Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: U7kSvqgsiesSasvzce/NFARVAgsP83NfJfN2SSurb1E=
Subject key identifier: E8:02:18:7E:B9:6E:4D:C8:D5:6A:82:E1:BD:59:72:B2:03:4B:B0:A2
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 0198D85099C709C3E0A938B8B1A063158081
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 0EE7
Signing time: Sat 23 Aug 2025 19:03:37 +0000
Manifest this update: Sat 23 Aug 2025 19:03:37 +0000
Manifest next update: Sun 24 Aug 2025 19:03:37 +0000
Files and hashes: 1: ICF9-8vvbCXZE0TG_43Pg-xYM4M.roa (hash: A9z/pYI8ILSUkvCDutc/OWQYTxrR/67Nl1hcE923c7k=)
2: TsCWDxVff6QaxaizE0J-q4omkO8.roa (hash: j7KvYc6H4pKbwE/zviJ5I7BwKwOsE0GKrwWDFvcpOCw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: nZQvY8lu3y50AsEDNhBZmJei54HmX8EfGL+lqcz/OL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:03:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:99:c7:09:c3:e0:a9:38:b8:b1:a0:63:15:80:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Aug 23 19:03:37 2025 GMT
Not After : Aug 24 19:03:37 2025 GMT
Subject: CN=e802187eb96e4dc8d56a82e1bd5972b2034bb0a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:cb:8a:03:0f:b5:87:2a:70:56:57:81:3a:
15:5a:30:46:5b:39:81:29:8f:13:83:3c:34:8a:a2:
53:3f:f5:9a:aa:78:3b:f2:ac:5b:5d:52:d8:2c:19:
f7:94:87:ea:29:89:82:02:c2:3e:2b:48:ff:4a:aa:
96:48:55:c8:02:db:2c:57:6f:19:6c:c5:e7:2f:d5:
85:d8:89:ae:37:6d:0b:48:7f:c3:08:a2:c5:05:99:
de:c5:ef:2b:92:dd:0c:a7:b4:44:b0:d4:e5:61:7b:
10:98:48:b5:3c:a8:ae:a0:52:62:a1:b1:7c:83:72:
b9:1a:28:52:29:f1:dd:e7:5c:ea:ab:b0:5e:a9:63:
81:69:84:88:a1:b7:16:a2:25:52:44:bd:87:5d:43:
35:a1:37:cc:c4:ea:2a:93:3f:c8:6f:d7:17:76:30:
d1:67:3d:e8:4b:43:9d:95:1e:7a:a9:f8:46:ff:ba:
d4:9c:4c:87:b4:e5:8d:b7:49:10:e3:51:8a:67:a2:
b0:17:d9:fb:61:79:76:c1:3a:d9:d5:6d:f6:cc:d8:
a1:56:65:c1:51:60:b2:b2:63:2b:03:db:77:a9:40:
86:32:64:a6:44:87:25:fa:5e:d7:27:20:79:9a:88:
7d:32:06:52:ec:c8:eb:e6:f5:e5:0f:1a:a3:32:4d:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:02:18:7E:B9:6E:4D:C8:D5:6A:82:E1:BD:59:72:B2:03:4B:B0:A2
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:6a:e9:df:45:90:28:e2:ac:be:f6:6c:77:41:93:99:49:2b:
94:ec:9c:b9:19:1c:1a:06:21:8d:40:a4:74:b7:8a:34:20:92:
9d:0c:5a:c1:70:bd:e2:79:d2:6e:a5:1e:58:bf:1c:8e:00:34:
62:77:3c:56:2b:db:78:5b:5b:26:b5:d1:ab:df:af:83:de:4c:
f0:96:c8:84:59:ef:6e:b7:9c:10:77:2d:66:82:4a:dd:a4:4e:
e8:4e:93:e4:8e:4a:76:17:5f:23:2f:cf:53:2c:60:44:14:b4:
77:d1:03:55:8e:23:59:66:dd:85:c7:4c:dd:09:71:0d:7e:45:
9d:72:c1:61:6d:0a:d9:b5:e7:64:6e:55:f2:d7:a3:a4:93:71:
01:4e:f3:59:7f:44:9c:8e:b0:b3:32:df:63:05:e5:b7:14:27:
20:7c:b7:c0:9e:a2:c2:fd:5f:90:15:bc:b7:ff:82:89:46:b5:
ba:9e:31:0c:58:32:ed:74:37:6e:bb:27:eb:c4:84:31:ed:51:
23:38:a4:3c:01:7e:10:9a:40:72:63:49:56:92:0d:88:df:63:
fc:59:3c:b1:c9:6f:31:bf:49:a5:9e:ca:c6:3f:26:39:db:05:
4d:48:52:8b:ef:a7:a9:0b:97:bf:0a:ec:a0:f6:9d:80:ec:cd:
88:b6:a7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:23:33 2025 by rpki-client