Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
File: 733R6-5RP_oxjNyIuBrBjP5yazA.mft (raw, json)
Hash identifier: nvL5lBoM+52ydinAy/oGV/j9sQcJWazca4473iHVjDw=
Subject key identifier: B0:16:61:E4:47:0B:46:4A:7B:0F:2D:E3:2C:28:64:98:6C:7C:03:99
Authority key identifier: EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
Certificate issuer: /CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Certificate serial: 019A706E042C6B12739AC52568278FD38087
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
Manifest number: 15E7
Signing time: Tue 11 Nov 2025 01:00:49 +0000
Manifest this update: Tue 11 Nov 2025 01:00:49 +0000
Manifest next update: Wed 12 Nov 2025 01:00:49 +0000
Files and hashes: 1: 733R6-5RP_oxjNyIuBrBjP5yazA.crl (hash: Se1BAN5fiU6n+foZZTOFA93lOLgpxvXsJ8pF0YbbZLA=)
2: j5HF96yv7cLigcHPzuSioYP7qZU.roa (hash: EZSm2GEOWgRxvLjs00cTfuWYkp01jcIX3AmXq7a4GFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:6e:04:2c:6b:12:73:9a:c5:25:68:27:8f:d3:80:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7dd1ebee513ffa318cdc88b81ac18cfe726b30
Validity
Not Before: Nov 11 01:00:49 2025 GMT
Not After : Nov 12 01:00:49 2025 GMT
Subject: CN=b01661e4470b464a7b0f2de32c2864986c7c0399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:94:15:6c:27:88:e9:56:08:52:e5:33:77:f1:
00:2f:5c:fa:95:fd:62:89:dc:bf:21:fb:a3:55:ee:
21:1c:79:35:22:52:1a:75:1b:d0:8f:a5:6b:74:ab:
be:fc:a6:24:25:cc:d1:90:07:4a:0e:7e:69:d9:b0:
cf:87:1f:3d:f0:53:19:a2:9d:b8:83:65:40:0b:3b:
4d:5a:6b:7a:64:eb:b6:72:40:27:c4:ac:f0:31:e3:
ce:cf:64:2d:76:0d:4c:47:69:c7:33:d0:b9:81:a0:
44:ed:24:09:df:13:9f:5a:ac:52:2b:62:f2:d6:75:
a4:8b:50:bd:d7:25:8d:e7:77:a8:68:2d:47:b5:6a:
95:a2:2b:32:a0:b8:83:43:e2:b9:b8:ef:9d:56:13:
4c:ce:af:df:51:5f:c6:cf:14:b3:47:c0:49:03:51:
71:19:ee:8f:0b:22:e3:0c:7a:c8:0b:53:b3:8e:51:
f8:cd:2b:ff:77:3d:12:01:7d:b5:7f:c8:8e:3d:0c:
b2:e3:94:52:34:68:ee:5a:82:51:21:bf:be:22:41:
19:ed:7c:27:42:fb:3e:76:de:bd:f7:5b:79:6a:76:
be:ea:8b:2c:42:6e:e1:79:7d:03:8a:ad:13:06:d2:
70:aa:45:3e:e5:1d:b5:7f:75:91:0f:ff:82:7e:57:
83:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:16:61:E4:47:0B:46:4A:7B:0F:2D:E3:2C:28:64:98:6C:7C:03:99
X509v3 Authority Key Identifier:
keyid:EF:7D:D1:EB:EE:51:3F:FA:31:8C:DC:88:B8:1A:C1:8C:FE:72:6B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/733R6-5RP_oxjNyIuBrBjP5yazA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f9ee6d-7640-4e3d-9b45-e56feca612e7/1/733R6-5RP_oxjNyIuBrBjP5yazA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f0:92:c7:54:27:ef:2a:20:34:23:d1:09:81:65:5f:ef:3c:
5e:f8:96:97:bd:7f:eb:f4:49:39:36:69:62:99:bf:fe:44:27:
de:ec:c7:e2:ba:ee:59:c5:75:29:5a:11:33:c1:2d:f8:89:69:
6d:23:c0:4e:fa:07:02:af:b7:f3:a8:59:16:1a:0f:91:82:f0:
9e:fb:a7:79:96:d9:e6:71:2c:98:e8:41:6f:c1:63:a3:06:1d:
b5:cc:52:40:d7:0a:35:3f:b9:2f:3a:dd:c7:d2:a1:06:1c:64:
8e:f9:e0:c5:e8:64:69:00:0f:0b:53:02:4e:cb:e9:35:56:cd:
fb:e1:5a:0c:95:e4:ba:91:9e:e9:75:39:a7:04:d3:7c:4b:b5:
f9:5e:b5:00:83:72:d0:25:ec:c3:21:2d:43:9b:16:91:ca:84:
bd:d6:4a:25:0f:c2:77:34:60:a6:ea:a4:e8:a3:a3:32:4a:86:
47:00:18:02:88:78:fb:50:10:68:55:ad:59:bb:6c:b3:77:0f:
82:13:3a:70:54:e5:84:d4:7c:73:26:e1:21:66:67:31:36:00:
41:55:ee:f2:d1:bb:90:65:36:6d:ed:c8:9c:50:26:fa:8d:df:
d8:1a:99:d9:b4:d1:66:8d:52:cc:dc:16:75:1f:98:fb:58:54:
df:52:22:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:27 2025 by rpki-client