Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: SNE+o9jF5VkfOUoxWrU3UIBmxTQQaDh0pgYVdi4BtcI=
Subject key identifier: 11:9A:F0:8B:9C:B6:59:5A:F9:64:AB:01:5A:0B:CA:56:2F:88:4B:CA
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01976BF4589481D7A632FC0AA3D4F283BE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 01:01:04 +0000
Manifest this update: Sat 14 Jun 2025 01:01:04 +0000
Manifest next update: Sun 15 Jun 2025 01:01:04 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: NBEMIVZOJHr6O/pdjlRvcyFfGtCozhyxVsuhmRTclYw=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:58:94:81:d7:a6:32:fc:0a:a3:d4:f2:83:be:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jun 14 01:01:04 2025 GMT
Not After : Jun 15 01:01:04 2025 GMT
Subject: CN=119af08b9cb6595af964ab015a0bca562f884bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:31:e3:e7:f6:81:b3:b2:3d:23:0a:01:7d:f2:
48:a2:87:a2:8a:22:d9:10:c8:0a:8c:bb:8e:70:22:
79:65:41:fc:0f:f9:69:4c:a0:60:95:df:a0:85:9e:
f0:ce:1a:f1:b6:e0:b5:18:c0:fc:34:73:1c:77:53:
b1:7f:f5:81:88:01:8a:f9:bc:35:70:da:b4:d4:38:
b1:26:99:ac:e1:26:0e:bb:da:30:24:5f:01:5b:38:
c9:45:6a:45:f8:b4:7e:22:de:20:1c:06:12:bd:11:
de:77:29:b6:76:38:b2:a3:b6:3a:46:ec:f9:5c:b1:
05:9e:b3:a0:e9:31:be:e3:07:69:fc:82:40:68:1e:
65:a5:7c:70:a5:4d:c9:1b:d5:ac:a5:6c:84:de:c1:
30:2a:22:be:38:e3:63:95:20:ae:5f:bc:61:89:ec:
79:66:78:87:09:1a:7d:4c:72:0c:ae:e3:6b:59:18:
cd:66:1d:d0:8d:4b:dd:c2:7b:d5:9a:c2:e8:5f:f9:
76:ca:11:78:49:f4:1d:83:f8:fb:c0:65:e9:05:cf:
39:e4:a1:9d:5e:7c:19:2d:26:18:bb:f0:a6:c2:f5:
1f:a9:0b:45:82:43:02:c7:55:9f:3f:79:88:b0:3d:
53:fa:f6:27:7b:b1:0d:94:c1:94:d2:87:b4:66:e8:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:9A:F0:8B:9C:B6:59:5A:F9:64:AB:01:5A:0B:CA:56:2F:88:4B:CA
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8f:d3:2b:79:5b:29:e2:0c:ef:ec:cd:55:07:85:b3:8b:95:
33:d2:cc:c5:95:eb:ff:03:8b:ba:3d:63:58:4c:03:3e:b1:ad:
2c:5c:ab:7b:16:3d:6f:b3:f1:11:10:5d:d7:70:32:20:b3:c4:
b2:24:f0:f4:b9:b3:e3:b0:81:86:f7:4f:c5:18:39:91:cb:4a:
05:90:fb:97:45:59:be:e3:d8:a9:c8:0f:87:7e:d4:ac:b8:4f:
11:30:5c:1b:92:0b:46:0d:57:d3:6d:74:05:d7:d3:c6:1b:91:
58:0c:83:57:4e:6f:ba:88:d9:8a:e4:d0:be:2a:71:96:c0:26:
c0:51:95:05:2d:36:6a:c8:27:f0:34:77:28:b4:a0:b2:c1:8f:
e2:0d:0a:05:70:0b:9c:0c:26:1d:ee:4b:8f:10:63:12:bc:01:
f6:a7:88:e7:52:d4:ac:4f:9e:32:de:9d:10:26:ee:db:01:ac:
5a:0f:3e:33:51:88:e8:14:65:a9:4e:44:f1:e2:b4:a5:d6:9e:
e3:19:05:14:b4:84:a4:97:9c:db:8f:18:e0:82:fc:ca:58:a2:
ec:a1:d4:4e:a6:2a:fe:e2:d4:9a:00:c0:2c:69:b9:a7:82:a4:
dc:75:60:54:32:a8:29:39:8b:a5:06:c1:55:90:6f:9d:f4:3e:
fd:e0:1e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:02:34 2025 by rpki-client