Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: bx7phge8TfdlEApQYxT1/ecG0335ynNAUKWMT2hkeMg=
Subject key identifier: 14:1B:B7:AF:01:EF:F6:0A:B6:BF:41:7F:9A:53:29:38:97:5E:D6:F9
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019A5375E51D8AE37C80CFC9373761C03AB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1711
Signing time: Wed 05 Nov 2025 10:00:26 +0000
Manifest this update: Wed 05 Nov 2025 10:00:26 +0000
Manifest next update: Thu 06 Nov 2025 10:00:26 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: PRsbeaCkF5cJDg+Kkbql+yXgUW1SzmqtVuq7cvjW1/0=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 03:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:75:e5:1d:8a:e3:7c:80:cf:c9:37:37:61:c0:3a:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Nov 5 10:00:26 2025 GMT
Not After : Nov 6 10:00:26 2025 GMT
Subject: CN=141bb7af01eff60ab6bf417f9a532938975ed6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2f:48:c4:57:d3:c6:10:40:0e:4b:e1:5d:0f:
3d:85:be:fa:5f:94:54:3f:f2:30:d1:e7:9b:fd:ec:
26:01:b4:45:e5:ea:6b:19:36:5e:9f:52:93:6f:de:
9b:3c:13:46:99:63:e0:98:4d:53:59:a9:92:49:7d:
92:79:ea:b4:4e:bd:57:d5:9d:f7:ec:e6:65:b0:74:
12:cd:0c:13:25:64:90:ec:32:b8:9c:ef:94:cd:dc:
ac:c0:39:eb:6c:52:4e:ea:e6:ae:3b:43:cd:7e:e0:
b2:0e:cc:f6:c2:d8:48:db:a3:09:24:d8:2d:0d:0e:
94:19:0a:e5:22:f3:a7:7e:31:e4:f6:af:a2:5b:c8:
a2:77:ef:73:f0:22:52:be:55:27:f2:34:60:79:19:
fe:ca:b1:7c:d4:99:ee:40:35:a4:84:a1:70:d0:f3:
d4:13:61:06:8c:fa:e7:b1:f9:ba:83:7a:58:80:a6:
4c:b3:2b:60:83:5e:fd:c6:02:b7:ad:6f:c7:73:1b:
92:1b:b0:74:ce:92:9b:19:70:37:6d:6e:df:4d:e7:
2f:30:d5:8c:c4:39:68:25:5a:e4:c7:61:b5:0b:af:
c5:58:63:eb:4f:14:51:cc:5f:1e:ba:dd:eb:73:98:
06:4f:05:d2:3f:7f:ec:fb:1e:94:ff:0a:cb:44:64:
bd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1B:B7:AF:01:EF:F6:0A:B6:BF:41:7F:9A:53:29:38:97:5E:D6:F9
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:75:4d:45:fc:7d:2d:11:0f:ec:f5:69:dd:fc:b4:af:21:3a:
0e:ae:55:10:1c:b2:21:33:50:ad:d0:dc:d5:33:e4:29:6c:f9:
ee:c3:df:d1:17:58:ca:f2:eb:f2:ab:99:c4:2f:e5:f6:c1:60:
78:19:98:83:7e:4b:d5:f9:90:78:7f:ba:2f:7d:18:dc:d8:2f:
36:0a:e5:ab:8d:f5:a8:b1:f7:0e:29:f6:5e:00:62:4e:5a:f3:
5e:ac:c0:ca:63:9c:e2:ae:1a:ca:08:48:27:2d:54:76:94:a2:
7f:18:bc:92:f9:b2:49:c3:48:be:2f:cd:0c:ef:60:e9:14:ba:
70:53:1b:38:fe:c5:cf:10:bb:3f:22:b2:2f:8c:aa:84:8c:ca:
72:2b:ce:55:d0:a2:22:78:b6:55:07:cd:40:0e:93:06:56:2c:
27:9c:b6:97:be:b6:20:63:14:9d:1f:b1:f0:97:12:4e:6b:8d:
4e:af:03:a8:5e:f2:fa:0b:16:a9:dc:e6:08:ab:0b:d4:db:6f:
4b:4c:33:76:58:4f:06:86:24:58:6d:f8:9d:56:7a:a2:ff:5a:
54:58:92:bb:e2:a2:68:a8:b4:a2:b4:14:17:0f:8e:16:61:9e:
90:fc:11:23:02:42:7a:e6:af:e0:13:f8:06:74:12:44:52:0a:
2b:22:e9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:27:28 2025 by rpki-client