Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: twIEfaOfsZZbrJD9Z7TshG4EMkLbBrtu4wDzJ+njS80=
Subject key identifier: 43:3B:02:B1:38:23:10:21:20:89:7C:2C:52:DC:C0:FC:D4:96:30:83
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 01992B5A3502846BA285AA4E044B48A6C659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0563
Signing time: Mon 08 Sep 2025 22:02:35 +0000
Manifest this update: Mon 08 Sep 2025 22:02:35 +0000
Manifest next update: Tue 09 Sep 2025 22:02:35 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: HvFoPjtR3Ac7us/WD9NloYxmvdGCg9VrpCqrsz6HS1M=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 22:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2b:5a:35:02:84:6b:a2:85:aa:4e:04:4b:48:a6:c6:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Sep 8 22:02:35 2025 GMT
Not After : Sep 9 22:02:35 2025 GMT
Subject: CN=433b02b13823102120897c2c52dcc0fcd4963083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:a1:e5:22:23:2e:13:00:fc:46:e3:6f:47:
ff:d2:e1:3e:d1:48:95:2f:e5:81:d5:52:c7:8f:da:
af:84:c1:73:9f:e5:cc:45:3d:37:02:97:13:6e:33:
a7:4c:d3:21:fb:0b:c1:97:3b:70:d0:97:ac:c4:33:
88:9d:f8:47:3a:c8:87:a1:ef:dc:2d:1d:26:20:12:
43:48:2c:6d:92:5d:4f:82:32:dd:fe:63:7c:cc:ab:
c5:8b:aa:7c:3a:9e:f1:a0:f0:20:ee:29:e0:d4:4d:
d4:af:d9:d3:97:f6:31:3f:ed:ca:0d:85:f0:13:98:
2b:9e:9e:c5:b1:f9:bb:3f:53:6d:64:03:38:a6:3a:
6f:cd:f4:d5:ea:c8:53:17:7b:85:27:71:31:b7:4b:
e9:d2:86:2e:30:3a:33:75:86:0c:37:bc:e4:60:b8:
1c:dd:99:85:3e:8a:22:5d:7e:b9:a6:c9:11:94:b0:
18:6e:0b:2a:e9:be:64:ae:83:2a:ff:e8:2e:c0:22:
58:5c:f2:8b:23:d0:28:12:fc:d0:95:eb:9a:18:d4:
ca:9d:4a:14:9b:fd:fb:c4:e9:90:38:72:a0:93:d8:
10:db:8e:a2:15:30:8a:4f:70:dc:fb:9f:32:cb:cc:
cf:17:62:d2:8d:3e:8f:08:b1:4f:d8:25:70:c1:cf:
07:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3B:02:B1:38:23:10:21:20:89:7C:2C:52:DC:C0:FC:D4:96:30:83
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a0:2c:bc:ea:82:81:a3:b8:a7:8e:63:61:bf:52:5a:5a:97:
09:da:8d:56:f8:de:64:49:10:57:03:5b:15:d7:4c:f4:49:ae:
de:13:70:7a:3e:7d:11:f5:d8:58:e2:ff:37:9a:bc:d5:f1:e7:
6a:0e:e1:79:f9:ca:f8:d2:45:cf:82:6b:af:08:38:4b:58:5a:
c3:e0:29:df:3a:a9:4f:27:63:ce:24:05:a2:af:29:35:c8:db:
24:60:51:2e:95:46:9d:00:e8:79:78:ff:9d:5f:37:6e:57:03:
b4:f8:d6:66:32:5c:a2:b5:70:c2:45:27:1a:17:90:d9:ad:66:
73:89:5a:9c:c9:81:7f:12:6d:39:c8:7d:be:52:3e:08:ae:84:
11:96:de:65:d6:13:28:5c:f7:5b:59:59:d9:3a:13:de:65:8c:
88:e8:14:67:c3:52:b9:d6:16:7d:16:0d:24:38:67:84:6e:f1:
1f:43:2d:b6:86:f1:a1:67:e2:8f:c2:5f:c3:e6:4e:46:eb:0b:
f3:ea:4b:48:ef:76:42:a8:f7:05:41:2c:8f:b9:f8:f6:32:31:
e0:81:1e:f2:69:0e:1d:ad:bb:c3:27:65:fd:0c:ca:56:82:d9:
31:ac:de:9c:73:ca:9c:87:03:68:d8:a4:ac:26:8a:0f:10:fe:
84:98:b2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 08:02:18 2025 by rpki-client