Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: aBNt5oEZDpX+8/n8EY4q8IhOjJm0de2H8/lJJO50jnY=
Subject key identifier: BA:C1:2A:F4:D9:9E:0F:FA:1E:7E:B4:44:0F:9B:73:87:4F:26:DF:4B
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 01987F7864D8A54C51ACEB98D24781252168
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 07DE
Signing time: Wed 06 Aug 2025 13:00:53 +0000
Manifest this update: Wed 06 Aug 2025 13:00:53 +0000
Manifest next update: Thu 07 Aug 2025 13:00:53 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: fiWpnzFV+SSimzfe5NB67336PIsOlkryFFGVOXsE9xA=)
2: V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa (hash: NClt/SHG+/tXhhv3Y/klJlIO43Syulf2MR3J6Q5EBlA=)
3: qsZrdnkoO0E25hqGWNb8Z9dNerM.roa (hash: hAyilmx8AWlJmwYPt85XuLAx4M2nXqrLORTF4xGEO6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:78:64:d8:a5:4c:51:ac:eb:98:d2:47:81:25:21:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Aug 6 13:00:53 2025 GMT
Not After : Aug 7 13:00:53 2025 GMT
Subject: CN=bac12af4d99e0ffa1e7eb4440f9b73874f26df4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b2:cd:1a:44:1f:31:09:bf:37:79:ce:14:16:
fc:21:8c:5e:0b:19:0c:43:0f:61:3b:9e:bf:01:8f:
df:c8:c3:1b:55:52:86:0f:35:ef:96:ad:32:6c:94:
d3:f7:e3:fc:fb:ec:5a:42:82:d9:a2:29:a1:04:47:
c2:2c:bb:f4:ce:35:7f:f2:33:2a:7b:c3:3a:d6:6d:
4a:52:85:5a:fc:66:ce:32:d1:b1:25:e7:a2:b7:fc:
c4:96:21:25:0c:c9:09:46:b3:ae:4f:27:16:96:5a:
b3:20:86:71:e6:b8:72:87:9b:9f:f7:42:f1:ff:c8:
31:a7:56:f2:e2:8e:1b:57:92:39:3e:0f:9d:9d:b6:
17:08:1b:d1:4c:3a:d1:10:2c:98:b9:6c:77:a2:60:
78:45:55:b6:58:bd:ca:ec:31:a7:b9:4e:00:cb:25:
d3:e5:16:66:ce:b1:ca:3c:33:51:7a:84:ba:ba:55:
1e:4d:b7:eb:45:dc:62:fb:f0:7d:23:c6:43:73:f1:
80:c0:62:48:90:b9:97:13:6d:92:4c:d8:fd:63:59:
c5:84:46:b6:69:af:43:42:c3:39:8d:b6:ce:91:94:
18:02:14:2f:aa:06:93:30:24:fb:96:c4:38:93:21:
2b:ba:d5:4c:4b:e4:af:72:cc:98:e6:cf:b2:15:86:
31:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:C1:2A:F4:D9:9E:0F:FA:1E:7E:B4:44:0F:9B:73:87:4F:26:DF:4B
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:cc:b6:74:9b:9c:af:68:39:c7:63:e7:a6:3a:32:1a:25:e1:
80:95:7c:3d:ba:02:52:4c:63:c7:63:69:99:e8:9e:6f:22:da:
67:0f:68:ae:f6:0d:0e:11:67:d3:80:49:7e:e2:4d:3d:0d:08:
7c:46:52:1e:a3:90:a4:03:f3:fc:96:45:94:2d:6b:39:c9:1f:
9a:8e:34:38:9b:47:2f:1e:16:2e:bc:7a:a1:2f:71:d2:7d:49:
24:ff:61:86:b2:df:d4:2f:87:60:93:aa:b8:1d:5e:2b:9d:5f:
ba:89:ce:ce:a4:ff:1a:5e:3e:0c:93:b4:23:4e:21:fc:dc:31:
27:59:64:83:97:97:18:92:11:85:a2:6e:78:08:03:d9:16:29:
7f:2e:51:33:d0:c5:9e:27:e5:13:23:e7:10:53:95:63:93:46:
09:a0:43:13:13:86:92:7b:cd:65:6c:57:33:24:38:38:a6:53:
97:b4:c0:1b:f1:15:b0:97:ca:93:1c:17:71:db:1b:65:ae:82:
e4:a3:a1:97:3a:ed:16:e2:86:82:81:e0:79:e2:0d:39:16:4b:
7e:84:de:71:0c:99:51:3d:f5:62:01:20:8f:b6:38:56:e4:de:
37:bf:bb:f1:6a:39:b1:f6:05:3b:b9:71:4b:b4:28:01:ed:3e:
3c:05:4f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:15:20 2025 by rpki-client