Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: 4EV4zhmihtQJnxVo9G+PXrFvfppFsk2gVQx+4BmeXTI=
Subject key identifier: 61:59:19:B8:4A:D2:3B:0D:31:F6:E2:72:9A:16:9A:2B:E1:73:31:9E
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019A01B67BD7DB83AF58663042F10160118D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0F81
Signing time: Mon 20 Oct 2025 13:02:07 +0000
Manifest this update: Mon 20 Oct 2025 13:02:07 +0000
Manifest next update: Tue 21 Oct 2025 13:02:07 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: w4nRf0uXcVAZ5X6WrC/9T+EAhFW+K99aFp+beBfQm6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b6:7b:d7:db:83:af:58:66:30:42:f1:01:60:11:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Oct 20 13:02:07 2025 GMT
Not After : Oct 21 13:02:07 2025 GMT
Subject: CN=615919b84ad23b0d31f6e2729a169a2be173319e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:19:46:03:5a:a5:3c:0d:cf:e7:53:f5:72:8c:
7c:c0:16:26:8e:b1:df:3d:f3:3e:cc:0f:4c:3b:91:
05:bd:97:77:b7:a2:60:bd:3a:57:44:b3:9e:06:a2:
b4:39:35:24:21:8b:5c:cc:4b:2f:bd:ff:5d:23:1d:
1d:69:23:7e:e1:d9:7d:b9:8d:3f:1b:52:a1:00:6a:
d4:a3:b4:40:29:de:18:2c:cc:6c:6e:48:da:bf:81:
56:45:01:ac:6b:83:2c:ba:7f:d5:b4:0a:ff:9c:bb:
d5:9c:5a:a4:c4:7a:38:6f:69:5e:94:08:c4:70:3f:
dd:ba:f3:b4:fd:cd:8f:0b:6f:0a:19:4e:a1:8f:c8:
1a:fb:4c:d0:bd:f9:68:3b:a6:46:de:22:77:00:8e:
e4:fa:f9:a2:85:b4:a0:d1:e8:f7:a3:29:2c:cf:e2:
81:ff:c1:c4:04:4c:94:72:c2:66:dd:f1:a7:d0:c4:
92:bf:73:a4:ca:77:8c:67:52:38:85:ff:65:55:68:
81:6a:2d:c1:df:53:77:13:a5:ed:a0:bc:07:0d:99:
fb:18:6a:01:6d:b8:d1:bb:1b:2a:fb:8b:21:92:53:
3f:6c:dd:72:3f:b6:2b:51:76:50:1a:5f:c9:c2:3f:
2d:d6:db:ec:89:32:99:c2:f5:af:1f:bc:63:91:20:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:59:19:B8:4A:D2:3B:0D:31:F6:E2:72:9A:16:9A:2B:E1:73:31:9E
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9c:6b:fe:64:fd:ba:88:b4:98:eb:08:00:a7:f3:22:b6:e7:
5b:f5:d7:31:fd:78:e5:df:a9:fe:2a:96:0f:db:4b:46:fb:d6:
17:d5:d7:ff:87:62:e9:1b:9f:46:42:b4:56:40:89:fd:b2:60:
ed:77:b0:b9:91:a7:dd:34:c3:bd:86:2c:53:a0:25:d3:29:c8:
ab:48:9a:8a:12:1d:95:69:bd:f3:63:67:24:4c:a1:56:7a:ba:
e3:80:7a:59:79:35:a9:1f:2e:5e:78:ac:d4:e2:62:95:b7:0e:
9c:c9:fb:d5:31:1a:89:db:ca:51:9f:0c:91:90:3d:15:54:0d:
7b:b6:50:96:21:4f:7b:8a:54:e4:7c:ba:fe:8d:65:d8:3a:0b:
36:e0:96:9b:fe:26:54:28:5c:da:4b:e0:a8:77:af:28:ca:a4:
21:c0:4b:ec:49:f4:20:a4:0d:df:24:ae:a8:40:a2:84:1c:47:
a3:87:21:62:42:dc:42:48:66:2d:66:3e:1e:15:02:01:27:07:
13:40:c8:a1:47:c9:71:41:5a:d4:c0:42:03:fc:f6:f0:fc:d6:
3b:29:b7:d4:82:32:3e:9c:54:af:0b:5a:88:d4:b9:60:05:82:
26:f3:3a:49:db:39:8f:ab:c8:32:c2:c2:bc:db:96:3a:f7:34:
b5:cb:24:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 23:19:59 2025 by rpki-client