Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: Tx4M7c9KtbELtep18+5HZH+B3N2EAGEnjS7VLoe0nio=
Subject key identifier: B7:5B:AB:A3:6E:E4:29:22:7E:FC:6E:4A:47:DC:60:49:75:72:75:73
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019A725CD46EBB4FABB616E22E4C1FCBE6BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1721
Signing time: Tue 11 Nov 2025 10:01:17 +0000
Manifest this update: Tue 11 Nov 2025 10:01:17 +0000
Manifest next update: Wed 12 Nov 2025 10:01:17 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: bzb4vEzFIfA6t9URvy2uYMp51sfxd0gqY7Jse9pv0aM=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:d4:6e:bb:4f:ab:b6:16:e2:2e:4c:1f:cb:e6:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Nov 11 10:01:17 2025 GMT
Not After : Nov 12 10:01:17 2025 GMT
Subject: CN=b75baba36ee429227efc6e4a47dc604975727573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8d:fa:06:06:5e:37:e5:39:8a:36:8a:06:1f:
53:26:50:ae:68:67:67:db:31:17:0a:d8:41:15:46:
48:0b:bb:8d:30:5b:ff:ad:7f:63:cb:52:34:c1:04:
02:cd:98:5f:69:a9:15:54:96:4c:a6:37:a5:ad:04:
56:8e:69:d1:da:67:77:d0:6c:57:fb:a4:86:80:f0:
60:64:5b:9d:b1:cb:95:f0:f6:ed:e3:3c:a2:71:31:
85:09:73:fd:aa:49:8d:ad:28:10:93:13:98:72:44:
8e:ef:b9:a0:36:98:3c:5e:b0:d0:1d:de:84:8c:fa:
11:bc:d7:63:5e:58:fc:17:1f:e3:68:c4:12:c9:33:
7d:e2:76:b6:c9:32:4e:87:0a:93:19:a8:21:2c:ca:
99:41:4f:f7:5f:85:f0:d0:ff:00:2c:e8:c9:a7:33:
f6:ed:6a:b6:0f:64:ea:90:03:ba:99:33:f5:4e:19:
37:c0:12:31:ed:5b:32:65:86:eb:e3:0e:22:72:68:
28:18:9e:9e:6c:4d:96:28:b8:65:a8:42:de:34:44:
85:a5:dc:9e:24:9c:7c:f8:8b:d2:7c:fe:a7:a2:52:
2e:40:74:d9:e7:67:f3:96:db:e8:03:1b:80:9f:ae:
c7:10:fc:aa:5c:1d:bf:bd:b8:fc:f9:1a:57:4d:43:
7d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:5B:AB:A3:6E:E4:29:22:7E:FC:6E:4A:47:DC:60:49:75:72:75:73
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cf:66:e5:a7:0f:c3:0d:3e:69:d5:81:90:e3:5e:29:13:d8:
84:19:6f:23:f7:3f:2e:cb:ca:c6:ba:99:5f:67:1a:2b:35:b1:
e3:ef:59:30:15:19:ae:ef:42:1d:01:39:4c:b4:6e:c4:d8:a1:
41:7a:51:a5:0d:bd:d8:5d:67:ce:7a:c8:22:90:02:94:54:ab:
2c:83:36:9a:f3:fe:42:84:2d:17:27:2e:54:bb:47:67:1c:9e:
19:20:b4:32:cd:24:e0:46:fe:f9:22:b7:1e:74:b6:22:9d:73:
61:d7:cd:77:ea:ae:85:0c:f4:96:e8:bd:0f:bd:a6:fd:0f:87:
b9:bb:1f:c6:bb:67:8b:7c:3e:f1:49:0e:04:cb:9c:d4:ae:b0:
e0:eb:21:d2:ce:a2:23:fe:ce:b9:64:41:e9:ed:30:24:da:ba:
eb:93:5c:5c:48:1d:3c:3a:39:96:2c:e2:db:ef:62:60:fd:63:
74:6e:c9:52:51:f5:37:4c:d0:bb:63:6f:69:57:2c:e8:4b:a4:
eb:8b:3e:2f:99:ae:c7:8d:83:e6:a6:ab:1c:71:93:f1:61:0c:
51:b7:e1:e0:fd:e4:a3:20:5f:b0:f9:29:b9:d8:bd:13:ba:03:
51:4f:27:cf:80:bd:f3:e6:c4:90:83:0b:9c:65:66:1b:2d:30:
cc:ee:03:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:11 2025 by rpki-client