Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File: 73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier: 9wAoiSIK4WijMgryEUCnvSAHubwfr5BCKBPMJ+VjtY8=
Subject key identifier: BF:88:43:C6:6E:B9:54:AF:65:AB:C6:0E:02:24:BC:E7:CC:3B:A3:82
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial: 019A72938E5F9260303D715EDB2649C4E770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number: 0CE7
Signing time: Tue 11 Nov 2025 11:01:04 +0000
Manifest this update: Tue 11 Nov 2025 11:01:04 +0000
Manifest next update: Wed 12 Nov 2025 11:01:04 +0000
Files and hashes: 1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: x6DmXS1rRSU2hg40r5yeLXUIz5eCtFyKysK7l1kk8YM=)
2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:8e:5f:92:60:30:3d:71:5e:db:26:49:c4:e7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Validity
Not Before: Nov 11 11:01:04 2025 GMT
Not After : Nov 12 11:01:04 2025 GMT
Subject: CN=bf8843c66eb954af65abc60e0224bce7cc3ba382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:96:5e:4c:21:ca:e2:dc:f8:c5:b6:ef:e1:73:
9a:1e:e9:4b:54:1f:6f:2b:20:a1:6e:18:0e:ea:70:
63:52:2e:6a:bd:d1:98:99:6d:b3:4a:9a:62:bc:2c:
2f:e2:e4:a9:ca:f1:7b:c6:5b:1b:89:5e:ea:ac:bf:
aa:39:0f:da:87:29:97:3b:92:28:26:eb:b8:99:89:
0e:fb:8d:d4:25:52:64:94:86:72:ec:1b:0a:fe:59:
24:78:ef:18:4e:2f:0c:71:8c:33:5a:fb:82:82:14:
d1:fc:c7:33:d2:05:49:32:87:58:6d:84:8a:9a:73:
52:3c:6b:10:8f:1f:7e:9d:0a:d0:92:3d:b2:43:45:
55:23:94:be:89:4a:8f:16:74:97:13:12:04:5e:8f:
9b:32:ca:61:7d:72:64:b7:ea:d0:f0:fc:4e:5a:d5:
e1:db:c2:f6:55:3d:d9:c0:2c:fe:14:a8:e9:a9:56:
3b:95:0d:5b:93:1f:fa:38:c7:c2:38:c8:43:9d:0d:
78:30:86:1d:68:d7:e6:cf:b6:f9:0f:f8:c6:89:a9:
0b:26:66:51:44:fc:ce:fd:e8:74:bc:f0:48:8e:b6:
ff:77:6f:bb:ee:7e:7d:9a:ab:87:1c:1f:51:16:ad:
2b:92:3d:c7:cf:77:a9:2b:57:00:7f:e5:5e:db:43:
8c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:88:43:C6:6E:B9:54:AF:65:AB:C6:0E:02:24:BC:E7:CC:3B:A3:82
X509v3 Authority Key Identifier:
keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d4:dd:da:3e:5c:59:ce:32:0f:f5:a5:57:6e:80:4d:67:66:
e1:92:43:da:cf:c6:24:0f:15:c8:5f:74:96:c4:d9:46:15:f1:
df:53:b7:c4:08:aa:0f:5f:ab:46:ed:90:c5:09:be:ff:bb:43:
09:6f:87:b4:71:5e:78:85:01:1c:9d:37:8d:f9:c6:66:94:a6:
a4:07:af:08:2a:37:0f:f2:f5:c6:81:d7:96:d7:33:d0:64:35:
0c:b7:03:d4:3e:f6:ac:84:3d:2f:a2:75:cc:3b:d2:76:98:94:
32:c6:93:a4:56:f0:49:ce:8d:95:60:91:96:4f:e6:1a:2b:2b:
b0:2c:cc:20:6e:28:c9:48:48:f9:6c:a5:0c:39:46:cf:41:df:
a4:b2:ee:a9:a5:1f:a5:67:23:60:af:f9:c8:00:a1:4f:71:b8:
68:84:a5:7e:2c:55:47:8f:c9:18:27:95:4e:99:02:f4:08:fd:
21:ec:35:c4:c9:19:db:1b:ff:fd:46:f6:5d:ea:65:97:00:8d:
b8:1b:12:4a:24:ec:14:eb:5c:90:4e:70:8f:a2:99:6c:f5:a1:
07:bb:97:f2:cc:0a:52:05:52:f6:00:37:30:61:a5:03:f8:11:
34:9d:6c:2b:d3:50:3c:29:5d:91:54:2a:68:12:21:55:6c:f9:
c5:c8:7f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 15:25:02 2025 by rpki-client