Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
File: 7149b2n6K0JReRHq5WlXMDB5kVY.mft (raw, json)
Hash identifier: rZJX78708Cq7dwjKmRdX5BX8Vz4/uYfBEcLueE3LDwk=
Subject key identifier: 76:E4:02:D1:8D:D9:12:2D:1B:55:7A:F2:96:75:A8:5A:39:90:42:AE
Authority key identifier: EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
Certificate issuer: /CN=ef5e3d6f69fa2b42517911eae569573030799156
Certificate serial: 0199FC8F48AC1543B76FBAA1A0CDBFCEF1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
Manifest number: 0C3D
Signing time: Sun 19 Oct 2025 13:01:12 +0000
Manifest this update: Sun 19 Oct 2025 13:01:12 +0000
Manifest next update: Mon 20 Oct 2025 13:01:12 +0000
Files and hashes: 1: 7149b2n6K0JReRHq5WlXMDB5kVY.crl (hash: hkW8Q1VfbL9zt2vb9q+M7RC0GOBVuU3jNZC9fDzmWiE=)
2: sQ3JYG1qE-VbpJkkUv7gjERWISw.roa (hash: Eu9amXI9PIYJvHJFlrP4Ds55UyoCv7usyPM4xlXYBx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:48:ac:15:43:b7:6f:ba:a1:a0:cd:bf:ce:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5e3d6f69fa2b42517911eae569573030799156
Validity
Not Before: Oct 19 13:01:12 2025 GMT
Not After : Oct 20 13:01:12 2025 GMT
Subject: CN=76e402d18dd9122d1b557af29675a85a399042ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:3a:0c:3f:b3:5d:1d:b0:3a:72:0b:7d:8b:
37:58:2b:ed:e5:ab:ff:03:64:d1:9d:ca:66:c4:42:
f2:fe:73:97:93:e2:81:5b:8a:18:59:ec:a8:c6:9d:
2c:47:9f:6b:6b:0b:63:68:f2:2e:64:d1:d9:fa:9f:
d9:6e:f9:fa:5f:0b:da:50:c6:7c:37:5d:23:6c:e9:
ec:9a:e6:4d:3a:17:5e:1c:e2:31:cc:98:3e:00:5e:
82:5c:5b:7f:ab:9f:72:0d:19:b0:de:00:9b:1f:49:
ba:5a:40:df:47:69:1a:cc:b5:f1:e3:65:27:4f:50:
d7:fd:c9:53:2b:8b:8f:82:d8:13:b1:60:7f:6b:5d:
95:79:03:33:c7:a2:a6:1e:d3:40:a0:03:6d:0d:48:
8b:8b:51:79:c7:d7:df:0b:eb:e1:f5:73:58:d2:69:
df:1a:21:d6:28:37:ce:a7:e8:6d:5f:d8:47:39:d0:
df:c0:76:ee:7a:f1:fa:47:2f:a4:20:1d:84:45:34:
d6:38:53:03:31:54:99:e8:c4:a7:8c:e5:90:d4:66:
e5:46:22:4a:f0:39:7e:af:40:05:cd:b6:1b:f7:3b:
8c:8b:96:0d:8e:9d:e4:a6:fa:29:66:4b:8b:a6:65:
83:e7:47:72:1e:3d:0f:cb:e0:e0:19:91:22:92:3f:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E4:02:D1:8D:D9:12:2D:1B:55:7A:F2:96:75:A8:5A:39:90:42:AE
X509v3 Authority Key Identifier:
keyid:EF:5E:3D:6F:69:FA:2B:42:51:79:11:EA:E5:69:57:30:30:79:91:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7149b2n6K0JReRHq5WlXMDB5kVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/272d50-7bb3-44b0-8254-fcff9e847ca2/1/7149b2n6K0JReRHq5WlXMDB5kVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c2:53:08:dd:34:6f:3e:e8:13:7e:1d:bd:a6:36:73:58:55:
5b:aa:14:e4:67:6c:7d:ba:1d:92:bc:59:95:65:8f:07:9b:89:
1e:f1:5e:fc:64:90:36:62:cb:73:e4:51:ae:ba:bf:33:1b:28:
c6:50:ca:d5:b9:5c:d3:e5:a5:ae:05:a4:ea:d4:8c:50:a8:c0:
6b:78:27:b5:1a:d0:ed:cd:1e:1f:10:9e:ab:3d:04:95:f0:f8:
32:cf:d7:f3:17:0f:13:12:2d:bc:5a:6d:3a:ac:ab:5c:2c:76:
3c:7b:ab:d6:b8:44:19:44:24:55:57:5e:51:3d:82:4c:03:2f:
06:36:eb:34:e3:57:bb:3c:15:a7:c1:fa:a5:ff:12:57:f2:da:
6a:be:58:09:0a:1c:37:18:29:3e:55:4e:3c:81:fa:5a:44:ef:
a6:3a:c8:dc:9d:78:32:9a:61:d7:8e:5b:33:79:fe:2b:c2:2c:
21:72:11:23:33:60:34:e7:ab:ef:38:37:a9:74:b9:16:36:f3:
d9:c7:17:40:0d:70:62:ff:de:af:a8:e1:05:26:88:53:48:0c:
44:17:03:da:b1:16:6a:49:ff:f3:23:54:d5:36:cc:a0:fe:5c:
fd:11:3d:97:fa:58:ca:a1:4c:6b:88:27:5d:6e:19:a7:28:34:
8b:d9:8e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:39:42 2025 by rpki-client