Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: 8AmMcmwypTUjNHVJAHGnSISTbvG59VGEKfBvYGOSu4E=
Subject key identifier: 25:22:9C:62:67:8D:06:BA:AC:44:39:FD:01:A0:EB:D6:9A:EA:89:AA
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01982747786394A6C8570A32B5F306DEB87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 15F1
Signing time: Sun 20 Jul 2025 10:00:51 +0000
Manifest this update: Sun 20 Jul 2025 10:00:51 +0000
Manifest next update: Mon 21 Jul 2025 10:00:51 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: Lj86391Pl4v/dqEFchwuqwiMquOWv90Sha5wI4ldNJk=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:27:47:78:63:94:a6:c8:57:0a:32:b5:f3:06:de:b8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jul 20 10:00:51 2025 GMT
Not After : Jul 21 10:00:51 2025 GMT
Subject: CN=25229c62678d06baac4439fd01a0ebd69aea89aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cd:fc:90:46:3c:36:bd:db:5e:55:7b:4a:df:
b6:f1:cd:67:e4:cf:8c:0f:b9:fb:39:65:e7:74:00:
8c:2d:3f:f2:f6:67:4b:03:7a:01:d6:27:4b:2e:b1:
92:f6:8e:90:27:7a:5f:c3:dd:02:2d:df:59:f2:a8:
a0:1a:4c:77:15:52:9a:80:09:b8:c3:1a:80:3d:b2:
22:1e:3a:65:1f:3d:9d:e8:47:71:5e:66:0c:1a:63:
73:cd:02:e6:9b:d2:8c:2f:93:8d:70:a8:39:83:fa:
7f:a1:2d:f6:80:b0:b9:a8:48:69:8a:3d:9e:f7:13:
d5:11:47:a8:cc:61:ef:ce:a6:4e:d8:26:b7:e1:e2:
43:62:87:f1:93:5a:f0:ef:8d:19:fb:2d:d6:c2:7c:
e1:a0:e3:89:99:e1:f6:3d:fe:ee:91:b7:8f:29:a5:
51:ca:42:1e:5a:c9:24:a5:5c:20:cd:95:e8:fc:99:
bf:ec:33:24:f8:2b:33:59:87:71:6c:5e:6a:93:2d:
10:fa:2f:8a:37:94:3a:67:33:39:82:24:da:86:3f:
59:ae:ed:14:ec:54:89:1e:fa:09:0a:99:00:30:ec:
b7:8d:2c:42:05:2e:02:f8:0c:6d:00:3f:8b:65:28:
f2:3e:4c:63:41:2a:13:01:5f:f5:90:dd:a8:ca:bd:
67:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:22:9C:62:67:8D:06:BA:AC:44:39:FD:01:A0:EB:D6:9A:EA:89:AA
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:23:59:7f:a6:74:5d:44:b1:a9:19:d2:81:d7:ae:92:4d:28:
98:6d:18:c8:b3:4a:30:0c:03:2c:21:64:2a:cf:a0:b3:32:f7:
08:9a:11:26:4b:69:ac:02:ef:13:d4:5a:3c:42:ea:d3:62:c2:
f6:81:68:cc:a2:ca:c9:bd:7b:a1:aa:f1:ec:3b:f6:94:1d:88:
51:7d:7f:60:b0:70:98:71:bb:2b:65:9a:d4:91:2c:29:09:80:
f3:c8:39:7a:04:77:51:05:8a:dd:57:6e:18:93:11:16:c8:2e:
a0:be:3e:b9:4b:74:16:d2:9f:8a:1c:49:b3:8f:ee:3a:0f:3f:
d7:46:3d:01:9a:1a:d2:b9:1a:65:6d:08:d9:f8:3e:f4:5c:bd:
12:b8:ae:2c:71:35:94:d3:f8:7b:2c:62:b1:37:41:a3:32:79:
f5:1b:aa:c7:ba:73:ac:1d:d4:34:34:4b:b7:79:43:38:ab:a2:
b6:4f:13:e6:fc:35:34:24:08:78:fb:b7:93:33:01:ef:44:ee:
99:57:cb:58:ae:bf:72:bc:50:e0:f3:8a:20:ee:89:3a:09:29:
22:bc:10:f4:af:b3:76:f8:15:88:87:fd:95:ed:18:38:76:dd:
6f:be:9e:0c:b5:72:0f:44:48:f9:a9:c6:db:a6:e0:7c:8d:ab:
70:eb:17:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:25:55 2025 by rpki-client