Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: VGHGpHH2WBelXC/WDAiVTqNZ7fFbl7URbZKPlu2sjgY=
Subject key identifier: 81:7A:AF:0B:D0:9B:90:16:A9:F1:89:61:D1:E9:22:64:EB:07:30:C5
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 0196089D91756B37F7710CF34F40033414B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 14D8
Signing time: Sun 06 Apr 2025 01:01:06 +0000
Manifest this update: Sun 06 Apr 2025 01:01:06 +0000
Manifest next update: Mon 07 Apr 2025 01:01:06 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: r//qmlXy2eUT4JaUwj3d0HT1GsYnNUNCrKUc+SDc28k=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:08:9d:91:75:6b:37:f7:71:0c:f3:4f:40:03:34:14:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Apr 6 01:01:06 2025 GMT
Not After : Apr 7 01:01:06 2025 GMT
Subject: CN=817aaf0bd09b9016a9f18961d1e92264eb0730c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:82:00:30:87:93:9f:45:47:32:2c:5d:ae:d5:
b3:bf:01:ee:01:f8:ac:3c:d8:e7:42:35:58:23:44:
96:ff:56:b3:a8:cc:92:ac:32:c5:d1:2d:df:30:5a:
1a:76:82:35:5b:62:78:e4:ab:c0:b3:67:c4:17:f6:
10:f6:a6:d8:16:b2:90:92:cb:5e:ca:58:ca:0d:8c:
e7:26:8d:8b:c3:a4:63:11:7b:ef:34:68:6c:41:68:
82:b0:88:fd:18:74:4d:ef:33:8b:3c:a0:fa:1b:2d:
de:48:b2:51:5f:e1:9f:5d:f9:25:59:82:01:07:55:
f0:2c:8d:22:f3:45:fd:a6:06:8b:9a:5d:51:e9:ee:
e0:84:ef:a4:7e:8e:23:01:33:9a:f7:ac:0d:f3:fe:
7b:a7:10:67:df:9a:1b:46:ee:7d:2c:51:de:06:a3:
fb:01:97:96:44:c1:74:d8:0c:6c:b6:59:20:01:e3:
26:72:7d:73:76:ac:11:0b:87:7f:7a:fe:24:a5:5c:
f3:6b:97:f1:df:7e:b8:4c:42:d3:22:41:11:48:cb:
a7:57:93:d7:b0:1c:b9:ab:f0:14:40:78:f1:fd:ae:
33:f0:69:3f:5c:9d:e1:41:a0:2a:56:93:12:aa:aa:
11:c5:d0:99:ec:fa:76:18:47:86:fa:73:bf:06:60:
0b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:7A:AF:0B:D0:9B:90:16:A9:F1:89:61:D1:E9:22:64:EB:07:30:C5
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:2b:d2:55:e9:e6:90:a1:36:51:2f:f8:eb:35:29:bc:37:3b:
9e:b7:80:3c:f1:83:3d:89:56:1e:f0:9a:b5:ba:76:19:08:18:
0b:a2:1e:f1:eb:25:d3:50:7b:d3:35:2b:52:00:80:00:2c:45:
84:00:05:90:6a:d3:8e:87:14:9a:22:7b:53:f1:b8:aa:8e:96:
f4:e1:2f:8b:4b:5b:9b:55:ed:12:10:68:7a:68:e1:c7:30:6e:
0a:c5:5f:32:e9:0c:7a:17:54:b5:7a:ae:67:88:4f:95:0e:7e:
c3:06:a7:36:26:5c:c0:e9:27:88:0d:fc:11:50:f1:60:64:b3:
71:e6:1a:26:88:b5:1e:04:04:23:c4:47:51:ac:e4:2d:56:62:
77:e2:c1:28:bb:eb:87:87:96:6d:48:72:09:7f:d4:7b:c6:3a:
0e:66:4b:4c:d4:6e:77:ca:ac:65:a2:7a:dd:2b:04:83:ba:3d:
94:86:9b:da:bf:fd:e6:27:0f:17:5d:c3:aa:88:38:f7:fd:dc:
f9:59:f0:b5:e4:6a:ac:b7:73:33:7a:f8:95:2c:20:a5:30:f6:
a4:02:7e:66:4e:57:10:8f:1f:69:f2:af:b8:4e:95:0b:bc:8f:
09:c9:eb:fa:8e:9c:c9:c8:05:05:1b:1e:a6:08:c3:66:cc:2a:
64:55:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:30 2025 by rpki-client