Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File: 73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier: eaNcUfPC3vov80mq6Nw5bO3hihqtVUcQRo4ixU6Sp4A=
Subject key identifier: 67:13:37:F1:09:74:19:D1:45:D3:25:C6:90:D2:53:FD:86:B2:E6:DC
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial: 0199FAD7C969F25A277A60C15C2C01805751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number: 0CA9
Signing time: Sun 19 Oct 2025 05:01:09 +0000
Manifest this update: Sun 19 Oct 2025 05:01:09 +0000
Manifest next update: Mon 20 Oct 2025 05:01:09 +0000
Files and hashes: 1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: fx/1/mq2a0DAR95xrMzbAJDplgh/Qi7AKdUjIsaJKUo=)
2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 05:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:d7:c9:69:f2:5a:27:7a:60:c1:5c:2c:01:80:57:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Validity
Not Before: Oct 19 05:01:09 2025 GMT
Not After : Oct 20 05:01:09 2025 GMT
Subject: CN=671337f1097419d145d325c690d253fd86b2e6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fe:e8:64:d4:1a:da:45:73:f3:ed:10:e7:cf:
d4:3f:2e:48:b7:77:3b:91:ea:23:c2:d1:b5:98:84:
2d:bb:fc:77:30:a5:4d:5d:60:69:25:0f:88:b8:98:
84:a7:6d:0c:5d:2a:02:a0:0b:58:0d:9f:e5:af:47:
46:4b:8c:a8:12:21:50:d9:50:fe:4f:90:15:df:2b:
43:a5:df:b2:d7:0e:36:21:9d:bf:74:b0:77:a3:14:
16:5a:64:cd:57:a2:07:00:b9:53:20:79:9f:10:03:
71:4a:83:f6:31:c6:f9:60:7f:4f:cb:28:6e:05:57:
63:b7:13:73:8e:08:07:b8:eb:83:52:8e:9a:00:e7:
81:8d:00:89:29:d6:88:47:59:e8:34:56:d6:82:ea:
26:3a:93:8f:43:66:81:0c:0b:9b:1a:7c:d9:24:23:
28:5d:7d:e3:7a:2d:a4:af:b1:2f:9d:37:29:f2:ea:
bd:dd:1b:5c:33:a5:a2:99:20:5a:fe:7d:df:83:63:
6d:b9:48:f6:b1:fd:e2:9e:e1:9b:6a:1d:e5:fe:8a:
03:d4:ef:a0:46:4b:96:13:55:83:60:53:97:f3:a8:
a0:79:85:2f:9c:ce:c0:2b:6d:88:8a:12:bc:90:22:
c9:3f:0d:8d:bc:fd:f2:b2:f4:6c:4a:9a:4b:47:e7:
ff:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:13:37:F1:09:74:19:D1:45:D3:25:C6:90:D2:53:FD:86:B2:E6:DC
X509v3 Authority Key Identifier:
keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:1f:b8:f1:9d:f1:4a:9c:70:e8:a3:28:73:6d:bd:a2:2b:7d:
3c:f0:da:9f:6a:ab:ad:97:9f:c2:bb:f1:85:a9:f8:19:ea:85:
0e:b3:4b:c0:68:ce:8b:86:d9:3b:4e:92:b2:3e:27:d7:87:fb:
3a:d1:2b:c1:31:37:b0:cb:0a:36:0e:93:6e:7d:05:eb:35:c9:
f5:fe:96:3a:be:e5:16:f1:d1:35:5f:b7:0e:28:a5:a1:15:e1:
27:df:85:41:89:a2:93:9b:e7:b4:20:b5:6e:4d:75:c5:5e:db:
49:5d:2b:ee:ef:40:f9:1b:58:bb:84:5c:24:80:98:9a:8d:3b:
6e:2e:33:c3:97:ac:e6:91:1f:8a:52:35:92:9a:a9:79:c5:65:
77:c4:0e:73:f2:45:b6:f5:da:7e:97:16:db:bc:55:de:3d:b2:
07:73:15:3e:62:a2:e4:8a:1e:3b:da:46:cc:31:66:d3:45:04:
0b:ac:a4:8b:5d:31:c6:65:ce:2f:ee:e1:1a:75:78:f7:92:b8:
b0:25:eb:8f:aa:6b:9c:7b:37:eb:27:ab:0f:f8:6d:51:b4:4a:
26:6e:e0:cf:79:61:04:fc:60:78:d3:a3:4f:91:bc:e6:6c:65:
7f:ed:63:85:e8:04:35:0d:35:9b:81:82:9c:7a:e1:40:b1:03:
d6:f3:b6:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:29:44 2025 by rpki-client