Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: 3kNySy0bGqy2tgrEC9281fTfLyV85o/i9Cmu9+aMuIc=
Subject key identifier: A1:D9:4F:ED:91:C4:E2:E5:0B:70:16:6C:F3:F0:D4:85:5A:1C:E5:F4
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 019A01EC1B4EFF594149732CEEDD40B09EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 16E6
Signing time: Mon 20 Oct 2025 14:00:41 +0000
Manifest this update: Mon 20 Oct 2025 14:00:41 +0000
Manifest next update: Tue 21 Oct 2025 14:00:41 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: NtnxZ7PuGWti9N/Xr8Ebiotd3JI6eQ3in09M1Q+8dVU=)
2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:ec:1b:4e:ff:59:41:49:73:2c:ee:dd:40:b0:9e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Oct 20 14:00:41 2025 GMT
Not After : Oct 21 14:00:41 2025 GMT
Subject: CN=a1d94fed91c4e2e50b70166cf3f0d4855a1ce5f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:41:8b:4e:57:33:d8:81:21:20:07:ea:67:
aa:d3:69:3b:a6:82:17:11:73:c4:b0:b7:88:73:33:
6c:b9:2f:10:03:47:fc:2f:05:4b:1d:8b:c5:e2:d8:
37:49:ae:9c:be:ff:41:2a:14:c5:d6:48:b9:f8:b5:
94:0b:dd:b9:7b:b8:1c:d0:79:5b:49:f9:b1:4d:56:
9b:a8:67:8b:d3:f9:b5:81:fb:ed:e3:ab:7c:52:36:
a3:85:48:00:64:18:7f:06:59:dc:aa:6b:f7:f9:45:
18:09:48:36:6c:18:cb:ac:02:1b:42:cb:00:c8:1a:
49:a0:90:e7:c3:3c:77:30:de:e5:f1:43:3b:c7:d4:
7c:f3:1c:20:a3:61:c7:28:90:6c:ef:1f:34:61:8a:
21:72:95:57:45:a8:4b:9e:c1:9b:cc:81:18:67:d4:
52:83:bf:bc:b8:4a:3a:d3:79:79:bb:2e:74:cb:40:
44:81:bd:93:06:d0:ee:bd:10:2c:d7:e0:91:c4:ea:
42:0d:73:61:a3:b3:b0:58:c1:c6:71:5e:a9:f0:cf:
5e:02:66:f7:02:70:63:79:87:8c:96:22:9c:0f:85:
a9:7d:0d:89:30:14:e9:93:54:85:ce:44:22:e2:fb:
42:ec:04:e0:b7:6b:9e:d1:56:8b:15:0f:3c:86:b8:
fc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D9:4F:ED:91:C4:E2:E5:0B:70:16:6C:F3:F0:D4:85:5A:1C:E5:F4
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:ac:86:a5:88:63:46:d7:a9:e0:ba:ed:8f:83:23:7e:f8:c6:
d4:ae:68:55:e3:26:c4:3e:82:37:f8:fb:5d:51:fe:c8:da:ed:
58:1b:49:58:76:db:02:1c:21:cd:96:cd:33:8a:f3:b4:6a:92:
c4:e2:c0:af:67:bd:97:8d:6c:ad:d7:dc:ca:cf:51:18:de:1e:
72:45:87:03:5b:09:38:29:af:c9:3f:6b:36:ad:3f:bd:74:1e:
fc:f8:9b:00:e1:79:30:3b:a9:5f:5c:d1:9f:d0:0b:2c:78:64:
89:33:ee:17:ef:9c:18:ed:f6:52:1b:3e:dd:64:cf:12:32:f1:
50:7c:c1:51:81:76:aa:7a:16:88:16:80:97:95:45:be:ba:45:
20:d3:a1:f1:7e:d5:65:54:05:d2:40:a7:82:68:9a:e7:d3:cd:
d1:7a:ac:29:51:57:bd:e7:58:31:6c:2e:69:35:99:2c:ee:55:
cf:a4:02:c3:32:23:3b:b6:97:86:43:33:e2:51:db:71:1d:b6:
27:4a:d2:14:53:eb:dc:22:47:35:c8:be:a6:92:f4:3f:79:6a:
b5:e2:b5:9a:9e:22:ee:26:88:15:2b:6c:ea:a3:b9:a1:0b:96:
7a:60:02:b5:39:c6:38:24:86:04:48:90:85:74:53:79:bf:dd:
eb:8f:ae:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 17:00:56 2025 by rpki-client