Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: WfQ1iQXIyxFVrY53QPJjyj2xIfIeJKJe64BeF3BD3fY=
Subject key identifier: 0A:BF:B6:61:B9:CE:33:3D:D3:8F:91:A2:44:7A:C7:52:09:5A:54:68
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 01974AE8EBC997A6B16BD13016C35D87ACFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0D42
Signing time: Sat 07 Jun 2025 15:01:07 +0000
Manifest this update: Sat 07 Jun 2025 15:01:07 +0000
Manifest next update: Sun 08 Jun 2025 15:01:07 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: dG6X/wzGbkWqGCpo2QTbuYCM7swYL9I64DGSul9OFEE=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:eb:c9:97:a6:b1:6b:d1:30:16:c3:5d:87:ac:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Jun 7 15:01:07 2025 GMT
Not After : Jun 8 15:01:07 2025 GMT
Subject: CN=0abfb661b9ce333dd38f91a2447ac752095a5468
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b6:17:26:c9:b9:10:39:7f:1a:ee:a2:32:ce:
9a:39:f5:ae:5d:b3:d5:c2:35:d2:0c:a3:0e:a3:bf:
d3:1d:26:3b:a6:92:80:b8:5b:94:c3:22:d8:98:ad:
e6:54:f9:db:fe:b8:56:5a:c2:44:d3:4f:d5:18:5a:
6f:61:ac:50:a9:a3:c0:87:04:7b:6e:0f:29:9a:91:
cb:9c:ce:76:25:44:4b:d5:40:f4:7f:d8:01:7f:e6:
d9:2e:53:06:4c:a9:4e:a3:4b:74:2a:39:bb:05:96:
84:23:92:75:d4:96:67:88:48:0c:71:c4:47:d0:4b:
39:c4:4a:55:c3:65:ac:dd:d1:7a:f0:ee:6d:bb:c5:
cc:81:2d:63:1b:b1:3b:26:d6:7b:e6:5b:c1:85:79:
fd:b8:7a:1e:57:b2:da:71:5e:d4:34:ee:43:dd:42:
d3:b6:de:60:da:6a:07:8e:be:6e:94:4c:ce:2d:73:
0c:1c:70:ac:9b:cf:c6:ca:0c:f0:a8:0e:27:16:d1:
95:fa:be:d4:08:e1:46:fb:0a:a3:c3:aa:eb:ac:ef:
02:74:66:a7:90:a2:98:43:d7:5d:e9:2c:88:11:2c:
be:af:ee:cf:08:d0:6c:67:06:0e:d0:1b:3e:6d:7f:
3b:b8:9b:60:3c:e3:85:68:53:10:c8:18:8e:22:67:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:BF:B6:61:B9:CE:33:3D:D3:8F:91:A2:44:7A:C7:52:09:5A:54:68
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:c9:38:50:76:92:ed:2b:5b:b8:93:53:65:86:b6:f4:9c:
29:e9:39:74:10:24:6a:ac:cc:16:e6:ab:8d:25:8e:b8:32:51:
78:f7:cd:b7:37:43:e8:53:17:a3:52:c6:da:79:2b:22:f7:61:
a4:b7:2e:47:dd:d9:65:0e:03:6d:83:e0:e0:ff:40:ef:89:cd:
6b:01:42:29:47:4b:f4:6e:69:2b:df:52:40:65:f7:5a:3c:c4:
1e:4a:41:46:13:c5:41:7b:40:71:e9:6f:82:a3:b9:68:d2:cc:
3c:d3:03:56:98:0e:60:b3:4e:b0:9b:a0:61:96:0d:f4:de:52:
c9:d0:f9:45:29:72:72:f6:1c:9a:bc:1f:3c:97:57:e4:f3:b9:
ef:db:c7:62:a7:62:f5:e5:72:83:90:19:45:ed:4f:c4:40:36:
72:49:8c:8e:4a:e9:91:1f:37:c7:c6:67:c9:76:c5:a7:01:bf:
5b:7b:16:a2:d8:27:3e:20:4c:53:f2:a1:40:99:0e:d6:5e:10:
8e:0a:f3:55:67:94:84:75:58:b3:c7:a8:42:4d:3c:cf:58:6f:
1b:de:c9:bc:09:87:0c:32:9d:3a:3f:aa:da:8c:81:c1:eb:c8:
16:9b:02:e5:b4:ff:a5:d2:c7:88:f1:f3:5c:20:d6:aa:7d:31:
69:72:31:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 20:25:22 2025 by rpki-client