Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: NXHrRzv4Nw9ps2+yzWu7DlWfmMKnskDl2D9W2KhW+UI=
Subject key identifier: 0D:61:DE:99:52:5D:E1:89:EC:AE:20:B7:09:64:51:24:A1:DA:3D:88
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 0199FAA101EFFE76C9FD8D3BCF32EDDBF0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 04:01:19 +0000
Manifest this update: Sun 19 Oct 2025 04:01:19 +0000
Manifest next update: Mon 20 Oct 2025 04:01:19 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: MTGaPkHba8/vCAbAYZkePzFZ8xXMsPRcGYv/jgMb8uU=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:a1:01:ef:fe:76:c9:fd:8d:3b:cf:32:ed:db:f0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Oct 19 04:01:19 2025 GMT
Not After : Oct 20 04:01:19 2025 GMT
Subject: CN=0d61de99525de189ecae20b709645124a1da3d88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:a1:a8:48:64:73:4e:5a:7c:58:99:a6:f4:
37:9f:81:eb:0f:79:ea:23:69:f8:06:f0:9f:e5:8f:
94:6e:56:93:c4:44:cc:eb:84:0d:a2:31:42:4b:43:
f2:0b:72:69:b2:e0:d8:cd:d0:3e:20:2e:0d:95:03:
f0:06:cd:ad:d0:cc:02:04:4f:6b:53:3e:d5:21:dd:
33:e2:5a:86:d8:aa:68:39:6a:e9:ee:fd:d5:f6:29:
3d:cc:a5:65:e5:54:07:b2:6d:be:c5:c6:3d:ed:3e:
94:51:a2:48:c8:8f:8e:d3:7c:31:74:f0:a0:a1:ec:
b6:cc:b9:f5:db:d9:c5:85:ff:11:28:21:23:30:86:
69:9a:f2:95:3a:06:48:6a:89:7a:ce:f2:17:e5:85:
a9:aa:5f:32:2c:e1:2a:63:d5:41:e7:51:a2:e8:9f:
20:62:33:8c:7c:b9:5b:6d:fe:bb:c8:63:fd:9b:0d:
1e:df:dd:d1:05:cf:e3:7b:17:b1:1b:a3:40:54:18:
ac:c4:a1:b0:a6:3d:73:da:34:db:14:75:ca:83:ab:
6d:37:01:b0:7f:83:3d:80:31:70:f2:ca:12:09:d3:
db:f2:80:3e:cc:66:a6:ca:2c:2c:f5:36:6f:04:14:
07:f0:3b:0f:c7:16:54:c7:69:c0:e7:5d:81:e7:02:
58:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:61:DE:99:52:5D:E1:89:EC:AE:20:B7:09:64:51:24:A1:DA:3D:88
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ec:62:fc:92:f0:04:8f:01:1e:8a:0d:e1:d1:2a:da:c9:a7:
8b:17:d4:23:a8:04:b6:0c:68:8a:81:25:a0:6d:89:31:c4:af:
86:7a:22:fc:c7:91:26:c6:c7:fe:c8:f8:f0:ec:95:5b:be:9b:
34:83:68:95:06:f4:dd:b3:90:0e:99:fb:0e:ff:07:b8:c5:98:
a6:36:38:1d:a4:43:6f:46:1c:e8:9e:2d:fa:49:68:7e:b9:80:
55:b6:ac:0e:6e:60:e0:68:8a:4f:9f:e9:26:a7:77:c8:e6:f1:
f1:83:45:f6:b7:82:6f:49:1a:e2:34:ec:cc:eb:05:f3:da:03:
73:f2:13:68:5c:e9:e5:d1:9a:58:15:57:4f:72:21:c2:29:19:
14:ab:0d:d6:e8:86:4d:a7:5d:88:df:88:4d:ed:2e:cf:bc:ec:
66:7a:a5:d4:70:eb:5f:46:f7:8f:ff:f5:4a:ab:99:07:95:5d:
ee:27:05:08:5c:fc:72:9b:e4:3c:62:6c:82:58:7f:e0:6f:bd:
11:08:bc:42:cb:3d:68:3a:5f:38:4b:5a:0c:d6:69:34:35:d9:
b6:63:9e:49:11:1f:45:78:87:0f:62:88:dc:b4:73:c5:59:b6:
a0:ab:fb:c7:ae:4d:58:fc:45:63:f3:ab:84:82:ea:52:35:23:
9b:8d:42:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:58:21 2025 by rpki-client