Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: S5yBb16sMcjYm9EPr47I3G2QFa+LRyH5pCTciRcn1TA=
Subject key identifier: E1:84:C0:BC:2F:5F:92:45:44:D3:5B:6D:16:BF:99:BE:2E:66:A5:8E
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 0199FBB36C9004DF6EE3C981B5579FFCB54D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 16E5
Signing time: Sun 19 Oct 2025 09:01:03 +0000
Manifest this update: Sun 19 Oct 2025 09:01:03 +0000
Manifest next update: Mon 20 Oct 2025 09:01:03 +0000
Files and hashes: 1: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: CioV4WlsAn5rCz/WMl+YZYqYdiNlqgSlglwYyS0onYQ=)
2: aoaJWVMr3LsKp6dIyxA_4pNUFaI.roa (hash: t+OBdb8RsaFvnnVMtpxSRATSZxEyzbE7ET03LsrS4po=)
3: bA_e5br1PmSxWsqLddr2vRjon7w.roa (hash: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6c:90:04:df:6e:e3:c9:81:b5:57:9f:fc:b5:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Oct 19 09:01:03 2025 GMT
Not After : Oct 20 09:01:03 2025 GMT
Subject: CN=e184c0bc2f5f924544d35b6d16bf99be2e66a58e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:cd:10:bd:c0:ce:34:05:f7:02:57:bb:c2:
0c:49:6a:e9:d1:a7:90:d1:65:8b:7f:44:fe:3a:c7:
65:89:60:0d:cf:77:86:f4:e1:f9:76:99:49:4e:9c:
98:77:8a:2a:52:78:6f:03:41:a9:68:07:e5:04:46:
f2:d5:9f:9f:05:5c:6b:a0:87:05:a3:dc:e8:3b:d0:
04:fb:14:43:62:71:11:32:6c:e8:56:bf:f5:0f:c5:
c0:a9:d4:fb:1b:82:71:3e:09:61:3a:8b:ca:ca:6d:
4b:2e:e1:0e:9f:d0:da:c5:59:f9:3c:b2:e2:6e:f0:
54:98:d5:85:9e:c8:2d:29:fe:2f:8a:48:31:68:e7:
b4:8f:78:08:e7:1e:81:cb:e7:3e:08:56:c1:3a:e5:
42:58:1e:cb:8d:dc:16:cd:71:c4:9e:bc:b2:72:9b:
7f:9a:91:7e:30:f9:3d:02:c4:17:dd:a5:d6:00:7e:
c2:3a:01:5d:fe:52:9f:df:ce:ec:8c:be:0b:4e:b5:
30:97:d5:80:ac:3d:25:fa:80:8d:a5:18:87:b0:89:
4a:d8:69:7e:fe:87:76:89:7a:14:c0:9b:ef:15:74:
53:c0:9a:c9:2d:b8:eb:9b:b7:93:fd:f0:af:64:8c:
24:c3:7f:d4:ae:ca:90:c1:70:9d:95:99:73:60:d1:
4d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:84:C0:BC:2F:5F:92:45:44:D3:5B:6D:16:BF:99:BE:2E:66:A5:8E
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:40:48:1c:88:d7:01:b5:85:57:ee:09:eb:72:00:0b:07:8a:
93:1c:9f:c2:d1:1b:f0:c7:d7:eb:70:b6:af:68:f8:ec:66:0b:
97:84:d6:21:e5:58:96:78:1b:22:8e:ac:b1:63:7f:32:ee:38:
c2:fb:69:49:d7:68:6f:da:a4:ee:09:75:89:07:cb:ad:62:3a:
e8:fb:81:4d:6f:ba:cb:0b:31:4a:59:fa:6f:7e:68:14:ff:e7:
9e:0f:94:61:5f:34:bf:52:e7:85:b1:d0:b6:0f:05:a9:77:22:
4f:db:2a:83:16:35:a7:ef:a9:33:86:59:0c:dc:39:bf:ad:58:
69:04:6d:39:e9:76:8a:4a:96:c6:b8:ad:04:3e:b9:16:f8:39:
e4:fa:e1:86:29:24:a1:d4:8c:2b:c1:53:26:a2:7b:8a:0c:0a:
35:df:3a:cf:a5:99:af:b6:06:00:a7:2e:34:86:5d:b6:b0:fa:
05:c3:c8:1b:c1:12:0f:57:df:fa:cd:0b:f8:b8:f3:89:f6:6e:
e2:87:ce:a8:6a:5f:ab:77:0e:8a:72:04:58:97:a3:9d:c9:fc:
c6:b5:01:34:06:59:0e:3c:94:aa:a8:75:45:59:29:03:8e:4e:
e8:e6:a5:4a:64:ea:d8:73:28:19:6a:fb:5f:e4:18:c2:76:ef:
08:ca:33:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:30:04 2025 by rpki-client