e5:ef:0e:40:b8:0b:f7:43:5c:27:3c:9a:95:2d:e4:
dd:5c:1d:13:f0:c7:26:d7:8c:a9:8f:a9:70:e0:a3:
ec:66:f5:f3:9f:27:d4:4e:81:52:49:2a:ed:3f:51:
96:40:38:43:5a:a8:1f:a4:99:d7:25:02:94:ca:d0:
52:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C7:50:F9:72:EC:0E:86:D3:BA:DA:91:DE:47:C0:38:7C:E1:FA:F2
X509v3 Authority Key Identifier:
keyid:BF:AD:82:31:A4:6C:64:1C:7A:B3:01:D7:BF:BE:F0:DC:09:AC:D4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v62CMaRsZBx6swHXv77w3Ams1M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/337900-380e-49d8-af4e-9dd42c171112/1/v62CMaRsZBx6swHXv77w3Ams1M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:78:e4:bf:b7:51:5c:98:68:95:e3:4b:25:bd:a5:4b:5e:d5:
0b:17:7f:62:ff:b1:ef:4d:06:4b:0d:1b:a8:f5:78:8b:27:d7:
f8:41:42:ce:a8:b4:cf:44:74:3b:7f:7d:3a:93:1e:ed:42:e9:
ab:84:a9:df:42:12:e5:ed:3b:bd:c8:6b:b0:b7:88:17:f5:5a:
b8:42:38:f9:52:45:92:e1:d2:77:17:16:d2:35:19:79:ab:a4:
78:37:02:45:4b:7d:07:5c:be:df:d0:33:9d:7f:de:1f:0a:e0:
56:af:88:b3:e7:24:90:d7:af:b4:8c:85:a0:51:05:19:ec:9a:
1c:a5:7e:26:25:c5:c2:63:0a:53:42:a0:be:fa:31:6a:94:1d:
22:36:f4:26:a3:6a:3f:54:42:c5:0d:b8:4c:28:15:5e:db:ab:
7d:35:47:ba:27:98:0a:1c:77:e0:25:cf:83:af:e0:ea:86:3b:
d6:f8:38:e6:5d:a0:cc:ed:53:b1:c8:96:b2:7d:42:da:b8:7b:
a7:a6:4f:97:b8:6a:7f:b4:66:e2:ae:e1:c7:3d:57:a0:19:63:
a6:cb:ce:64:4c:7b:d9:4d:1c:0e:c0:83:1e:35:4e:c3:fc:e4:
a4:04:4f:b0:e7:4f:1c:7f:7e:7c:1e:02:64:a0:df:46:c9:a2:
b7:36:4d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:10:11 2025 by rpki-client