Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier: iOOArUQFYUFz0lHXy4CzfWoekbTAil3CkN0Dq8N/5e8=
Subject key identifier: 2D:ED:8D:62:36:62:E0:04:49:A9:43:C3:4B:3C:70:75:6C:C3:51:54
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial: 0199FC8F37A2F72E90E56B11869EE8856820
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number: 15AB
Signing time: Sun 19 Oct 2025 13:01:08 +0000
Manifest this update: Sun 19 Oct 2025 13:01:08 +0000
Manifest next update: Mon 20 Oct 2025 13:01:08 +0000
Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: cgKo6RXbCnT5b+Jg9tzjXgziKVXVqaf9QNKZlefBcsk=)
2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:37:a2:f7:2e:90:e5:6b:11:86:9e:e8:85:68:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Validity
Not Before: Oct 19 13:01:08 2025 GMT
Not After : Oct 20 13:01:08 2025 GMT
Subject: CN=2ded8d623662e00449a943c34b3c70756cc35154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:00:e3:9a:a1:39:c2:98:9d:5b:a7:4a:cd:d2:
f0:76:84:c4:7b:81:03:85:90:65:3c:dc:0a:89:f6:
ec:2b:6d:e5:96:51:d0:06:18:18:0f:7c:c9:5b:77:
89:77:49:09:69:76:fb:d3:87:fe:6a:b8:aa:78:ba:
a2:61:27:1e:b2:3d:a1:88:8e:4f:98:b0:4f:c8:ef:
36:76:05:8a:2d:5b:29:bc:b3:da:91:8c:5d:a1:d9:
3a:8a:b7:1c:3a:1a:1b:36:e3:74:6b:c0:ae:b6:a4:
77:4e:86:7f:0c:5a:7d:83:39:72:ed:fe:d9:7a:38:
ca:65:c6:47:f2:40:0d:70:93:f1:02:1f:8c:55:69:
78:be:66:25:42:1c:c6:e5:b8:a5:d6:85:b9:a8:f0:
0a:a7:80:dd:48:f4:cc:56:9a:07:3b:51:9d:80:54:
50:5c:5f:c7:08:26:1a:aa:cb:f8:c4:11:58:56:de:
cc:b4:76:55:32:49:d9:bd:61:8d:8e:49:de:90:ef:
68:5d:42:30:48:ea:b2:3f:b3:83:b8:3c:3d:4d:d2:
f5:5d:ba:70:67:1b:14:3c:9e:22:09:74:47:aa:b9:
89:d8:c7:f0:d5:6e:63:e5:10:a3:54:b7:ea:7c:20:
d0:6c:1a:01:a9:f8:50:af:70:52:76:e6:2f:a1:01:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:ED:8D:62:36:62:E0:04:49:A9:43:C3:4B:3C:70:75:6C:C3:51:54
X509v3 Authority Key Identifier:
keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:73:59:c5:67:83:3a:29:84:50:ed:99:88:3c:2d:24:3a:28:
aa:9d:18:c4:9a:95:bf:73:ba:e5:d1:9c:6c:9a:c3:c7:d6:34:
cf:86:22:2b:a6:90:d0:6b:4a:20:90:5a:86:69:31:a4:d1:e7:
19:9e:63:d5:b0:25:61:29:55:77:d5:c1:85:fd:9d:62:fa:19:
ac:52:c6:b0:c3:41:8d:de:c3:d7:6b:39:46:b7:a5:01:e1:d7:
80:ec:43:43:0a:fd:95:68:17:fb:4a:4b:83:f0:ff:b0:70:9f:
c0:b5:91:17:70:2e:9a:c3:c3:7d:5e:74:bc:ff:6e:48:fd:96:
6a:5e:52:c0:49:0f:32:98:e7:5e:eb:73:b8:f7:69:6c:5e:9d:
9a:8a:47:52:d7:3b:1f:03:01:d0:fa:45:1b:be:cb:d1:8c:2b:
3d:f1:c8:e8:b8:6d:4e:bd:6d:89:e1:4e:45:de:4d:ed:a2:b9:
9b:a7:39:46:8b:a9:55:ef:67:38:c7:1e:32:16:dc:55:62:0b:
f0:b8:49:f0:47:e9:af:3e:ad:0e:00:74:7f:97:7b:90:66:5c:
5e:d5:5f:72:d4:ce:cd:49:0c:29:07:fd:05:19:ba:39:ea:20:
60:e3:0e:cc:ef:5f:ff:7f:40:e0:c0:93:b7:0e:59:11:0f:f4:
8c:af:d2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:26:19 2025 by rpki-client