Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
File: 738xvW2YXkUpnDHQUspKjr71V4s.mft (raw, json)
Hash identifier: u+h+pqQi5Y6gd8YGGrlu2TBlD0KvToYRuU9OopNGjSI=
Subject key identifier: 5C:CC:8E:22:F6:A3:AC:C4:51:63:6C:9B:8F:8E:B0:42:74:CA:EC:C9
Authority key identifier: EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
Certificate issuer: /CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Certificate serial: 019A4EBD548FFE88902D18E7EE925E886304
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 12:00:21 +0000
Manifest this update: Tue 04 Nov 2025 12:00:21 +0000
Manifest next update: Wed 05 Nov 2025 12:00:21 +0000
Files and hashes: 1: 738xvW2YXkUpnDHQUspKjr71V4s.crl (hash: O2p3AXfjf6t1Wi8GWw0WmWrfraS/fg01/3VcwA3pMZE=)
2: aoaJWVMr3LsKp6dIyxA_4pNUFaI.roa (hash: t+OBdb8RsaFvnnVMtpxSRATSZxEyzbE7ET03LsrS4po=)
3: bA_e5br1PmSxWsqLddr2vRjon7w.roa (hash: K7HaBSLbX+bu7BjrpU1/OOqg8JnIXozOGz2JaJqaEA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:bd:54:8f:fe:88:90:2d:18:e7:ee:92:5e:88:63:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7f31bd6d985e45299c31d052ca4a8ebef5578b
Validity
Not Before: Nov 4 12:00:21 2025 GMT
Not After : Nov 5 12:00:21 2025 GMT
Subject: CN=5ccc8e22f6a3acc451636c9b8f8eb04274caecc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d3:db:4b:76:ab:9a:32:c6:2f:26:05:cb:4d:
9a:c7:b5:d6:e2:5e:29:fe:51:b8:96:ab:ba:1a:a0:
21:f4:e8:d8:00:9d:e7:d5:e1:67:b0:9f:9f:a5:e0:
4c:c6:28:05:b4:4f:29:59:5f:da:80:25:cf:ae:bc:
fa:21:8c:ec:8b:92:ca:f3:db:18:c1:ca:37:82:49:
2b:b8:77:dd:ae:77:90:c9:ca:2f:ca:85:61:1a:6e:
32:d9:35:f0:52:d7:97:9b:86:70:b2:64:00:ca:0d:
36:85:58:69:ce:fe:c1:8c:b7:f4:cf:53:e9:68:ff:
66:c2:67:98:68:5b:20:7e:14:c4:e3:b2:ee:ea:58:
06:97:10:90:17:d8:86:a5:e8:88:ab:59:fe:8e:3f:
fa:5e:94:61:e0:08:78:d5:cf:8d:5f:da:bb:2e:f5:
49:c0:d8:c6:ec:97:07:49:80:1e:86:83:a9:14:8e:
7e:15:ea:18:37:11:ab:9b:10:b5:64:6e:1f:fa:9d:
37:e2:94:ba:ec:fd:8e:1d:a6:a6:3d:7a:ad:9f:31:
18:6d:c6:fa:17:10:36:ba:eb:72:91:29:8f:b7:f3:
dd:14:c4:c9:1a:fc:4f:7f:9a:82:f1:a4:87:24:55:
0c:ac:cc:04:4c:9b:12:8a:65:f2:87:98:83:25:17:
55:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:CC:8E:22:F6:A3:AC:C4:51:63:6C:9B:8F:8E:B0:42:74:CA:EC:C9
X509v3 Authority Key Identifier:
keyid:EF:7F:31:BD:6D:98:5E:45:29:9C:31:D0:52:CA:4A:8E:BE:F5:57:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/738xvW2YXkUpnDHQUspKjr71V4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/ebea60-d231-480b-84fd-a763df3aee6d/1/738xvW2YXkUpnDHQUspKjr71V4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:30:74:05:19:f7:6f:c5:6b:1c:19:c8:27:02:f8:82:41:b3:
5e:3f:40:77:02:62:23:48:29:8a:57:0c:fa:0b:0c:d5:2d:32:
e9:22:1c:c1:98:bd:ef:1e:39:a9:fb:e5:08:b6:a9:6a:8e:40:
e5:75:c9:94:18:d7:db:46:34:9b:87:38:f9:e0:25:d4:cb:15:
50:70:85:47:d5:ad:78:64:e0:36:0f:24:e0:db:96:3a:06:e8:
4d:db:0a:6e:6c:9b:14:bc:ba:1a:f7:20:e0:cd:3b:92:09:35:
c3:51:d9:4f:e3:d1:c0:d0:bd:8a:f8:84:84:b0:2a:67:25:a8:
77:64:6e:80:09:db:d1:89:2f:0e:6a:9d:4b:ef:5d:36:85:be:
dd:14:cc:5f:8f:88:ae:a4:be:42:ef:cd:ab:c0:42:70:b3:10:
30:e7:e3:91:dc:ab:aa:47:0b:45:8b:2f:cf:bd:de:52:6d:6d:
c6:d9:92:2e:9c:f6:30:f0:e1:a3:5f:af:9c:4e:22:4e:07:d7:
43:a9:21:10:26:1b:81:25:e5:8d:bb:cc:1e:3d:40:6c:91:e8:
8d:89:12:04:86:71:0d:02:e6:35:d3:3c:8c:6d:f4:27:dc:73:
a5:b8:12:ec:08:57:08:fb:94:ac:09:e8:b8:7d:bf:87:8b:50:
ab:24:e5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:22:45 2025 by rpki-client