Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
File: rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft (raw, json)
Hash identifier: jOs0D+wV7eQ4YEKoz34w0Ts4yZb9W3liDEWbH0gvSSg=
Subject key identifier: C2:9E:20:F5:98:B8:30:CD:FD:89:95:DB:51:95:13:04:F6:D9:0D:FB
Authority key identifier: AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
Certificate issuer: /CN=adc647ba017c8a4599c009be04d81b268eca62f4
Certificate serial: 019A7225BE00417D1600FBE8A7378A0FDF34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
Manifest number: 063D
Signing time: Tue 11 Nov 2025 09:01:07 +0000
Manifest this update: Tue 11 Nov 2025 09:01:07 +0000
Manifest next update: Wed 12 Nov 2025 09:01:07 +0000
Files and hashes: 1: OV34MDvIRVxone0w5cHEhw4n-7g.roa (hash: iRvnIoP0GpD7jIp3Sl87VKOE59U8AR417l/5lvVpf0w=)
2: rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl (hash: L7JcUpYrmNlXsZTjVuse2TF1a+VM52Qw4Gc4plmZJ7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:be:00:41:7d:16:00:fb:e8:a7:37:8a:0f:df:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc647ba017c8a4599c009be04d81b268eca62f4
Validity
Not Before: Nov 11 09:01:07 2025 GMT
Not After : Nov 12 09:01:07 2025 GMT
Subject: CN=c29e20f598b830cdfd8995db51951304f6d90dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:7a:63:d7:a4:cd:44:21:8d:8d:ba:02:cd:fb:
3f:c5:93:62:a7:66:5c:e5:02:f6:a9:df:45:ee:4f:
83:c0:96:7f:ea:63:80:f4:24:8a:98:8e:cd:f0:65:
22:f5:ac:16:ea:bb:dd:76:c3:84:82:0d:35:37:40:
19:b3:38:fe:78:f1:bb:1d:d2:8f:1b:a6:1b:8c:30:
5a:d5:36:63:51:09:3b:50:d3:6f:48:20:19:76:c1:
c4:80:f6:24:34:3c:15:4f:62:86:2f:6e:22:e2:a9:
ce:15:cf:44:ca:10:a2:b3:22:18:1a:53:0e:2e:4f:
1d:21:c3:d0:7f:70:cb:32:d8:46:60:4c:35:32:6d:
e1:a8:b5:e9:f3:b9:e0:8f:e2:e1:af:25:3b:41:6b:
cb:a5:6c:37:34:d1:3c:3f:8a:18:15:63:01:29:8f:
93:43:31:4a:5f:3a:e3:d9:4e:5f:96:d7:94:8a:41:
f9:d4:15:82:4c:4e:ea:57:56:7c:c4:d9:02:4b:2c:
8d:d5:82:91:3d:37:fc:7f:39:33:b9:cc:d6:af:cf:
53:d9:b6:dc:e3:35:2e:19:a5:aa:83:98:4a:74:d8:
1f:d2:9e:bb:14:78:bb:2a:14:e3:46:99:63:8b:73:
39:8d:9b:ea:d2:4a:1f:6d:51:33:a4:12:6b:8a:07:
1c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:9E:20:F5:98:B8:30:CD:FD:89:95:DB:51:95:13:04:F6:D9:0D:FB
X509v3 Authority Key Identifier:
keyid:AD:C6:47:BA:01:7C:8A:45:99:C0:09:BE:04:D8:1B:26:8E:CA:62:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcZHugF8ikWZwAm-BNgbJo7KYvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/e1d4b7-746c-426f-a6c5-dd5f55010a06/1/rcZHugF8ikWZwAm-BNgbJo7KYvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3f:be:25:c3:35:14:bf:aa:28:7e:ee:21:a6:a6:f3:d3:13:
8b:86:3a:cb:f4:90:b1:21:00:96:f1:5c:9b:f0:92:bd:f6:3c:
65:5c:5e:00:33:97:a8:eb:4e:58:5f:18:f8:a1:0d:ab:49:bc:
25:37:d8:ef:c9:58:1b:4c:f7:f4:1d:39:93:12:16:4c:fc:71:
3e:20:ee:b3:bc:ae:5c:8e:21:2c:7c:ae:64:bb:e8:1d:8b:80:
ed:ad:4f:ea:88:27:42:b8:87:18:8c:f7:83:27:fc:51:d3:78:
51:6b:8d:3d:95:a1:76:2f:13:14:6a:08:ee:77:ff:5a:a9:bb:
ce:72:ed:ae:ba:94:07:20:4f:5b:21:fc:18:78:b5:33:fd:a2:
b8:5c:b5:35:e1:b6:2e:c6:9f:06:16:89:c1:a4:18:13:cf:58:
a7:d7:e3:27:28:b7:a1:ba:68:9f:e2:47:f1:9b:ee:28:1a:94:
12:72:72:1c:b8:b5:7e:cf:48:7c:43:5b:b3:76:f0:89:eb:ac:
4b:9b:ea:60:2c:7b:9b:c1:78:02:12:9c:de:b0:88:8c:0b:1f:
1e:c4:c8:d9:d9:d3:19:ee:33:85:0f:a3:3a:0d:af:e7:c8:3f:
de:d7:72:89:4a:b9:31:0f:17:0a:d9:52:88:2c:20:bf:4b:08:
54:ef:a2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:10:27 2025 by rpki-client