Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: PtsT8C8R/zLBFZShtQeqO8i7Jf+3u2c4r9NDCcZSJtY=
Subject key identifier: 35:22:0D:42:F7:75:0D:57:ED:44:C4:B4:A4:18:81:9D:09:32:B9:39
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 0198A27254E62602E85E30C2448B3709C0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 1630
Signing time: Wed 13 Aug 2025 08:00:58 +0000
Manifest this update: Wed 13 Aug 2025 08:00:58 +0000
Manifest next update: Thu 14 Aug 2025 08:00:58 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: bgTIMgIVykP0pJJ4CZ7CgDG4kGhJC+5o1j2KjQxgOr8=)
2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 Aug 2025 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a2:72:54:e6:26:02:e8:5e:30:c2:44:8b:37:09:c0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Aug 13 08:00:58 2025 GMT
Not After : Aug 14 08:00:58 2025 GMT
Subject: CN=35220d42f7750d57ed44c4b4a418819d0932b939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:ae:ac:b0:7f:b6:4c:60:de:2f:5b:79:1b:
05:93:6f:96:c0:73:e1:0e:7a:c4:69:19:2e:fb:17:
6f:3b:03:8d:44:a7:3d:c7:e6:68:bd:0c:8a:a2:b2:
8f:8f:40:d7:6a:91:4a:05:b8:9a:8c:72:a2:f7:78:
4c:7a:a9:a6:8d:de:88:74:8f:c6:77:85:83:99:2f:
9c:41:05:be:e9:fe:06:cc:ad:c5:b3:cc:12:a1:6c:
3f:bc:b1:3c:ac:8f:3f:d6:40:e8:8f:07:9a:90:b4:
28:4c:29:f9:9a:58:1e:c4:36:5d:ac:af:ae:de:80:
8d:6a:81:13:2f:90:b0:b4:05:b4:b2:fc:33:01:2d:
f4:2f:c3:f2:dc:47:7e:bf:8f:b5:be:42:69:d0:69:
d0:57:fd:02:51:9c:c8:34:64:89:b6:1a:13:b5:b1:
f1:e7:8a:d7:bc:e9:88:cb:5d:5c:57:f2:d7:1f:4b:
82:b0:54:ec:c6:63:42:6e:d4:b4:c9:ad:5b:43:fb:
1f:a9:99:4e:4e:f6:bc:66:dc:b6:b5:42:19:a4:bf:
71:e6:4d:b0:93:8b:a6:1a:ec:94:79:d1:d2:3f:65:
e3:56:01:cb:fe:2b:ca:ec:62:af:dd:44:42:66:0f:
ee:a5:44:29:be:d1:d6:cb:98:e4:c2:29:79:8f:60:
7d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:22:0D:42:F7:75:0D:57:ED:44:C4:B4:A4:18:81:9D:09:32:B9:39
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d9:4c:90:df:7a:ac:fa:9b:49:fb:f2:be:08:28:17:8d:42:
73:cd:0c:a0:00:ec:3c:65:07:d8:d1:76:24:ee:97:7c:eb:7f:
b1:ca:ce:8b:b0:e4:74:55:b2:2d:51:b3:89:cb:4a:9b:02:3c:
26:a7:ee:ac:3e:14:5d:5b:a3:67:98:4b:9a:44:cc:6e:0c:7c:
6b:32:18:d8:90:9f:35:98:49:09:c4:f8:84:36:93:c4:6a:e4:
62:f4:32:97:13:6b:8d:2a:73:a7:49:bb:1b:76:24:87:fd:57:
81:36:64:57:21:b9:48:f7:30:e3:e1:60:4d:cf:93:3b:b2:fc:
68:91:c1:df:ad:43:1c:8b:ea:a4:d0:98:31:c2:83:3f:31:d7:
12:b1:e1:3e:fe:86:67:78:5e:15:9e:18:e5:3a:49:d4:67:d5:
33:97:0d:51:a0:37:ae:45:1e:06:85:a5:ff:75:8f:47:bc:72:
d8:4a:d2:7f:a2:db:a3:85:96:43:dc:e0:06:bf:4c:6f:76:99:
a5:40:36:2a:a6:8b:9f:81:11:0c:e4:8e:6d:f5:29:ba:8c:32:
9b:46:a6:64:c3:0e:58:65:73:21:43:4a:04:71:98:dc:b8:23:
49:61:a1:27:79:f3:0f:24:5c:a0:70:c1:0c:53:66:4d:f3:a0:
26:70:cc:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 16:00:41 2025 by rpki-client