Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: i2KhSUCL/uIRsV+WCdjnUISOk0toPgsgz88NHcwLMwk=
Subject key identifier: 88:ED:9A:C9:C7:B5:7D:83:51:5E:09:A1:E4:46:08:63:19:F4:E8:C1
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019739BE3CFCDEB1F04289109178EC7D7DD7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1576
Signing time: Wed 04 Jun 2025 07:00:58 +0000
Manifest this update: Wed 04 Jun 2025 07:00:58 +0000
Manifest next update: Thu 05 Jun 2025 07:00:58 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: A3kNvZQF5QrYgnMmomJ/a9Q8o9cxLYVsES6Bjsszirw=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:be:3c:fc:de:b1:f0:42:89:10:91:78:ec:7d:7d:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jun 4 07:00:58 2025 GMT
Not After : Jun 5 07:00:58 2025 GMT
Subject: CN=88ed9ac9c7b57d83515e09a1e446086319f4e8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:40:a9:8b:d9:67:30:ac:2e:ce:b7:e0:ed:2b:
57:89:c5:26:b1:d5:0a:6b:09:7c:b0:d3:06:3a:8b:
1f:b3:75:31:e9:6a:13:06:33:5b:dc:7e:f5:f6:da:
2f:59:1c:7c:d9:aa:2e:09:d3:3d:f6:df:c0:6c:d8:
9b:d0:4a:de:1f:02:24:fb:59:cd:b1:dd:7e:35:7f:
28:4b:f1:67:fe:51:b2:0f:f9:70:a9:3d:be:6b:06:
a1:df:80:55:ff:fa:65:e1:52:94:ba:31:66:b6:8e:
2e:a1:3f:72:65:f8:6a:44:83:6b:06:11:80:c2:fc:
48:77:0c:61:de:8c:76:ff:a9:ce:7b:0f:21:64:43:
86:be:07:c6:65:58:ae:63:e2:86:c6:a4:6d:f7:1b:
49:f6:14:5d:7e:c6:b2:42:c7:82:db:86:95:36:98:
54:2c:ef:18:dd:52:90:5b:8f:75:42:c6:27:93:5a:
5c:54:9d:22:c1:84:db:49:57:30:db:0c:b7:93:55:
7d:45:b9:02:3a:a7:c3:71:7b:35:fb:c5:3a:22:27:
4f:78:72:ff:85:58:3e:aa:3d:3d:f2:c6:cd:1b:eb:
ad:bc:5c:f5:ce:31:e6:49:01:9d:b0:4c:26:c9:bd:
55:8f:5c:2b:3f:60:e9:b8:c0:30:3f:ad:a0:9d:ea:
9d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:ED:9A:C9:C7:B5:7D:83:51:5E:09:A1:E4:46:08:63:19:F4:E8:C1
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:2d:57:51:63:b5:04:8d:40:ed:1b:93:6f:8d:15:53:ff:f6:
82:3c:66:e8:d1:b0:e1:59:f9:ca:18:b3:d3:49:31:24:4d:96:
7f:86:a8:8e:d6:3b:d7:e8:e5:f1:3a:84:7c:7d:a5:7e:3f:36:
1d:74:81:b5:c0:6f:0a:fd:8f:19:9c:80:6f:bf:12:4f:f8:6e:
c5:e6:de:42:00:3a:d1:14:c2:ed:c3:77:31:0b:24:37:72:2c:
2a:ba:07:d7:9e:bb:d4:dd:15:4a:5f:9e:2c:53:d3:46:7d:a9:
8f:be:05:b5:e3:7b:b7:12:da:65:57:c3:60:f4:e4:0b:38:31:
f7:0a:92:0f:af:b6:a3:14:19:66:39:26:f5:c6:4c:2e:7c:30:
8c:2b:ef:c3:d7:41:df:91:90:73:a2:c9:5d:0d:2a:2e:11:5e:
b9:de:62:91:61:52:04:40:ea:21:c2:bb:26:e0:40:b9:54:46:
58:ef:4d:3c:66:18:50:3c:40:ea:8e:d5:74:19:95:9b:00:14:
77:a6:b9:ab:d9:2b:b3:d4:3c:e0:0c:05:6c:62:bc:0b:3f:8e:
2d:9a:f5:4e:c8:a0:53:f8:50:d7:ea:b1:08:48:d1:4f:6a:ed:
4c:24:72:9d:e9:6d:69:22:14:49:1a:dd:ca:a5:61:d5:4a:59:
e2:01:e0:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:55:53 2025 by rpki-client