Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
File: 63-M4hWMPflQU5Fx2exS39UVY-Q.mft (raw, json)
Hash identifier: jxTWAdFScOjo9ahbzV6l2085IoF0IywgnsiVyM89w/w=
Subject key identifier: 79:BB:46:82:E1:61:DF:AF:84:19:05:2B:79:55:16:7A:BC:0E:A4:37
Authority key identifier: EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
Certificate issuer: /CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Certificate serial: 019A006C1F9723CF8824853B3D759FBB3DC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
Manifest number: 053F
Signing time: Mon 20 Oct 2025 07:01:17 +0000
Manifest this update: Mon 20 Oct 2025 07:01:17 +0000
Manifest next update: Tue 21 Oct 2025 07:01:17 +0000
Files and hashes: 1: 63-M4hWMPflQU5Fx2exS39UVY-Q.crl (hash: 5lGPJXRgdYlQU5AMMWsHSUDvQOT3UX8Dc3H4rOfu1GQ=)
2: DPTDWBpdKrc9YDbO3iE7iMsVeAQ.roa (hash: fxH7j3HYZ2DZdpLTyIS3kM2MJPIcdJrQ7M2HUQ6LWKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:6c:1f:97:23:cf:88:24:85:3b:3d:75:9f:bb:3d:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7f8ce2158c3df950539171d9ec52dfd51563e4
Validity
Not Before: Oct 20 07:01:17 2025 GMT
Not After : Oct 21 07:01:17 2025 GMT
Subject: CN=79bb4682e161dfaf8419052b7955167abc0ea437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:e3:80:e0:56:94:a9:ea:88:a0:48:7c:72:
74:a6:4f:3f:39:f1:0e:13:9d:5c:dd:1e:50:72:13:
84:07:09:66:c1:a4:62:8d:1e:f2:1b:98:67:6a:8f:
0a:f9:ca:10:c0:9b:a1:23:80:2a:dc:80:47:c6:9a:
a2:7f:d1:f8:85:17:e5:39:f9:5d:45:95:20:f9:b4:
fb:5b:56:fe:b1:68:51:2d:68:97:cc:25:40:b8:13:
6e:b8:4b:0b:99:c5:b6:86:de:1b:a8:ce:ee:48:30:
36:33:2d:2d:71:04:1b:b1:44:72:6f:aa:7d:c2:df:
72:f4:b9:ff:e6:ee:91:4b:2a:10:b9:70:b6:62:25:
ef:db:9e:21:75:20:18:f9:d9:78:b8:c8:b7:70:16:
0d:63:39:81:75:a3:bc:6e:f9:65:3c:f0:07:c0:ec:
b4:b6:25:40:d3:08:26:c5:bd:a8:40:3e:48:21:0b:
de:46:ab:7e:15:16:92:f5:bd:cf:64:5a:e1:4e:ab:
c8:01:25:37:08:ed:21:89:b1:a8:03:b5:34:13:9c:
12:22:58:22:52:76:5b:51:4e:ad:b9:fa:ff:bc:84:
64:5e:fc:c6:5a:db:6a:98:42:17:00:ac:83:ae:98:
1a:7b:85:3b:56:fe:2f:cd:2e:4a:05:c1:05:e2:e5:
2e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:BB:46:82:E1:61:DF:AF:84:19:05:2B:79:55:16:7A:BC:0E:A4:37
X509v3 Authority Key Identifier:
keyid:EB:7F:8C:E2:15:8C:3D:F9:50:53:91:71:D9:EC:52:DF:D5:15:63:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63-M4hWMPflQU5Fx2exS39UVY-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0b2143-96e9-43d3-878d-3668f0008648/1/63-M4hWMPflQU5Fx2exS39UVY-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:66:8e:cf:53:92:c3:21:10:6b:31:89:5a:e8:42:50:6b:d8:
b9:ca:0a:e9:31:65:3e:5c:59:0d:c6:09:16:c1:7e:5c:38:1f:
55:cc:b9:f3:64:d7:f8:b2:96:b1:86:9b:91:7e:3e:c5:73:53:
c9:42:a6:9e:78:5c:36:58:82:9b:b7:98:9f:64:44:c1:22:2d:
f0:78:9b:5b:ab:c6:68:a9:80:ee:56:68:52:0a:17:46:ee:80:
32:51:be:78:a2:dc:c2:e6:f2:67:ed:9e:c8:ef:32:a1:3c:49:
7d:17:a3:17:e4:4c:08:be:e9:f8:21:fb:ed:a0:10:e2:df:c7:
6b:1e:6e:f1:7b:56:b3:47:05:e9:cc:87:ea:32:dd:27:e8:70:
7d:40:ef:8d:df:08:d2:69:86:8e:8f:49:86:66:5e:07:63:d8:
74:ef:9e:9e:03:11:df:f8:c3:93:9c:0f:7d:d3:51:8a:92:e9:
04:9c:c2:33:b6:75:f1:ef:65:84:5e:c2:54:d2:80:65:c8:17:
d6:4b:28:12:a5:ce:33:44:ba:5a:25:95:ba:38:4d:b5:d7:c6:
39:5b:0f:f5:7c:9c:16:06:e9:49:42:7c:d7:d7:03:ec:6a:e4:
6f:8b:da:44:97:e8:97:84:2d:ef:5d:d9:a6:06:7a:19:3a:9e:
c2:f3:f2:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 15:23:04 2025 by rpki-client