Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
File: 75pS4318rMafjv78dTO8CxjLXmc.mft (raw, json)
Hash identifier: b/U687GQl8ZKaWXu1YpI4+9CsBENK1RFGjRbDjevQKQ=
Subject key identifier: 83:F0:3D:EB:61:E6:45:21:D9:15:B6:1A:33:E9:D5:DB:43:CA:1B:A2
Authority key identifier: EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
Certificate issuer: /CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Certificate serial: 0199258EC34C3F961DA561A59498A8C064BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
Manifest number: 0834
Signing time: Sun 07 Sep 2025 19:02:17 +0000
Manifest this update: Sun 07 Sep 2025 19:02:17 +0000
Manifest next update: Mon 08 Sep 2025 19:02:17 +0000
Files and hashes: 1: 75pS4318rMafjv78dTO8CxjLXmc.crl (hash: g1MQUzYEcgDbcV3aCHhh2CO4avBG/UE9fEQbIopRyuc=)
2: V1xvVOGY5BJ_I9u5C9ObZ-YSnJg.roa (hash: NClt/SHG+/tXhhv3Y/klJlIO43Syulf2MR3J6Q5EBlA=)
3: qsZrdnkoO0E25hqGWNb8Z9dNerM.roa (hash: hAyilmx8AWlJmwYPt85XuLAx4M2nXqrLORTF4xGEO6s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 19:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:25:8e:c3:4c:3f:96:1d:a5:61:a5:94:98:a8:c0:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9a52e37d7cacc69f8efefc7533bc0b18cb5e67
Validity
Not Before: Sep 7 19:02:17 2025 GMT
Not After : Sep 8 19:02:17 2025 GMT
Subject: CN=83f03deb61e64521d915b61a33e9d5db43ca1ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2f:dc:aa:cb:d4:96:03:4c:59:c9:78:a0:7c:
8d:d6:e1:03:61:cb:66:29:b0:b5:56:ac:05:fd:4b:
95:d6:6c:0d:a9:1b:66:9a:8a:5f:19:cd:da:af:ff:
3d:5f:8e:36:ee:36:fd:9a:47:f7:1a:97:56:71:fe:
4c:db:bf:5b:ca:c4:52:88:a3:64:87:18:53:10:cf:
e6:5e:41:d4:37:76:7b:c4:f2:b5:74:e9:9a:f7:d1:
02:19:3a:62:d9:4e:7f:3d:60:f0:10:35:22:19:4d:
7c:12:df:7c:26:fc:64:9b:0f:1e:6f:df:40:da:14:
97:fc:9a:65:7d:89:9f:4d:08:ad:c5:36:62:55:52:
83:be:e8:1f:de:30:e4:17:8b:e9:53:eb:ca:e5:a7:
b6:af:70:14:58:de:8a:09:89:42:d3:ef:dd:ca:55:
50:95:2c:a0:73:62:54:c2:1a:ad:8b:e5:dc:0e:5d:
a1:d2:05:4b:25:d5:b5:07:5f:c3:80:b8:06:db:33:
42:ea:77:34:8a:62:33:9b:ad:ac:3a:37:b7:2e:09:
92:5c:15:3c:f9:64:fc:82:ad:70:b0:89:b6:61:89:
47:42:1b:3c:92:a5:52:e6:bd:1b:73:25:51:ae:8f:
25:be:9b:18:ec:a8:9a:55:52:8b:3d:11:b4:d5:6f:
66:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F0:3D:EB:61:E6:45:21:D9:15:B6:1A:33:E9:D5:DB:43:CA:1B:A2
X509v3 Authority Key Identifier:
keyid:EF:9A:52:E3:7D:7C:AC:C6:9F:8E:FE:FC:75:33:BC:0B:18:CB:5E:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/75pS4318rMafjv78dTO8CxjLXmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4c6d88-f828-43f9-9641-b1a9bd28651e/1/75pS4318rMafjv78dTO8CxjLXmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bc:f8:be:d2:41:94:d3:7e:87:c7:50:87:d3:2f:f4:a9:f5:
8f:df:01:b0:d3:ab:40:73:d9:cf:44:1a:d3:0a:97:a2:47:76:
cc:66:b5:46:2b:a3:87:3f:36:f7:14:fe:fb:5d:84:5c:87:36:
d1:d7:24:cb:d4:64:b1:80:44:49:c3:10:3b:8d:d4:4f:65:cf:
47:ca:47:b4:8f:81:69:b0:98:2b:51:03:12:24:c6:36:2a:30:
1a:d4:2e:c5:55:e8:da:b6:13:ed:6c:2b:e7:4e:c3:b9:a0:5d:
29:b0:28:03:93:3e:61:c7:cd:d3:08:25:2d:0b:73:2a:40:e8:
eb:23:1b:0c:b7:5a:cd:14:f8:e3:22:b1:87:df:51:8b:c3:eb:
a0:20:2f:e8:0d:8f:ce:1c:4f:cf:fd:a0:af:0f:c7:98:5c:05:
19:6e:0a:29:0e:c3:7c:48:36:d3:bf:cc:f5:da:12:62:f6:2c:
74:f9:ff:31:fb:cb:97:76:90:ea:52:ba:55:de:0b:95:a5:07:
5f:2e:f4:d0:b4:35:ed:ce:5b:80:c5:cd:dc:c7:aa:1e:2b:2f:
79:38:d1:28:72:74:68:da:5e:19:a5:31:73:59:21:14:59:ce:
4a:ca:b1:87:a5:3a:3b:e9:85:1a:40:43:52:c0:1e:c8:28:8b:
97:55:59:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 05:14:29 2025 by rpki-client