Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
File: B_65rg-oknBF-DQjdDxKc6J6dKc.mft (raw, json)
Hash identifier: kcuhP+pqOa80BnF6CWrAFNkyyra3iSc+mrYmzFYEboM=
Subject key identifier: 63:C9:5C:BE:0A:1E:44:88:1C:69:20:39:05:B8:A1:72:5B:5C:21:E2
Authority key identifier: 07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
Certificate issuer: /CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Certificate serial: 0199FC8F4754941C08428F4252D09E683DD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: AqdNwPQNkfVczluLWSpSFMC_l4c.roa (hash: kZGRYpxYYa0OYlHbt48zpjPJ6+jRCPnuaKjcS//r4hs=)
2: B_65rg-oknBF-DQjdDxKc6J6dKc.crl (hash: o+bRyoVnjEDw9pximjWekVJ81g4SS0hPVOUf3kHFBhs=)
3: MDHJbiBM7aXqQpL5aKkW2vBf5wk.roa (hash: WSV4LQJShI0X02CRQl4dfytl6WA7n85th9+MfrRp6Q8=)
4: p_-2LRJT-n9yo2P0iTcZXfHP8hY.roa (hash: SE2mVBRY6QTTS2fRPv5Fxi4HtlMSW0YEJmExzyBWATQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:47:54:94:1c:08:42:8f:42:52:d0:9e:68:3d:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07feb9ae0fa8927045f83423743c4a73a27a74a7
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=63c95cbe0a1e44881c69203905b8a1725b5c21e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:9c:19:12:58:c6:53:0e:fe:9c:79:34:9c:f5:
eb:58:5e:23:78:2c:a9:8f:43:38:17:5c:87:14:c9:
9c:c7:34:8f:91:46:16:97:a6:1f:21:45:12:49:bf:
38:c3:68:03:4a:05:ae:d4:e3:3b:e4:b3:cf:8c:d0:
f2:dd:59:8c:cb:03:40:db:85:26:f3:9e:f8:f4:1f:
b3:86:06:89:9f:b3:0e:87:ed:2f:02:0a:99:12:11:
31:80:42:19:61:7d:c8:ee:bc:cb:cb:f4:ab:53:36:
9d:89:22:c6:87:9a:65:a0:3a:4e:a7:d9:d6:c2:2a:
1f:82:8a:9b:d4:1e:44:d1:8c:18:56:b1:3a:a4:b5:
c2:05:64:32:2d:ef:f4:ac:44:84:58:ba:3d:b2:74:
2d:e2:88:06:5d:fa:fa:bc:91:3b:54:8d:85:c5:31:
f0:ea:3d:8d:c4:fc:ff:3b:a6:e1:a3:23:6b:29:65:
0f:81:06:8c:eb:54:25:76:04:2a:9e:58:ae:0d:1b:
30:0f:39:75:3c:61:e2:d5:03:a3:94:4f:11:2f:46:
b0:ce:5b:c1:53:e0:2f:b2:32:d2:94:96:be:91:0c:
14:a9:11:c7:f4:71:c8:9f:aa:26:0d:7b:69:7e:da:
21:40:ba:9a:84:08:3c:6f:d4:7b:d3:e9:cf:6b:50:
f2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:C9:5C:BE:0A:1E:44:88:1C:69:20:39:05:B8:A1:72:5B:5C:21:E2
X509v3 Authority Key Identifier:
keyid:07:FE:B9:AE:0F:A8:92:70:45:F8:34:23:74:3C:4A:73:A2:7A:74:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_65rg-oknBF-DQjdDxKc6J6dKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/63e5a5-5d4f-43ee-af70-dc73f9d9be29/1/B_65rg-oknBF-DQjdDxKc6J6dKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:87:5d:f3:d1:24:89:45:98:f1:7c:48:a7:21:e1:64:98:35:
06:29:3b:6b:5b:16:56:cf:b2:9b:39:5e:d4:b2:0b:5e:fd:fb:
49:99:c9:bf:c0:2e:18:33:dd:46:73:ad:ef:74:45:00:53:df:
6b:27:55:25:33:e6:80:82:0d:83:a7:00:bc:31:cf:ba:4e:3e:
48:67:ee:ae:af:7d:68:dc:61:94:4d:3a:d8:b0:17:26:9f:cd:
59:d8:09:93:19:0b:45:46:d5:d2:8f:6e:0f:52:c1:99:28:60:
ef:98:2f:a7:d4:28:40:c3:35:bc:36:e1:19:12:c8:cd:c1:2b:
a2:96:46:ad:73:ac:d5:6f:0c:e4:b4:5a:f0:9e:aa:6b:2d:22:
ec:39:74:00:c8:c7:3e:ec:1d:ad:60:d6:e5:c5:57:72:c0:32:
6b:bb:df:cc:fb:14:ec:39:dd:20:fd:3f:71:ee:01:0b:23:1b:
84:d7:69:61:38:2d:41:cc:3f:d4:74:30:0b:44:f0:8c:08:ad:
27:a5:03:42:c6:4a:69:7a:5d:14:ed:64:52:93:79:09:45:2f:
c7:db:75:c0:df:46:80:22:e5:54:d0:d1:1f:98:cb:63:e3:82:
7f:fd:54:37:38:cc:d7:00:eb:b7:2e:66:db:8c:40:9d:5c:c1:
f2:73:58:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:25:51 2025 by rpki-client