Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
File: 735cdfZIrGkrFLwiLiwYDIY7ReI.mft (raw, json)
Hash identifier: 4/9o1tvGl1QMdAK8Bign8k2EEfpJ+9Bw1Cdf+FVDdos=
Subject key identifier: 56:B1:17:CE:54:8A:46:0E:A4:8C:28:9F:A4:06:B3:6E:36:4E:88:40
Authority key identifier: EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
Certificate issuer: /CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Certificate serial: 0199FDD8DBA1694F89A8C93613F4BBA45900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
Manifest number: 0381
Signing time: Sun 19 Oct 2025 19:01:11 +0000
Manifest this update: Sun 19 Oct 2025 19:01:11 +0000
Manifest next update: Mon 20 Oct 2025 19:01:11 +0000
Files and hashes: 1: 735cdfZIrGkrFLwiLiwYDIY7ReI.crl (hash: Zeev74+pJ5epCu4aORPmgm02K6WpHLTuMlyfR/Nko9Y=)
2: YvnoPFlwVSBiKu9iqRFpzb0xlh4.roa (hash: FIC2N81bANGcoREXZdDhNQ3XBvgX/G7WyyZfKBc7yTA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:d8:db:a1:69:4f:89:a8:c9:36:13:f4:bb:a4:59:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7e5c75f648ac692b14bc222e2c180c863b45e2
Validity
Not Before: Oct 19 19:01:11 2025 GMT
Not After : Oct 20 19:01:11 2025 GMT
Subject: CN=56b117ce548a460ea48c289fa406b36e364e8840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:34:13:7c:c7:de:93:fe:f9:f8:17:7f:ab:
ef:aa:a2:6f:0c:28:79:17:fb:ac:01:d2:fc:35:13:
61:91:13:f3:bf:ce:d6:8e:6b:71:93:1a:7f:7f:b2:
28:7f:b5:ed:d0:42:2d:26:4b:02:38:98:e7:28:ae:
77:3e:e3:d1:fd:5c:df:52:5b:73:aa:53:42:52:b6:
21:05:80:ee:8e:a5:24:3d:a9:8f:43:9d:b6:9f:59:
6d:e2:20:a1:2c:6b:dd:3f:ba:72:20:22:61:d1:cd:
69:d0:e1:1a:9a:8b:f6:44:f8:d9:b6:c7:a0:ca:78:
40:c2:fc:3a:12:8a:1c:70:13:77:7b:32:e3:b0:36:
35:f5:f9:7f:2f:d4:cc:37:e2:40:24:75:94:6f:f3:
2e:14:eb:d4:04:7a:cc:76:46:f1:56:14:d7:bb:dc:
b9:0e:3a:ae:f2:29:87:0f:14:20:4c:2f:ce:60:65:
11:80:fa:69:25:84:0b:00:fa:a6:4c:0f:63:2b:68:
49:bc:3e:3c:39:92:64:c4:5a:9f:e8:a9:b3:5b:5a:
21:3b:13:52:b3:a8:f9:66:f9:bb:ea:87:09:a6:54:
db:52:7f:94:f9:a3:f2:6d:da:c3:d0:df:c1:04:ea:
40:08:79:c1:a3:20:b3:41:5a:8e:4b:f2:15:c2:56:
ec:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B1:17:CE:54:8A:46:0E:A4:8C:28:9F:A4:06:B3:6E:36:4E:88:40
X509v3 Authority Key Identifier:
keyid:EF:7E:5C:75:F6:48:AC:69:2B:14:BC:22:2E:2C:18:0C:86:3B:45:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/735cdfZIrGkrFLwiLiwYDIY7ReI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/a142a9-a00a-4235-b71f-e6b20b09f866/1/735cdfZIrGkrFLwiLiwYDIY7ReI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4a:51:86:e9:81:ec:07:e5:b0:a7:2a:68:40:bb:e7:b5:3d:
8d:05:0a:11:e2:fb:60:84:a5:34:dd:73:24:a8:d9:a0:8a:b2:
f9:af:8b:fd:86:77:29:bc:0c:e6:d6:f7:8a:27:e6:ff:2d:85:
b1:b6:58:6e:0e:b3:a4:a0:7f:31:06:ff:99:cd:b4:80:50:2f:
99:51:fa:5a:4a:eb:c9:14:85:2f:96:69:99:f8:e7:b5:87:41:
b3:31:f7:6a:3c:61:e2:20:99:4d:48:dd:79:4e:82:88:74:6c:
02:fb:f0:f7:c6:b9:43:fa:dc:9c:e3:65:f1:8b:5d:34:a8:91:
9a:e8:81:11:8b:5e:61:dd:3b:05:69:c4:f3:0d:16:16:b2:9f:
a6:60:f1:cc:66:0e:2e:bc:b9:65:cc:3a:d5:06:e3:ed:41:e6:
4e:06:bb:ef:24:75:f0:ff:a6:98:61:8b:07:39:22:cd:26:f1:
88:39:6c:92:c1:03:e8:44:32:47:0b:b9:a8:63:26:c3:40:4f:
d2:b3:49:04:a2:b9:82:4b:1e:a1:0c:77:b4:32:4d:94:66:30:
5e:cd:18:ca:0c:34:ce:75:e0:67:0c:22:40:ec:a4:44:83:e8:
1e:fa:30:6b:d1:0a:d0:95:04:a6:a5:83:7d:0f:7c:da:0d:9a:
2e:d1:70:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:44 2025 by rpki-client