Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: jCzoWqQ4aSrJZrJllNTq9kAwmeMOlJEzN5bu9hXMVus=
Subject key identifier: 0B:C2:AB:B4:F8:BE:64:1F:A8:4B:10:4D:A0:13:4E:88:CE:82:EA:40
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 0198D8501219DDD7F526B1DC0249B2D5740B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0538
Signing time: Sat 23 Aug 2025 19:03:02 +0000
Manifest this update: Sat 23 Aug 2025 19:03:02 +0000
Manifest next update: Sun 24 Aug 2025 19:03:02 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: y2bKQrcPH3rP27ymbeuNiYAYVM5TJaL000trCilcDoI=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:50:12:19:dd:d7:f5:26:b1:dc:02:49:b2:d5:74:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Aug 23 19:03:02 2025 GMT
Not After : Aug 24 19:03:02 2025 GMT
Subject: CN=0bc2abb4f8be641fa84b104da0134e88ce82ea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2e:04:e7:9b:1c:1b:4a:ac:39:ef:92:b7:fd:
88:f0:6a:00:67:e1:41:21:03:e6:a8:3a:50:79:15:
bf:bc:36:b1:2c:b7:ea:2e:83:94:85:cc:07:a3:65:
ca:bc:41:43:fe:e4:2d:38:b0:7c:6b:b9:22:72:9a:
0a:51:dd:f3:6a:a6:f8:b4:d2:b1:aa:c9:b2:0b:8f:
6b:f5:7d:52:f3:07:33:7e:ba:5b:a2:48:ce:83:0e:
3a:0e:b5:d9:c9:5d:b7:04:a3:cc:b1:8c:69:90:ad:
87:5e:ce:23:51:8a:b2:8a:5e:32:d5:d4:93:22:ae:
24:1b:c2:62:3b:3c:49:67:e2:93:6a:64:c8:85:c8:
e4:9b:2f:93:4f:39:c2:35:8a:5c:4b:e0:d3:53:c7:
d7:9e:a8:ad:42:3c:a7:84:53:18:d4:d5:b0:a7:42:
55:bd:c2:2e:5b:e2:fa:fe:01:f3:00:ae:c9:d6:28:
a7:f0:10:c3:88:16:0c:f0:b7:bc:61:58:72:ee:00:
27:15:16:c1:00:cd:77:bb:eb:33:04:3a:f4:99:53:
97:fb:31:58:6a:3e:e8:a3:58:92:6c:94:a2:a8:84:
99:a2:22:a8:03:be:02:d3:2c:21:fd:fc:04:2f:14:
6f:82:66:af:df:9d:c9:84:a7:60:cf:7a:8c:d9:77:
32:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:C2:AB:B4:F8:BE:64:1F:A8:4B:10:4D:A0:13:4E:88:CE:82:EA:40
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:d8:84:87:89:f9:ab:b0:bd:6c:05:a3:24:13:ac:eb:6b:6f:
4c:d6:c1:81:98:f7:49:4d:c2:8a:da:d6:c2:5f:b1:2a:13:99:
cb:5a:f0:7c:d0:c6:b1:43:cf:a8:ad:44:c5:64:ba:42:33:94:
f3:37:1b:65:61:a1:16:7a:84:a4:8a:ce:ae:1b:89:01:f7:a5:
72:dd:1c:9c:32:39:7c:51:8d:8b:b8:63:25:b9:0e:ff:5c:61:
20:a5:38:07:49:60:de:27:81:de:8c:64:78:79:ef:91:31:ec:
8c:01:81:4f:5b:b2:c5:ef:96:c0:33:26:9b:3c:db:69:af:72:
d9:10:9c:bd:a0:e8:00:45:82:17:84:9f:d4:e4:6f:58:35:d0:
de:06:97:75:82:ee:ef:f4:53:71:5f:1f:4a:3c:b2:27:0e:75:
8a:8f:ea:22:f8:d6:82:e4:b2:87:46:13:92:b6:0b:41:08:54:
16:68:a1:20:6a:2b:d2:66:1f:fe:d5:9f:4a:d7:2e:9b:16:dc:
e0:16:e7:73:37:48:8b:60:f1:fa:50:9e:37:53:89:2f:30:8c:
63:ea:4f:bd:b1:bb:2c:ff:81:f3:6e:c4:d2:09:33:f4:b5:60:
03:68:0a:6e:3a:fc:52:40:cf:14:9e:21:38:b0:0a:ab:7f:01:
af:4e:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:26:06 2025 by rpki-client