Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: uH1HTyqdr4Z7TpzOPaOVoUZMj3WBJvivRqmN1ghrbSM=
Subject key identifier: 31:10:2F:22:43:C0:28:FF:FB:18:B9:89:D5:3B:EB:6E:CD:21:05:25
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 019A7225D897D26DCC93EAED7D9DC5B582D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0EE4
Signing time: Tue 11 Nov 2025 09:01:14 +0000
Manifest this update: Tue 11 Nov 2025 09:01:14 +0000
Manifest next update: Wed 12 Nov 2025 09:01:14 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: DvQMN0L8ned+YCfXYffePTy0emqcKcamsa8V99iboqw=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:d8:97:d2:6d:cc:93:ea:ed:7d:9d:c5:b5:82:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Nov 11 09:01:14 2025 GMT
Not After : Nov 12 09:01:14 2025 GMT
Subject: CN=31102f2243c028fffb18b989d53beb6ecd210525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7e:a1:77:7b:98:52:23:34:84:d5:18:a0:3c:
b4:9e:0e:82:55:50:28:da:bb:b5:58:9b:c4:af:e9:
fa:c1:60:43:a1:a2:25:ff:0e:34:17:88:d2:29:aa:
c0:a6:a7:0e:ce:3d:76:6f:0b:93:4b:16:6d:39:ca:
f6:56:b0:29:73:62:17:e4:d0:17:c3:5c:61:97:cd:
c9:bb:73:fd:09:ba:8b:fa:be:cc:33:f6:a4:12:1e:
47:70:5a:6d:f0:9b:7a:f4:3f:1c:cd:a9:c4:9d:9c:
d3:e8:94:08:9a:99:87:bf:9f:cf:b8:57:77:31:a1:
1d:91:dd:82:f3:cb:47:26:1b:7e:56:c6:96:4c:c1:
e8:45:d5:45:91:ea:73:da:4b:27:b4:df:8b:4b:b1:
67:45:4b:9e:b5:10:31:31:a9:39:7d:90:67:6a:ca:
fa:8f:c7:ea:1d:89:dd:93:c9:cd:5e:33:e8:45:54:
d9:b3:aa:db:ef:8b:a2:a1:14:55:d3:3d:6d:0e:de:
7b:d0:a8:4e:80:56:bb:a4:25:8c:6e:74:8c:ea:78:
fb:73:a7:e0:a2:69:80:a2:56:56:4f:1d:cf:1a:18:
10:97:f9:9b:1a:a1:aa:28:8e:6a:73:1d:51:4a:5d:
74:16:52:88:10:18:95:08:d5:59:c8:f4:90:99:2a:
8f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:10:2F:22:43:C0:28:FF:FB:18:B9:89:D5:3B:EB:6E:CD:21:05:25
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:7c:10:9c:df:24:f5:f7:51:54:22:1c:a5:e1:ec:17:e8:18:
4e:2e:26:60:6d:4f:c2:ff:41:31:f5:1a:2b:d8:66:f4:fc:19:
56:cf:a9:41:98:ef:6d:04:ff:4f:52:eb:a2:0a:fa:c0:34:a6:
c4:98:96:97:65:6a:86:04:aa:81:83:16:44:7d:69:c1:4d:94:
10:07:04:ad:3e:e4:13:f6:44:d7:0b:be:41:58:ec:06:79:2b:
13:e7:1e:04:8c:14:49:35:c2:16:08:59:31:12:05:b8:59:4c:
48:eb:63:c6:db:d7:45:af:e6:02:c6:fd:05:a6:13:b3:7a:0a:
bb:a3:34:be:3d:86:d4:aa:77:b0:32:74:4d:3a:a7:c3:7e:4f:
64:db:1e:5b:54:22:3a:ee:af:0c:47:c1:36:a9:46:4b:6a:f1:
27:54:ef:ca:06:81:55:f4:8a:bf:e9:40:0d:ef:f2:14:67:3c:
1d:f6:ab:f0:ad:21:68:a7:be:13:13:0b:53:90:bc:3f:18:72:
00:a5:34:77:ff:8f:2a:20:eb:43:bf:ba:cb:33:da:99:20:b8:
7a:2a:55:9c:5c:1a:48:12:35:80:51:e3:03:d2:f8:b0:45:ee:
db:e1:b4:80:f6:67:0d:d3:c7:15:9d:da:de:65:66:ac:be:9a:
aa:65:d2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:53 2025 by rpki-client