Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
File: 72eEaVdKzAPXguYygf9E-qqz-Ec.mft (raw, json)
Hash identifier: 1Wf8+vfGzJBJ5z9nXP649WHdHSdgEelWVpimeZMC/w0=
Subject key identifier: CB:45:44:FE:7E:67:4D:01:87:33:2A:A5:86:40:CF:76:52:FB:81:60
Authority key identifier: EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
Certificate issuer: /CN=ef678469574acc03d782e63281ff44faaab3f847
Certificate serial: 019A70DC1160C065CBC5D3504BF5131D13D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
Manifest number: 1289
Signing time: Tue 11 Nov 2025 03:01:01 +0000
Manifest this update: Tue 11 Nov 2025 03:01:01 +0000
Manifest next update: Wed 12 Nov 2025 03:01:01 +0000
Files and hashes: 1: 4mzcp9MGPOcBj8vWEpghNUUZwrg.roa (hash: FMPgZ78dma8cFYdFXzHOT5nVPlXdvUP/dSywWfkO/HA=)
2: 72eEaVdKzAPXguYygf9E-qqz-Ec.crl (hash: iHq2ksnjL9DPgsWIEJMYi+1epA7E78DrXXU6Rohgho0=)
3: YraDuYuMIlkEmdPd43lQxmtLVG0.roa (hash: vscD5TcTDxAgQFa013w668xvOsNW4c0gyN2OgXv6DfA=)
4: d-hrh1vUeLOY7U3kjW0I7g-GU8w.roa (hash: Y/cX56/Qn9APSgO+9XrU6NbdQMlq0ISTF7taZqp4egQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:11:60:c0:65:cb:c5:d3:50:4b:f5:13:1d:13:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef678469574acc03d782e63281ff44faaab3f847
Validity
Not Before: Nov 11 03:01:01 2025 GMT
Not After : Nov 12 03:01:01 2025 GMT
Subject: CN=cb4544fe7e674d0187332aa58640cf7652fb8160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:48:54:cf:77:7c:bb:09:7d:ec:3e:95:9f:
c4:d3:e6:8d:7b:47:63:c6:de:00:7d:d5:4d:69:0f:
17:73:0b:98:71:e6:a2:66:74:92:7d:d9:2e:bb:f9:
f9:e5:66:0f:16:c9:62:d2:28:1a:fe:54:bb:fb:9f:
45:84:f4:fa:6f:8b:7a:ef:79:ab:45:f0:36:a7:34:
ff:ed:8c:fc:76:57:0c:9d:db:f7:cc:0b:54:af:44:
37:78:02:80:90:d2:20:e9:d6:56:ec:ba:01:cc:f4:
9f:77:0b:4b:58:73:e8:7f:c1:5a:b1:e5:f5:4f:48:
4e:7b:73:49:5c:1f:45:6e:e8:41:5e:96:75:15:06:
ef:c8:ac:0f:9b:ca:39:1b:37:e7:9e:01:30:79:6a:
f6:9f:d0:c3:88:80:52:71:c3:e9:b4:df:77:80:be:
4b:db:5b:d5:48:4e:11:3a:5c:67:38:f8:c1:30:16:
43:cf:89:e9:43:25:18:10:17:5a:06:83:40:1c:a4:
8d:26:7e:cd:83:18:6b:87:d9:51:8d:74:ab:9f:e2:
8a:82:c5:85:58:d2:39:70:cc:0d:63:97:ba:4c:b6:
14:9d:52:5a:9b:b9:87:7e:d2:ed:d5:af:60:90:a7:
c7:e2:74:1e:dc:9f:b1:8a:4d:d9:90:27:ee:a4:ca:
e7:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:45:44:FE:7E:67:4D:01:87:33:2A:A5:86:40:CF:76:52:FB:81:60
X509v3 Authority Key Identifier:
keyid:EF:67:84:69:57:4A:CC:03:D7:82:E6:32:81:FF:44:FA:AA:B3:F8:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/72eEaVdKzAPXguYygf9E-qqz-Ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b4673b-210b-4e5a-876a-dc059e69b1d0/1/72eEaVdKzAPXguYygf9E-qqz-Ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b8:35:fd:66:bb:42:0c:39:c2:c8:31:30:00:b4:7d:f9:26:
08:11:c3:76:2a:67:36:09:86:02:c9:50:7b:01:ba:58:d1:e1:
d0:f0:f5:29:d3:59:5e:ad:52:e2:8d:c4:9c:8c:83:da:c1:79:
50:4c:5a:84:5d:29:7d:29:90:5e:39:53:32:41:33:4a:12:41:
78:9f:df:37:08:ac:d1:80:67:d5:9f:6a:2f:30:48:6c:8f:1e:
fa:b4:05:bb:06:7f:7f:50:49:b7:8f:d8:c3:fb:01:30:2f:9b:
6f:a3:d8:b6:6d:f7:ca:f4:f3:af:06:eb:b2:ac:10:5e:38:0e:
3d:7e:e5:16:6b:8d:68:0c:94:87:40:bc:ca:33:41:67:88:c2:
99:da:72:7f:0f:39:a3:3d:38:9a:64:a3:58:57:36:6b:5e:88:
30:13:7f:47:48:63:ce:b6:00:f7:85:66:9c:11:19:62:62:56:
d2:c2:08:48:6a:7d:a4:c6:73:69:8b:38:d0:97:83:76:ac:dd:
d4:6c:73:e5:4c:33:41:09:43:87:ae:5e:9f:5d:a7:67:72:02:
3f:1b:f4:f8:12:91:9b:7c:c0:13:d2:d7:29:45:c4:b5:ca:10:
48:89:01:08:9b:7d:f8:97:a3:68:f6:73:8a:31:16:3a:af:d2:
47:f8:cb:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:25 2025 by rpki-client