Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: Dw11zTl8Kr0wgHTJLBR/8vqAZO797Ehtl9q02CyAuWg=
Subject key identifier: 50:13:5C:DD:44:0B:7C:89:AF:73:AF:60:DA:31:05:D5:4E:D0:48:3C
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01992255A32A7F16F8CA9E7938CECC64DEDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:01:01 +0000
Manifest this update: Sun 07 Sep 2025 04:01:01 +0000
Manifest next update: Mon 08 Sep 2025 04:01:01 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: tY+FFcBneztmDwS3Qz6C9M4izqJia/c2sQ1OARQ+pAg=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:a3:2a:7f:16:f8:ca:9e:79:38:ce:cc:64:de:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Sep 7 04:01:01 2025 GMT
Not After : Sep 8 04:01:01 2025 GMT
Subject: CN=50135cdd440b7c89af73af60da3105d54ed0483c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d8:9c:0d:1e:38:7a:48:22:1b:b1:d8:33:e5:
56:1f:aa:90:30:6e:60:69:6b:c7:e3:fe:9e:9a:ec:
b5:20:7f:99:e5:1c:54:aa:fb:d4:75:ed:01:e3:e5:
4e:8e:67:df:f4:7a:ed:8c:0d:90:30:bd:ca:5c:17:
4a:92:ec:0b:70:f4:31:82:08:eb:a2:9f:fd:ae:0a:
cc:d5:d7:4b:4d:be:b6:42:46:df:fb:47:11:c3:c6:
82:d3:5f:ff:75:c6:d9:98:b2:ce:98:f5:7d:e6:01:
23:41:21:67:dc:37:a1:d3:93:b9:d3:f5:94:2b:3e:
95:92:e4:48:d3:9a:1a:2e:bc:4f:cf:ee:82:c6:4e:
2b:5a:5c:9f:ab:0a:76:8b:75:fe:bd:39:2f:82:76:
cc:52:35:a1:5d:18:d0:3b:aa:a7:14:be:22:04:7d:
0f:d8:23:02:90:e7:11:35:51:de:74:1d:8d:3e:58:
08:c6:85:8c:a5:d4:91:76:74:f1:0c:7a:a8:73:4d:
10:84:7b:3e:de:ca:0d:9e:ba:37:aa:86:56:08:5a:
43:01:7d:06:b8:cf:92:25:99:c5:52:57:67:4e:c1:
24:9b:5e:fb:fe:02:56:7a:e5:25:3e:29:59:bb:8e:
93:e0:50:fd:65:94:f5:23:ae:d0:cb:20:fe:58:0c:
b8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:13:5C:DD:44:0B:7C:89:AF:73:AF:60:DA:31:05:D5:4E:D0:48:3C
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:6e:78:29:85:4d:fc:22:04:f5:b9:3c:14:b7:11:3b:f9:58:
a9:1b:34:fa:04:55:ac:22:96:0a:e4:d7:d9:c3:31:a7:25:ce:
c6:6d:6c:a3:52:ba:cc:7c:2d:2a:fa:50:7d:8d:8b:41:24:7e:
f3:06:87:34:7e:a2:04:c9:48:b9:12:18:29:6e:f1:be:13:47:
57:9c:49:37:fd:31:75:19:22:d9:77:d9:41:e7:cb:df:36:2e:
9e:c4:58:a8:6b:33:25:87:e2:f1:8f:42:89:4c:b3:48:fb:b4:
f5:10:39:38:08:6a:ae:20:cd:05:2c:d3:01:da:d1:ab:3e:5a:
34:5e:88:ea:ac:f4:d4:55:be:3f:93:48:89:80:29:dc:9c:c0:
e8:93:ff:53:64:f1:73:8d:7f:a3:8f:89:86:29:c9:50:bc:4b:
b3:f9:93:57:a3:07:07:fd:5d:57:42:aa:04:a4:10:16:79:50:
24:92:70:06:6c:da:7b:98:c8:ef:f7:25:78:76:a6:0f:4b:ea:
63:31:3d:46:6c:89:95:33:43:67:b8:14:4f:63:0e:65:10:64:
02:0e:0f:c0:49:b1:bf:de:69:c3:5c:42:34:67:f8:31:1a:5e:
0d:74:d3:a8:37:9f:c8:ed:5d:d8:c0:32:ac:3c:e6:22:99:bb:
47:d2:ca:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:39 2025 by rpki-client