Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
File: 74wzqKYgHUCmAiC9Y5tdNSISZz4.mft (raw, json)
Hash identifier: U0baKJXAlo212uQ8Uq69ApIfnVRIb+BOJVtxd7ftRUc=
Subject key identifier: 47:EB:FC:4E:80:AD:05:9F:D4:BD:8D:8C:6A:37:B7:7F:FE:FB:A0:FD
Authority key identifier: EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
Certificate issuer: /CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Certificate serial: 019A70DC28ABF0BADAD82ADF207C797E9277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
Manifest number: 1531
Signing time: Tue 11 Nov 2025 03:01:07 +0000
Manifest this update: Tue 11 Nov 2025 03:01:07 +0000
Manifest next update: Wed 12 Nov 2025 03:01:07 +0000
Files and hashes: 1: 74wzqKYgHUCmAiC9Y5tdNSISZz4.crl (hash: /PLfczUnoL82yh+c25NSWSnId4DttQsl2N84wFtVn2s=)
2: XZUkkjfK1svUa6feBEevTKvtEcA.roa (hash: wyVf5zW45oYKuYL+LlUqTk3eWYEVvuJxk1VRagHAyy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:28:ab:f0:ba:da:d8:2a:df:20:7c:79:7e:92:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef8c33a8a6201d40a60220bd639b5d352212673e
Validity
Not Before: Nov 11 03:01:07 2025 GMT
Not After : Nov 12 03:01:07 2025 GMT
Subject: CN=47ebfc4e80ad059fd4bd8d8c6a37b77ffefba0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:79:b7:5c:ee:6c:66:d6:1a:0c:b9:22:80:9d:
40:b1:90:0d:6b:9c:4a:83:e5:79:cd:9d:1d:d2:64:
a8:dc:6d:ed:d7:c0:1a:a3:b3:0a:05:83:ae:38:37:
43:6e:fc:df:af:0c:5b:5e:f6:3b:43:33:14:88:ba:
da:7e:eb:2a:5e:46:25:1c:8b:8f:17:68:17:05:ef:
d3:ea:fc:f3:80:93:69:d4:36:a1:11:08:2a:6a:99:
bb:e1:be:0c:11:72:4e:25:72:c7:c3:6d:c3:a4:75:
00:6f:00:f5:f4:35:08:fc:1f:1e:45:15:5e:35:94:
a9:52:5e:e9:76:b9:3f:c1:1e:84:60:d2:36:a2:7c:
94:a8:61:56:0a:d9:88:88:71:eb:7f:fc:2b:08:ec:
a3:34:f8:b0:35:b7:da:9b:c1:52:90:4a:c5:26:53:
6b:ee:9e:b1:56:bf:4d:98:8d:51:7b:75:5a:71:53:
e4:8d:1b:96:d6:f1:f7:5e:98:ac:17:d3:41:d6:66:
8e:ba:b0:2b:b6:0e:b1:ab:75:b0:e5:4d:11:4f:76:
35:9f:dd:fb:c3:b2:be:59:e4:5f:68:da:fe:de:27:
d3:54:b7:af:cc:a2:95:b7:40:3d:4c:8b:29:2e:85:
34:cd:ea:89:ea:83:e4:71:e2:0c:c3:1c:c2:16:69:
44:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:EB:FC:4E:80:AD:05:9F:D4:BD:8D:8C:6A:37:B7:7F:FE:FB:A0:FD
X509v3 Authority Key Identifier:
keyid:EF:8C:33:A8:A6:20:1D:40:A6:02:20:BD:63:9B:5D:35:22:12:67:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/74wzqKYgHUCmAiC9Y5tdNSISZz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/bfbe5f-97c8-4347-8a8c-e01bb48863a9/1/74wzqKYgHUCmAiC9Y5tdNSISZz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:49:c6:88:a8:b3:34:8c:de:89:37:42:8c:b9:cb:38:74:a9:
f7:41:f3:20:8f:c6:c5:9f:f9:a2:25:49:e5:93:e4:f8:a2:64:
49:dc:98:1d:b7:4b:91:c4:ac:c4:3d:8f:8e:7a:1e:d2:71:f6:
6e:5c:1d:a3:d4:f4:16:bb:95:5a:a9:69:aa:39:03:69:e1:ee:
9c:66:6c:4e:61:52:df:49:c0:f9:fc:57:38:8e:17:1b:71:ec:
d1:65:fb:e2:d1:ea:a2:6c:2e:1e:7b:a6:54:f8:ae:27:ea:fd:
c9:85:18:2f:6f:09:63:c9:83:8c:48:cb:7c:6f:5a:6f:2c:e7:
61:cb:d1:e3:15:e8:d7:76:f5:86:fd:8a:15:4d:1c:1a:94:1d:
7a:c0:0a:ea:c9:2a:78:82:cf:f4:87:16:74:3a:b0:9d:12:97:
c1:b0:b6:7e:c4:8b:a4:1d:ff:d8:41:93:61:df:f3:30:2f:8d:
ab:84:f9:19:7e:56:7a:35:e6:a4:19:47:c7:5f:d1:66:13:a1:
5d:e9:30:cb:4a:bc:dd:12:f8:97:b2:4e:0c:b2:e4:35:f7:00:
ba:e0:54:d6:d5:75:42:0a:cd:b5:35:c5:c3:df:c7:95:de:8a:
94:75:8e:fe:51:d2:ca:da:af:be:88:a6:f0:6e:15:0a:f0:39:
06:0d:8b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:04:15 2025 by rpki-client