Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: IcrgiMIMNftqQioyI+Tw/YaDnAd4G9uYpAbPZB4y8ZU=
Subject key identifier: F7:00:73:29:D2:F9:52:B5:59:75:75:C3:A8:81:68:E6:BD:99:F3:57
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 0199FBB36E602D3ECF5A74D40CD003E9E46A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 05CF
Signing time: Sun 19 Oct 2025 09:01:04 +0000
Manifest this update: Sun 19 Oct 2025 09:01:04 +0000
Manifest next update: Mon 20 Oct 2025 09:01:04 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: jrFmUOETVVyU20eagRYfuWGj7ubF+mbYxH4qMpiVC+Y=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:b3:6e:60:2d:3e:cf:5a:74:d4:0c:d0:03:e9:e4:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Oct 19 09:01:04 2025 GMT
Not After : Oct 20 09:01:04 2025 GMT
Subject: CN=f7007329d2f952b5597575c3a88168e6bd99f357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ec:d8:dc:68:b6:a1:5f:1d:01:17:1a:7c:96:
28:80:77:3b:8a:51:e0:15:c0:07:bd:53:85:6d:e4:
56:a5:8b:c0:9c:69:3f:6e:cf:cf:6c:77:2a:e0:c6:
f9:47:c8:b6:ac:13:14:10:3d:e1:91:21:39:41:b2:
e0:f1:4c:09:ce:f4:10:ca:00:a9:4c:f0:c5:e2:d6:
86:a9:ef:23:1c:2e:e9:12:58:a5:a0:ca:e9:cc:d3:
e6:bb:9e:dc:c3:b9:51:51:4f:c8:cd:f0:69:26:a6:
37:e9:f1:f0:d5:e1:aa:47:3a:0f:ea:d0:a0:a9:f0:
1b:f8:cc:47:10:80:6c:8e:6c:03:a3:a3:3a:10:62:
b4:5f:a5:73:34:e0:fe:78:e3:de:e7:2e:c2:5f:e5:
c5:86:fb:e3:ab:eb:a0:dd:62:c4:90:fc:83:98:d0:
48:ae:7f:c8:12:cd:a8:48:25:ef:ec:00:98:d5:43:
e0:56:2e:03:fb:bf:0f:94:04:55:b9:b5:be:03:df:
e9:2d:b1:49:b2:78:bb:a2:ed:70:a0:c7:56:74:71:
93:c9:3d:dc:ce:7e:cb:10:4c:3e:a6:7a:e8:93:79:
12:e6:36:8f:10:55:c3:d5:a3:17:0d:10:ac:02:96:
f5:78:ff:c6:4c:0f:3e:41:4f:ed:f6:22:f4:7f:9e:
87:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:00:73:29:D2:F9:52:B5:59:75:75:C3:A8:81:68:E6:BD:99:F3:57
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ef:6b:41:72:15:0e:4f:df:5f:67:1a:e2:5c:18:71:3e:98:
e3:17:04:fb:d5:6b:7b:55:d3:12:7c:84:c5:d1:e6:b0:68:56:
0a:5d:c2:74:63:19:70:80:8e:e0:5f:92:03:82:43:68:48:8f:
8d:d6:54:4d:4c:26:aa:65:73:41:5f:b3:3e:df:4d:92:62:82:
46:c5:22:22:0a:84:5b:53:d1:93:3a:d8:23:07:85:78:61:d2:
b4:01:7e:4b:f2:06:05:92:dc:0e:9f:8a:27:0a:e4:03:a2:b3:
62:ca:e0:4c:c8:46:b2:8b:5a:68:16:f2:a2:54:de:83:3d:ac:
f7:cb:d2:9b:13:0f:53:f8:27:ce:c3:ad:8d:f2:cb:65:b6:37:
0e:a6:65:aa:cf:26:cd:8b:6c:a3:1c:03:6c:d9:8e:a2:cb:31:
b2:f9:0d:c1:b2:c8:b4:fd:10:3c:95:fa:2b:c7:05:75:6f:60:
ab:c2:34:2a:2d:74:07:c4:86:3f:36:d2:3b:3e:18:41:1c:84:
85:6a:ac:0a:a6:c2:7e:48:60:f0:fc:8a:f1:a7:26:9c:ba:fc:
86:6a:b5:28:e3:bb:b7:60:2c:74:93:51:2c:48:6d:1c:ef:26:
f9:bf:7a:00:39:81:58:d6:ba:66:5c:03:a3:f6:30:ee:38:bd:
3b:4d:de:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:39:21 2025 by rpki-client