
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: jQhXQqUkTpxxoZ5BSrmN9tLq0rgjPm/T9sJ3rcMUxe8=
Subject key identifier: CC:1A:27:BA:1A:35:4D:CF:61:98:3C:0F:E8:AD:4C:81:5F:7F:1E:0C
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 01988BB39BA74497463BC21736C5A5F78CB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 22:01:00 +0000
Manifest this update: Fri 08 Aug 2025 22:01:00 +0000
Manifest next update: Sat 09 Aug 2025 22:01:00 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: kYGQqDtv8QoflCrdWKsoWUE8XsRS0aVdtPOHef/rqdY=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:9b:a7:44:97:46:3b:c2:17:36:c5:a5:f7:8c:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Aug 8 22:01:00 2025 GMT
Not After : Aug 9 22:01:00 2025 GMT
Subject: CN=cc1a27ba1a354dcf61983c0fe8ad4c815f7f1e0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:9c:67:cf:49:b3:7c:b5:c2:77:a7:36:96:
ed:65:65:ff:de:a0:1f:3f:00:25:21:07:09:cf:d6:
ec:9c:ee:15:e4:d0:2b:33:6d:c0:b4:9d:ab:e7:32:
20:20:a1:83:2d:14:16:6b:00:dd:f4:3a:4c:91:6b:
a8:44:6c:3a:81:73:53:91:ab:4c:c6:31:f3:c5:af:
71:a8:e1:56:7f:33:87:95:e4:88:f6:5f:30:85:d4:
83:e1:ad:46:db:9b:b1:c7:d4:12:b7:16:32:57:21:
e2:c2:54:ad:a5:c0:16:a9:8e:34:95:71:bf:ef:f2:
a9:f0:18:b8:b3:87:c9:c8:90:83:64:7a:48:42:5d:
60:d8:13:f6:3a:37:7d:cc:18:3b:a6:16:57:19:a2:
d7:73:b6:cb:17:b9:04:35:31:76:6e:e7:e6:fb:e1:
71:04:f8:5a:53:80:61:e4:93:19:94:95:06:c2:6c:
72:bb:5c:88:fb:eb:9a:73:33:ba:5b:d2:30:20:19:
74:8b:08:71:37:99:a8:45:e8:8a:a4:7b:28:e7:29:
fa:0d:1e:bb:cd:b4:89:73:43:b5:37:aa:5b:a4:36:
b9:6e:59:4c:d9:37:9f:fd:13:41:b2:0f:2d:4b:9d:
3f:0d:bc:6b:6d:be:e7:f3:91:0f:7a:16:21:39:89:
c8:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:1A:27:BA:1A:35:4D:CF:61:98:3C:0F:E8:AD:4C:81:5F:7F:1E:0C
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9b:e0:98:b5:d6:63:23:ea:01:12:97:33:47:8e:1c:0d:30:
15:f8:47:fd:9e:24:dc:a5:71:c6:e4:0f:30:bb:f7:11:da:86:
b8:b7:6a:22:24:13:07:9d:ed:07:4e:36:de:f9:be:ce:c0:0a:
8f:7d:3d:c2:3e:1d:9f:53:e9:82:db:06:4f:4b:5d:9d:96:d7:
eb:d7:94:11:90:a7:88:4e:56:1e:4a:35:e9:92:71:ca:d5:6e:
bd:c5:5a:42:b4:8d:53:5b:3d:db:85:2d:65:5c:5f:de:11:03:
d6:af:d5:7a:2b:c7:1d:be:be:ce:fd:c2:94:bd:b0:1e:21:04:
da:c4:f9:58:b3:5f:01:8c:8c:94:5c:91:31:44:c2:6b:cd:96:
f4:0b:5f:e5:c2:77:fc:78:ce:22:cf:a7:12:87:d0:55:3d:11:
86:4f:86:24:5d:b5:21:ce:21:54:aa:df:54:a4:13:da:83:43:
f9:7f:65:d0:14:54:57:d6:62:5d:ac:d8:bb:e8:0f:80:64:d9:
46:1a:7c:62:d3:4d:9c:f6:11:71:e8:97:8b:fc:d6:42:78:36:
66:fb:f1:ed:5c:c9:63:3c:90:13:8a:29:57:9a:33:49:c4:6b:
ef:f3:17:39:22:b9:bf:fe:e0:d4:c7:1e:77:d0:ea:1f:2d:f0:
d7:b9:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:26 2025 by rpki-client