Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
File: 75S8y9TC4P-PeqsEXhSjEfOy-f4.mft (raw, json)
Hash identifier: OG0eo8z/MQwlYkbx3vMiUxNGpiMS48PkqxF5Kig98CE=
Subject key identifier: 34:F8:DE:95:8B:A5:7E:D7:1B:0C:69:A8:B2:17:D6:8C:6E:07:9F:6A
Authority key identifier: EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
Certificate issuer: /CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Certificate serial: 0199FFFE6BF97EC1F169C28C8F113EE116A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
Manifest number: 02D6
Signing time: Mon 20 Oct 2025 05:01:27 +0000
Manifest this update: Mon 20 Oct 2025 05:01:27 +0000
Manifest next update: Tue 21 Oct 2025 05:01:27 +0000
Files and hashes: 1: 75S8y9TC4P-PeqsEXhSjEfOy-f4.crl (hash: COU4DI5xR2ZkyVdHbasCB+SBmi7Cs5cOU21ejQH4+CE=)
2: x_UGYHPi4KGbhasIbcCsyLRrLvc.roa (hash: TZUXAFaKqC1GafLAz2qnfFwZj2ZE2C3Lq2YMTRrQmKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:6b:f9:7e:c1:f1:69:c2:8c:8f:11:3e:e1:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef94bccbd4c2e0ff8f7aab045e14a311f3b2f9fe
Validity
Not Before: Oct 20 05:01:27 2025 GMT
Not After : Oct 21 05:01:27 2025 GMT
Subject: CN=34f8de958ba57ed71b0c69a8b217d68c6e079f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:c6:92:cd:0c:8c:48:f8:38:19:67:d9:fe:
7b:32:22:a0:db:86:dc:1d:96:2e:09:8f:bb:c2:e2:
17:4c:d2:0c:9d:35:08:d4:45:33:1f:22:8f:0d:76:
4d:2f:cd:54:be:ab:ee:c8:18:5c:54:7c:b3:bc:33:
d6:e6:6e:b0:d4:a2:2d:54:20:82:72:d8:45:a6:cd:
9a:71:72:ff:8a:44:3d:16:fc:b3:6f:fa:39:07:9e:
4e:6c:cd:43:bd:4c:16:8d:0c:02:c9:23:d2:a6:04:
d1:0e:66:8a:f1:fa:93:61:0f:78:da:a8:48:dc:15:
50:4f:44:03:3c:16:bd:86:59:cb:c7:0d:09:32:39:
15:03:c9:4e:76:02:52:49:f5:c5:f4:2a:05:e3:c1:
76:ff:e5:3e:1b:ef:89:15:b4:3f:a5:01:c0:68:68:
ea:ce:36:76:fa:98:82:9d:59:ac:1d:ef:31:ec:3c:
d8:86:3b:d2:58:f4:c3:f5:76:a9:f1:9b:51:3e:7e:
45:18:8b:52:3d:26:62:19:1c:f7:7b:fd:a8:60:01:
c2:96:df:fe:c7:8f:a1:0f:8f:d2:01:9d:1d:70:20:
b6:64:88:26:6b:47:68:0b:5a:75:3b:1a:e3:b0:0a:
4a:3d:2e:ca:37:57:a8:25:dc:99:85:25:71:60:af:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:DE:95:8B:A5:7E:D7:1B:0C:69:A8:B2:17:D6:8C:6E:07:9F:6A
X509v3 Authority Key Identifier:
keyid:EF:94:BC:CB:D4:C2:E0:FF:8F:7A:AB:04:5E:14:A3:11:F3:B2:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75S8y9TC4P-PeqsEXhSjEfOy-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bec253-9c29-478c-9711-cb63d6fbbfc7/1/75S8y9TC4P-PeqsEXhSjEfOy-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:c4:b3:ae:bd:d2:de:98:94:79:21:f7:6e:c2:81:33:c8:5a:
91:20:51:50:d4:16:ee:f6:d0:b5:3b:d2:94:72:e0:d5:d6:a0:
02:fa:ef:dd:63:fa:c2:ed:9d:ec:37:0a:aa:f1:5a:93:94:ed:
29:64:03:30:a2:ce:d6:3a:d0:8c:b8:7a:47:a2:25:9e:bc:44:
86:7f:cc:cd:74:f7:bd:d1:f0:ef:5b:56:9a:34:1b:15:df:78:
df:69:cf:c8:bf:e9:f6:91:67:1e:b5:c3:bc:d1:7b:58:79:1c:
80:4b:9e:6f:3c:f4:83:d8:6f:66:9b:fe:c9:ff:cd:86:b6:fd:
2f:eb:d8:61:ab:9e:ec:a5:ef:0f:0d:de:29:09:bb:ff:bd:9f:
a2:ab:88:df:c1:a6:bc:4f:dd:87:9d:65:be:b9:fb:ea:e7:e5:
a5:d4:46:4f:12:c4:d0:74:37:e6:76:61:74:03:0d:58:2b:d9:
42:3e:f2:9a:3b:58:b9:f3:1a:5d:64:dd:4b:58:eb:1a:f1:83:
f2:2b:87:6e:16:4f:82:c7:82:51:6d:09:d6:6a:36:9e:bf:e0:
17:39:38:52:77:e5:cd:c3:ce:38:d3:47:6a:ee:85:37:cc:5d:
f5:25:16:87:ac:30:1e:24:a6:a7:e9:a4:e5:d4:00:2d:76:61:
80:ce:68:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 10:45:08 2025 by rpki-client