Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: zs+XfkJXES79CtrnoXoWU6SOSUmVZi8ry/3/zvILwZw=
Subject key identifier: 45:9A:65:FA:66:D0:3F:37:C9:2F:E7:7B:CB:94:8E:CF:F3:B8:62:5C
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 0197B74586D358FF4EA6C38E387B059E65B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 0410
Signing time: Sat 28 Jun 2025 16:01:16 +0000
Manifest this update: Sat 28 Jun 2025 16:01:16 +0000
Manifest next update: Sun 29 Jun 2025 16:01:16 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: jTOhU4YXMLKroo0cmysJN50sZJoRqQYnggO7EGIazDI=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:86:d3:58:ff:4e:a6:c3:8e:38:7b:05:9e:65:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Jun 28 16:01:16 2025 GMT
Not After : Jun 29 16:01:16 2025 GMT
Subject: CN=459a65fa66d03f37c92fe77bcb948ecff3b8625c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:56:41:1c:d7:0f:a8:58:a6:38:e0:01:56:
fa:b7:24:87:3e:09:77:d0:2a:3f:03:bb:de:70:66:
4a:d1:2f:f3:e1:ed:0e:24:df:fd:c0:ee:dd:f8:36:
c4:dc:c0:d4:fa:d1:80:88:9b:57:8e:e7:40:35:6e:
2d:94:a1:ef:79:e5:dc:0c:46:61:cb:59:8f:df:04:
3b:87:42:e6:b7:76:f6:87:5d:1a:b2:7b:07:e4:ef:
bd:81:ec:08:10:f0:e9:ba:97:31:41:79:00:4c:27:
e4:e4:3e:bb:9d:3a:1b:4a:50:78:6f:0d:2d:62:f5:
b2:5f:b5:ae:03:ca:a4:06:72:da:5a:a4:9a:29:81:
3f:a9:64:58:a8:7d:0b:9e:6f:40:05:70:53:b2:ff:
45:3e:86:0e:cc:dc:06:d9:30:08:f2:09:e5:e9:b8:
fc:f9:59:82:80:3a:c6:c7:49:b4:34:d4:c8:27:51:
2c:d7:bd:7b:28:16:46:7d:5d:3c:09:7c:d0:e7:97:
df:ec:1a:6b:5f:a8:98:b6:a9:d3:57:33:1c:f7:80:
98:39:d3:e5:f8:95:97:58:13:da:11:11:2a:dd:5d:
88:11:71:31:ef:86:64:ee:1e:47:76:b5:a7:e5:38:
88:4b:4f:e0:42:15:88:8c:e4:f9:f1:30:3d:1e:22:
99:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:9A:65:FA:66:D0:3F:37:C9:2F:E7:7B:CB:94:8E:CF:F3:B8:62:5C
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:28:34:42:89:2c:37:b0:1d:da:49:21:23:02:5c:c4:85:b6:
c8:ec:bc:cd:f5:8e:1b:49:41:a2:06:0c:c6:2c:62:3d:3f:26:
cc:0f:27:47:b9:ff:99:16:27:34:4f:e7:71:ac:ca:b8:e6:87:
5f:d2:17:81:b6:72:10:35:8b:81:8d:73:90:dc:94:f8:cb:ab:
b5:6e:a0:94:81:6d:44:85:75:cb:98:f7:37:42:8c:f4:21:04:
00:ec:6e:48:26:f8:16:64:74:84:bb:e8:35:a6:8e:eb:83:bd:
ac:78:8a:75:48:66:09:ee:c9:a3:5e:dc:19:24:19:bb:ab:ad:
b3:78:0d:14:d7:58:af:68:09:88:31:cb:76:6c:2f:fd:f1:82:
2e:24:cb:26:b1:b0:7c:b8:74:e0:b1:49:0b:17:3b:46:d1:7b:
ba:dd:22:5a:6e:82:ff:9b:79:a8:40:59:2b:a5:67:58:e5:06:
ee:f8:20:a1:af:84:9d:99:bb:dd:38:7f:6e:3b:e1:48:a3:fc:
a5:13:7b:9b:8e:ed:79:e3:26:fd:d1:2b:02:01:d9:10:55:0a:
8f:8a:c4:5c:76:c1:05:b8:a4:c3:9c:bd:3c:ca:bc:45:59:34:
95:08:5d:7d:9d:04:25:8d:8b:dc:10:1c:a4:81:f6:6d:da:5a:
2b:42:66:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:59 2025 by rpki-client