Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: r9ISj9aJ42kK2B0VTc+kVzbsyYM8/cO8tipVzyZVXAw=
Subject key identifier: A9:AF:8E:F5:37:51:8A:74:31:55:0A:06:71:E0:9A:C4:7B:C4:53:C9
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 019672D48C7241748371A1360B592B3B284F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 150F
Signing time: Sat 26 Apr 2025 16:00:54 +0000
Manifest this update: Sat 26 Apr 2025 16:00:54 +0000
Manifest next update: Sun 27 Apr 2025 16:00:54 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: jkhKNlr7g7rs9Ll0x2AwiVw/Ys97/VqgKBjCg7xBv2Q=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:72:d4:8c:72:41:74:83:71:a1:36:0b:59:2b:3b:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Apr 26 16:00:54 2025 GMT
Not After : Apr 27 16:00:54 2025 GMT
Subject: CN=a9af8ef537518a7431550a0671e09ac47bc453c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:d7:a4:23:ef:64:71:b7:38:96:36:f5:04:ba:
f4:83:02:46:d5:2f:a7:55:43:83:96:85:3c:30:0e:
7a:7e:cf:ab:c0:df:6a:03:23:f0:26:56:37:3a:ac:
85:55:d9:1f:48:1a:b3:f8:c7:ec:98:db:dd:d3:18:
a9:f8:be:b2:df:77:db:28:ff:f2:f7:54:b9:91:45:
83:ea:0b:18:27:05:e2:88:1a:00:e5:b3:47:01:90:
1f:40:96:08:4a:90:0e:de:b4:f8:89:e9:84:41:ac:
7e:b8:51:08:7c:c0:1c:96:4b:d8:07:22:ca:8d:c2:
00:c1:bc:e0:fd:00:b7:85:94:dd:54:23:d9:f9:1a:
91:33:af:f1:fe:1a:b4:b8:a0:33:b9:1c:68:48:43:
38:8f:da:49:c6:c4:f9:5b:bf:d5:9f:b4:21:d9:4c:
4f:fb:46:96:cb:36:a6:de:04:05:0a:ab:f1:d5:62:
15:ca:4b:54:db:fd:58:4a:90:d1:f5:64:78:fc:37:
48:e3:db:cb:3f:50:42:95:b4:47:fe:45:2c:cf:f5:
a3:9a:e6:3f:e7:bc:ed:c6:f5:10:fb:d8:92:c0:44:
66:84:24:2d:79:e4:a0:2f:71:5a:18:d9:12:ea:58:
d3:33:06:90:9a:36:23:b1:5f:0d:47:86:17:a8:41:
bf:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:8E:F5:37:51:8A:74:31:55:0A:06:71:E0:9A:C4:7B:C4:53:C9
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:76:a8:6d:05:2c:f1:43:d7:58:a7:a6:38:2d:0f:0d:35:85:
ae:5b:c5:4d:a1:f1:e8:ee:51:2b:57:0b:8c:12:6c:81:03:0f:
57:38:31:53:03:33:52:2b:10:89:e1:6d:39:01:38:1a:57:bf:
a9:38:09:0d:35:52:b9:d0:c4:f3:28:b3:91:fb:ba:81:e2:06:
10:94:9f:3f:7d:ff:3d:db:d6:57:83:14:bb:40:1b:4a:bb:36:
50:05:cb:46:c7:c5:b1:14:1a:3a:63:7c:51:2e:f3:45:12:94:
31:68:b5:f4:01:ad:9d:91:18:f6:5c:45:2e:21:d4:a6:45:29:
9c:45:76:b7:4f:14:17:58:50:fc:57:99:4b:b9:89:24:ec:a1:
1f:ac:4d:d9:b6:24:db:2a:fe:af:fe:23:32:cc:31:42:d1:47:
bc:17:f8:dc:dc:30:cf:7f:f2:9f:78:92:2c:e0:d5:fa:c9:e4:
0e:75:12:fd:a7:58:9c:4d:76:83:f1:65:fe:f2:f8:2b:cf:e3:
cc:3b:50:ac:20:42:a7:e5:cd:c9:fb:b8:77:4a:e8:0e:1a:5a:
be:ae:0c:19:3e:91:a2:c1:50:a4:30:ea:b6:5a:0c:84:be:1f:
cf:e6:4f:f7:21:fc:fa:58:7c:22:f7:aa:50:f9:0c:4b:81:19:
96:c7:20:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:55:41 2025 by rpki-client