Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier: cdc7jo2htIzKmSE/WsFI+8k7i93qQCqBKM4FEVmSKSw=
Subject key identifier: AF:0B:6F:DA:F9:F0:35:E6:87:4E:30:AB:31:3D:DF:96:39:6F:C5:BF
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial: 01984A0A3F0D39EF1F8B4EE23E654B44B286
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number: 14CA
Signing time: Sun 27 Jul 2025 04:00:42 +0000
Manifest this update: Sun 27 Jul 2025 04:00:42 +0000
Manifest next update: Mon 28 Jul 2025 04:00:42 +0000
Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: nT9urNWl8eeP674DEewKikZoMupyFLQBLIHZthU5CiE=)
2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:3f:0d:39:ef:1f:8b:4e:e2:3e:65:4b:44:b2:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Validity
Not Before: Jul 27 04:00:42 2025 GMT
Not After : Jul 28 04:00:42 2025 GMT
Subject: CN=af0b6fdaf9f035e6874e30ab313ddf96396fc5bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:45:b9:c1:c7:81:99:8e:32:cf:2b:ac:15:
7a:ac:94:6c:db:f8:17:05:77:8a:47:9c:14:1a:4c:
4a:ed:5f:dc:d1:34:84:d9:b8:1e:a1:3f:54:f6:9b:
67:c6:40:87:11:3c:d1:b3:90:40:bf:33:a0:56:c8:
16:5c:6b:a8:bf:54:77:42:21:00:eb:3a:28:7c:03:
5d:2a:8c:fb:88:72:cb:a8:bc:7f:37:db:9e:7b:45:
05:79:77:4c:1c:dd:7a:b4:36:2f:29:5c:c4:73:0b:
aa:9d:22:1c:3a:5e:b7:0d:64:33:f1:29:11:46:01:
bd:0d:79:8b:12:7c:fb:2a:f9:1b:57:2c:c4:b8:4e:
75:f5:37:3f:a7:41:e4:f0:88:f9:b4:c9:fe:48:2f:
55:7c:ca:a3:27:62:05:50:1f:b3:cb:34:ea:69:67:
b5:ff:01:09:33:ce:6e:18:9d:bb:ea:8c:ee:b9:20:
c1:30:6b:fb:9a:47:c6:f3:76:95:8a:af:8b:1a:df:
3c:cf:e4:e4:12:84:1d:6d:ee:4a:4f:c5:ef:f1:c6:
4c:d6:88:4e:5d:27:0f:ba:2c:c7:30:32:57:14:3f:
6b:cf:3c:02:4f:ed:86:1d:09:0c:4a:3c:b8:ea:4f:
a4:4d:b2:8e:4f:76:88:7d:f8:c5:a5:55:91:d4:a7:
f9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0B:6F:DA:F9:F0:35:E6:87:4E:30:AB:31:3D:DF:96:39:6F:C5:BF
X509v3 Authority Key Identifier:
keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:b2:f9:3a:c0:42:dd:8e:5c:64:4b:53:95:53:bd:96:0f:7b:
22:e1:c2:25:27:4d:29:d5:ee:c1:7c:c1:b1:ef:6d:58:6c:d7:
95:d2:4d:2d:5d:3c:88:0e:a7:d6:32:15:0c:24:9f:bd:d3:e4:
77:ad:37:7d:2e:7b:1d:26:5a:1a:bb:c9:b0:f0:1e:bd:cc:42:
e4:33:a3:09:b7:c9:03:36:58:79:e9:7a:6c:b9:47:72:42:74:
d6:11:5e:09:83:d3:37:33:90:0b:5b:bf:33:91:fd:3b:8a:76:
34:3b:08:e2:c8:51:85:27:5c:19:48:ea:8b:4f:97:b6:d0:67:
e4:11:52:de:d7:06:9f:48:2f:8e:db:1f:e9:93:40:a1:53:53:
8f:0b:a6:b2:f5:53:5f:73:fb:75:84:f6:ae:40:9f:d7:16:fb:
eb:52:c6:92:01:8d:a9:c2:7a:9b:11:3b:6e:14:63:c7:63:e8:
09:b0:95:25:6e:34:e0:57:90:8d:6a:3f:9c:ea:ed:fa:dd:c1:
ac:a1:30:73:e5:c6:cf:50:80:74:85:24:81:a7:36:19:70:0a:
bd:b6:a0:d1:94:68:e8:a0:81:fc:ce:49:48:38:0e:5c:ca:bd:
cb:ad:09:20:79:9b:0c:9a:e8:97:b0:66:8e:28:93:1d:e1:33:
16:e5:f3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:24:24 2025 by rpki-client