Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
File: 63u7_vWVCecmOYb3gFiaseeZhCM.mft (raw, json)
Hash identifier: I0yOYb5dg/C/1KUs6Vd4T7AmLigd9PwbNJ3JXdG1Vsc=
Subject key identifier: 38:A1:E7:04:42:A5:EF:8A:A3:36:FB:C2:EE:C2:D6:45:E7:04:D4:A4
Authority key identifier: EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
Certificate issuer: /CN=eb7bbbfef59509e7263986f780589ab1e7998423
Certificate serial: 0199FB7CCE0E0FB19D268BC0CCCF0070B119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
Manifest number: 0C44
Signing time: Sun 19 Oct 2025 08:01:24 +0000
Manifest this update: Sun 19 Oct 2025 08:01:24 +0000
Manifest next update: Mon 20 Oct 2025 08:01:24 +0000
Files and hashes: 1: 2BUGiRoL3RcSi7pY5f5xCjUN0VE.roa (hash: 6n3B6T6zOS7/ZMATij6xHm3dHxmihydJs8pSIyJdQOo=)
2: 3vDeAfLkiHCXh_bvB_uIne94H5g.roa (hash: b46TBjcEv5nDO9EWtbqceuM5D9jO8fm++JeI+6HPFkk=)
3: 63u7_vWVCecmOYb3gFiaseeZhCM.crl (hash: 4+jUdE3u1GixoDQiC+LWY9kaIUAEci0Qq4T1Uut6JuM=)
4: JuLc15VQAUmfB5AhoFLPEFJjfOM.roa (hash: O2lLcciXAiORRxhqLiNEE2RffnRd8Q3rIUVOEkgnsXQ=)
5: LlVSfF2zbrfiTXsgpEfHg8iUgFg.roa (hash: YW2S4XaDpuDeBAX82B6q2dhsWAkKwz2ghZXjdNsB/3s=)
6: _cTjsccOlGfEayp8PXkvdYi_98o.roa (hash: FJYOiN3Fx5xaiccdaHyFz//7kwAj9hCTVSJd74dQwjU=)
7: i7e88REZIOCxR1OxendrEYYVqcE.roa (hash: NlgmAK3hiLBR5dH57/MCWPhaMtt4b6Gh+Scb1REySlY=)
8: tn6YiE2_z2Bgvd-QfHkeVEmemUU.roa (hash: hY4mdHuIs45tX1gpYMoJmJu5qNi8mSFLm+F2DSiuG10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:ce:0e:0f:b1:9d:26:8b:c0:cc:cf:00:70:b1:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb7bbbfef59509e7263986f780589ab1e7998423
Validity
Not Before: Oct 19 08:01:24 2025 GMT
Not After : Oct 20 08:01:24 2025 GMT
Subject: CN=38a1e70442a5ef8aa336fbc2eec2d645e704d4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:63:03:b5:ea:5b:9d:c4:67:ab:eb:42:ce:cc:
3e:9e:c2:1d:f5:b2:c6:8e:32:e0:d2:10:03:51:a4:
a0:ef:73:b6:4b:62:31:36:97:24:d2:a9:fa:31:52:
fb:e0:da:3c:8a:8b:d3:ba:d0:26:5b:3c:7a:e8:8d:
f2:0c:78:ee:5d:9b:f2:56:83:a7:b0:b0:94:49:f8:
17:01:ee:f0:e5:de:87:46:5a:8f:e4:1f:1c:93:50:
b8:cd:25:9c:44:08:4b:74:62:17:f7:90:8b:43:6b:
8c:11:e5:a1:da:76:c7:ea:85:6e:14:10:8e:51:59:
3b:2c:51:dd:70:fb:fb:c0:d3:b4:63:96:38:dc:b0:
c0:cd:e0:33:ad:c9:24:bc:4e:cf:74:d3:7e:c2:89:
9d:40:1c:86:0b:2c:57:4e:6d:1a:bc:36:11:70:18:
20:22:9e:cb:c6:3a:d5:69:f0:fa:a6:09:68:f6:0d:
d6:92:44:be:8a:da:cd:7a:71:c8:11:92:76:d0:df:
14:d9:04:6e:89:0f:de:60:a8:27:d0:9f:48:55:ab:
ec:ed:c5:5c:52:11:e7:91:2e:45:99:35:e2:55:68:
6f:36:2d:fa:60:79:d1:63:db:d5:05:7c:33:2e:99:
31:7a:b8:fa:7e:d4:0e:e3:2b:b2:53:0b:f9:ff:9e:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A1:E7:04:42:A5:EF:8A:A3:36:FB:C2:EE:C2:D6:45:E7:04:D4:A4
X509v3 Authority Key Identifier:
keyid:EB:7B:BB:FE:F5:95:09:E7:26:39:86:F7:80:58:9A:B1:E7:99:84:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/63u7_vWVCecmOYb3gFiaseeZhCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/63295f-18cb-4bfe-92e3-4ab5331cd935/1/63u7_vWVCecmOYb3gFiaseeZhCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:9d:c9:c4:f8:00:ef:a1:ba:99:51:9b:80:41:ef:f6:d2:33:
11:21:3e:0b:20:cc:cc:ff:a0:24:fc:07:48:df:9b:84:ec:6c:
4b:64:20:08:77:a8:ce:f5:80:90:9c:1e:02:2b:87:e6:1e:28:
08:5e:34:f0:3b:56:23:c6:00:61:c8:00:c0:0e:29:95:14:0c:
17:68:22:18:77:7a:36:ed:a2:8c:a8:97:82:63:1e:9d:a2:5f:
32:4a:b2:fc:a4:37:0c:7f:90:33:f6:aa:b0:50:2d:76:23:20:
f7:2f:52:b5:72:53:8d:e8:6a:73:3c:f2:1f:41:13:76:6d:a9:
da:38:11:b4:8b:07:56:85:3c:4a:4d:66:3c:eb:2f:2e:e8:10:
0a:19:5c:46:0a:fc:57:e0:4b:65:0b:65:31:ea:94:4f:24:a4:
71:d2:b2:b8:a5:92:71:cb:c6:3b:0a:4b:8e:b2:b8:1a:44:1c:
25:66:2d:cf:b0:e9:c5:a8:4a:90:56:37:9c:7e:cf:4b:8b:65:
38:94:7b:c5:73:62:37:cd:f7:0b:f0:0a:05:8d:3b:34:4e:1e:
39:74:b2:a5:c4:85:15:b4:04:9e:fe:ff:9f:e7:c3:51:cc:e1:
d8:41:2b:85:01:46:99:7a:df:ea:a2:e1:b3:65:26:08:5e:e0:
4d:8e:bb:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fM4OD7GdJovAzM8AcLEZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViN2JiYmZlZjU5NTA5ZTcyNjM5ODZmNzgwNTg5YWIxZTc5
OTg0MjMwHhcNMjUxMDE5MDgwMTI0WhcNMjUxMDIwMDgwMTI0WjAzMTEwLwYDVQQD
EygzOGExZTcwNDQyYTVlZjhhYTMzNmZiYzJlZWMyZDY0NWU3MDRkNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12MDtepbncRnq+tCzsw+nsId9bLG
jjLg0hADUaSg73O2S2IxNpck0qn6MVL74No8iovTutAmWzx66I3yDHjuXZvyVoOn
sLCUSfgXAe7w5d6HRlqP5B8ck1C4zSWcRAhLdGIX95CLQ2uMEeWh2nbH6oVuFBCO
UVk7LFHdcPv7wNO0Y5Y43LDAzeAzrckkvE7PdNN+womdQByGCyxXTm0avDYRcBgg
Ip7LxjrVafD6pglo9g3WkkS+itrNenHIEZJ20N8U2QRuiQ/eYKgn0J9IVavs7cVc
UhHnkS5FmTXiVWhvNi36YHnRY9vVBXwzLpkxerj6ftQO4yuyUwv5/564AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDih5wRCpe+Kozb7wu7C1kXnBNSkMB8GA1UdIwQY
MBaAFOt7u/71lQnnJjmG94BYmrHnmYQjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMt
NGFiNTMzMWNkOTM1LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzI5NWYtMThjYi00YmZlLTkyZTMtNGFiNTMzMWNkOTM1
LzEvNjN1N192V1ZDZWNtT1liM2dGaWFzZWVaaENNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZ3JxPgA
76G6mVGbgEHv9tIzESE+CyDMzP+gJPwHSN+bhOxsS2QgCHeozvWAkJweAiuH5h4o
CF408DtWI8YAYcgAwA4plRQMF2giGHd6Nu2ijKiXgmMenaJfMkqy/KQ3DH+QM/aq
sFAtdiMg9y9StXJTjehqczzyH0ETdm2p2jgRtIsHVoU8Sk1mPOsvLugQChlcRgr8
V+BLZQtlMeqUTySkcdKyuKWSccvGOwpLjrK4GkQcJWYtz7DpxahKkFY3nH7PS4tl
OJR7xXNiN833C/AKBY07NE4eOXSypcSFFbQEnv7/n+fDUczh2EErhQFGmXrf6qLh
s2UmCF7gTY67LQ==
-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:26 2025 by rpki-client