Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: tHVNlCk+s3xn5vJ8Sofbkodz/apUXHK/Bf1HJii5hig=
Subject key identifier: 06:4B:A2:4A:2C:AF:27:33:59:82:F7:20:46:BE:D5:FC:58:4D:61:D8
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 019A50AB8EAE87BCECD72BCB0FC441D32D1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 05FB
Signing time: Tue 04 Nov 2025 21:00:11 +0000
Manifest this update: Tue 04 Nov 2025 21:00:11 +0000
Manifest next update: Wed 05 Nov 2025 21:00:11 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: NXHUw8ICSomPYCG31kNy0ufktP5yKW5fB8CUKy72ILg=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:ab:8e:ae:87:bc:ec:d7:2b:cb:0f:c4:41:d3:2d:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Nov 4 21:00:11 2025 GMT
Not After : Nov 5 21:00:11 2025 GMT
Subject: CN=064ba24a2caf27335982f72046bed5fc584d61d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d9:19:2e:21:41:b1:b9:3d:5c:97:3f:c5:c0:
4f:75:99:33:c6:15:49:73:2e:c0:c0:8e:54:cf:b8:
a7:00:cc:5b:7a:b3:56:0d:f3:4b:9f:00:60:c0:b4:
d4:c5:b4:d5:d5:e0:48:ec:cb:26:9a:8d:d8:16:c0:
24:26:42:d0:b7:15:5c:03:a4:c5:b9:4d:48:5d:66:
da:e5:4e:ec:bb:95:a8:ec:1f:eb:6a:fa:aa:05:6e:
74:bb:6e:8f:c0:95:37:e7:66:aa:9d:71:32:bd:48:
d8:f4:6e:1d:77:c7:20:25:cc:8b:48:f9:b1:ff:8f:
0e:0c:66:d6:2e:d6:95:5d:a2:81:cb:0f:5a:dc:ce:
b0:af:31:85:41:11:4c:72:9d:53:6b:62:54:42:7c:
22:7d:80:b4:c8:2d:9e:92:08:01:c9:21:b4:4c:c1:
de:6f:da:9b:01:dd:aa:cb:02:1c:10:db:76:0c:8c:
59:aa:15:13:47:04:a9:73:47:be:4f:ed:e2:f5:79:
87:68:8a:98:08:ad:f5:7d:fe:b3:72:33:1e:fa:a0:
85:a9:88:30:b1:85:78:86:d4:c9:81:1d:4f:6a:72:
6f:57:77:42:55:c1:ea:3c:d5:06:ce:7a:3b:8d:c0:
8a:47:8a:41:bc:08:d7:52:5b:53:54:76:aa:6d:db:
d2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:4B:A2:4A:2C:AF:27:33:59:82:F7:20:46:BE:D5:FC:58:4D:61:D8
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:07:06:97:be:b6:45:70:36:68:d6:1c:c1:c0:9c:3b:c0:4f:
5e:96:7b:77:b3:e6:36:d2:5c:91:80:ae:a7:fd:13:ab:76:4c:
63:29:11:ec:45:9c:04:ca:17:4c:06:dc:4f:01:68:c0:27:2e:
bf:b6:5c:b6:a1:19:f8:71:17:76:5f:a6:49:7b:86:67:3a:8f:
10:ef:94:80:fb:7c:e9:c2:e1:87:be:23:09:69:c5:4f:0a:1d:
ff:2b:43:07:76:6d:93:d9:22:24:2a:1f:fa:83:aa:62:81:55:
b9:4d:63:b8:e8:2e:45:90:19:11:bc:e5:e1:b6:83:e9:d1:51:
94:7b:ba:2b:d9:84:38:e9:7b:4f:93:3a:30:74:e7:1c:52:f3:
ab:bb:ec:84:2a:00:97:a6:67:01:53:d0:69:bf:af:10:aa:7d:
01:0f:39:ab:a5:ec:56:05:7d:cb:b5:4a:e4:5d:f2:8b:49:e2:
79:fe:32:db:4d:a7:2c:e4:fb:d1:40:25:24:61:15:94:a1:a0:
f0:35:95:43:b1:c1:7e:ff:ca:cf:db:1a:57:a7:47:19:5f:9d:
43:b4:14:58:5e:20:75:a4:d9:17:08:b3:c0:e4:58:f8:56:b0:
62:dc:3c:cf:43:5e:4e:77:bd:4c:bd:1c:de:cf:8c:3e:a7:a4:
2a:24:01:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 03:56:38 2025 by rpki-client