Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier: fd1LJKpc/MRYVHTyBHIuEtG3uoARy/YcDVXtXunor98=
Subject key identifier: A1:44:F8:9A:ED:CF:AC:18:D8:E7:05:3E:33:29:D1:4E:28:C6:0C:C3
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial: 019A4F9987AE3A0925B53AE3072EE86EBFEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number: 15D6
Signing time: Tue 04 Nov 2025 16:00:53 +0000
Manifest this update: Tue 04 Nov 2025 16:00:53 +0000
Manifest next update: Wed 05 Nov 2025 16:00:53 +0000
Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: fIVyptsXqmb+kPH24pKIKm/6cSqHEO8msWKkUa6Mchs=)
2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:87:ae:3a:09:25:b5:3a:e3:07:2e:e8:6e:bf:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Validity
Not Before: Nov 4 16:00:53 2025 GMT
Not After : Nov 5 16:00:53 2025 GMT
Subject: CN=a144f89aedcfac18d8e7053e3329d14e28c60cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7d:9e:29:fb:45:b1:67:4c:bd:20:e0:8d:9c:
9e:17:18:80:9c:c6:09:dd:10:bc:45:94:40:5a:b9:
0d:54:50:98:5f:92:0a:be:fd:1e:a3:b4:ac:9f:90:
ad:06:c0:7e:d9:fb:ff:c1:89:7f:fb:ef:2e:28:4c:
b4:7b:ab:1c:00:a9:10:d5:55:b2:2e:9c:fd:25:8b:
aa:01:3d:34:c5:57:49:7a:37:d9:32:c6:a2:6f:21:
ef:22:5d:b6:b8:6c:fc:f6:01:52:71:03:a9:24:bb:
0e:57:a2:d2:f9:8a:a9:e9:4f:56:50:f4:a2:f2:ca:
bc:57:66:7e:2c:5d:02:bc:bf:ab:74:35:ee:8d:9d:
15:c7:dc:cc:ac:58:e3:16:43:b1:a9:9e:76:62:c2:
f0:59:e8:11:e9:96:b2:f4:32:90:eb:fd:e1:df:e1:
2d:f0:10:0d:52:27:ec:e1:2d:20:4a:39:b1:cb:2f:
e2:d4:1f:3c:4c:a2:5c:7e:4a:7b:c7:ff:c5:e4:cb:
b9:94:95:b1:fd:b0:64:77:83:66:cc:a1:f1:e5:74:
3e:81:2b:d7:94:f0:bd:77:0e:0b:ec:e8:0a:51:04:
7b:bc:b3:f6:f6:5c:49:a3:f6:33:be:db:fd:dc:99:
aa:1a:a5:0b:6a:65:91:6e:55:85:e8:39:76:39:72:
65:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:44:F8:9A:ED:CF:AC:18:D8:E7:05:3E:33:29:D1:4E:28:C6:0C:C3
X509v3 Authority Key Identifier:
keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:54:e1:0b:4e:c0:51:96:a7:b1:d4:a6:08:c9:e7:8f:e4:a4:
44:42:9f:0d:43:a8:c1:f8:67:8e:9e:8b:69:f1:b5:37:24:77:
1e:da:cc:7c:0c:26:04:04:e9:7a:e4:01:9d:57:08:28:4e:ee:
84:5a:00:63:81:e7:54:8a:ba:40:39:81:e3:f7:ea:ed:e7:88:
bc:62:86:cf:c4:30:a9:bc:b1:0a:72:dc:6e:12:76:63:37:fa:
c2:92:6c:7c:8e:6a:ca:21:98:37:6b:cd:17:ab:35:a7:67:6e:
dc:76:bf:f4:7c:82:ac:2a:80:47:ae:d5:f8:c6:68:28:26:33:
22:00:1b:19:27:ba:9d:fe:e9:f1:36:d9:25:4a:b1:af:f7:e2:
7f:ca:e3:9c:1c:3d:7f:24:b0:e3:98:ee:bc:fc:ec:90:00:65:
cb:8c:54:a6:3b:dc:5e:97:8a:0b:76:86:30:88:a4:48:10:5b:
d7:cf:14:d0:31:f3:7a:83:dc:b7:36:33:07:b7:c3:5c:87:ee:
6f:72:d1:43:b2:da:97:b1:0d:8e:e5:7c:46:4f:65:41:de:cc:
99:7d:54:98:2b:db:58:0f:f2:9b:00:d5:0c:18:07:1a:9d:00:
d4:c4:88:ef:a2:16:10:de:97:ec:21:60:8a:ab:c0:70:c5:26:
a7:8b:fe:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:14:08 2025 by rpki-client