Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: lpKhj1Caoj2OzxFKtDwvmJJCy1rq1I2iY8IbFQVfpCw=
Subject key identifier: 87:45:46:70:AA:6B:AC:07:12:F4:2E:CC:5A:49:41:34:D0:5C:A1:1D
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 019A71809BA88478DFCCBAD5459175074E40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 060C
Signing time: Tue 11 Nov 2025 06:00:45 +0000
Manifest this update: Tue 11 Nov 2025 06:00:45 +0000
Manifest next update: Wed 12 Nov 2025 06:00:45 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: Un4NAYTMuDTnwnITCvucpknxBiZRHJyNj8IwjaLESnI=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 06:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:80:9b:a8:84:78:df:cc:ba:d5:45:91:75:07:4e:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Nov 11 06:00:45 2025 GMT
Not After : Nov 12 06:00:45 2025 GMT
Subject: CN=87454670aa6bac0712f42ecc5a494134d05ca11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:11:3b:47:c9:13:13:48:84:9f:72:5e:c3:24:
fe:3f:87:fb:b7:9d:19:a0:40:34:2c:10:fa:b9:ef:
89:bb:54:1c:c7:b9:d4:2e:9d:a4:d0:ae:90:03:e8:
53:38:02:6e:86:f6:03:0c:e0:2f:d8:38:c8:a7:26:
a3:e9:48:b4:96:55:b7:62:04:0f:78:77:97:8e:42:
6e:e7:d9:88:3f:3c:b7:c6:87:5f:79:c9:fa:39:5d:
38:be:ec:15:09:d1:f1:65:c7:a3:aa:cf:ea:0e:bd:
cf:01:0f:2e:c2:f9:d7:b0:e0:6a:a4:a1:69:fa:5a:
32:c5:da:61:70:aa:9a:64:57:2c:6b:53:b7:95:d4:
ac:d1:02:0e:bb:64:11:c8:7d:0c:2a:cd:ae:88:97:
4f:6c:5e:b3:17:58:e6:7e:ea:ff:ec:99:31:8a:2b:
70:e1:82:92:f1:d3:42:1c:e1:09:2a:d7:5d:1b:ac:
d4:36:2c:62:c2:32:7a:36:0d:ec:7f:cd:c5:ed:a3:
b6:3c:18:d5:3b:75:76:08:5d:bb:7d:ca:9e:ed:ea:
d9:d2:eb:10:a4:48:28:45:77:09:da:ed:35:8e:aa:
09:94:84:5a:a4:3d:9a:fe:d2:ea:53:19:f1:76:92:
76:93:47:58:8e:72:af:83:6a:67:04:b2:6b:26:1b:
3b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:45:46:70:AA:6B:AC:07:12:F4:2E:CC:5A:49:41:34:D0:5C:A1:1D
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:1e:fc:1d:01:f8:82:14:f6:d7:8c:72:52:b1:cc:7a:29:b2:
7f:73:c1:0b:16:7d:a5:f1:c3:1a:07:1e:fc:55:5e:c4:98:d3:
62:07:50:44:f6:2e:29:68:c3:6e:42:0b:0f:73:a7:90:27:c8:
4d:9c:bd:a7:76:f0:29:d3:3c:d6:de:81:e4:03:57:93:f9:4a:
03:77:46:cd:e9:33:c2:bd:85:03:2b:54:d6:46:32:dc:b9:2a:
1b:e7:e4:eb:9f:8a:f4:b7:37:86:58:4e:66:60:23:f8:58:2e:
16:2d:1f:e4:18:00:01:34:aa:23:60:f8:48:0b:a2:98:11:3e:
6e:7c:49:78:4e:f8:5f:70:90:3a:d6:d9:5f:d1:81:e0:6a:16:
fe:de:b1:b2:ef:de:e5:51:a3:08:e8:97:11:91:04:33:9b:77:
dd:35:e7:d6:88:c4:9d:ec:94:36:6c:1f:f9:dc:e0:5f:67:6b:
24:73:b6:e6:db:95:ea:ea:39:c0:f6:60:a9:70:a4:42:2c:d1:
0d:96:1e:16:1a:1b:d4:6d:d5:e3:43:9c:2c:21:9c:d1:e6:62:
fa:6a:d0:e7:f0:8d:2a:d1:16:f0:00:c3:3a:48:63:5e:86:78:
3b:35:7a:3a:fc:4a:05:e0:c5:db:a7:5d:d4:66:7e:1c:41:02:
7c:0b:2a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:14:00 2025 by rpki-client