Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
File: 73VRezFhoEd2JBMwFhQhdnmoJgg.mft (raw, json)
Hash identifier: 5+R+/AXI7S5ewL7F+xjjwrge6+Qnk5OKF1rfhiFBUaw=
Subject key identifier: 9E:78:9B:05:5C:E6:61:59:6E:B9:50:05:AF:B8:69:3A:44:C3:A8:F0
Authority key identifier: EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
Certificate issuer: /CN=ef75517b3161a047762413301614217679a82608
Certificate serial: 01967DC68A435DB81EC37504FA90BDE4A520
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
Manifest number: 0400
Signing time: Mon 28 Apr 2025 19:01:25 +0000
Manifest this update: Mon 28 Apr 2025 19:01:25 +0000
Manifest next update: Tue 29 Apr 2025 19:01:25 +0000
Files and hashes: 1: 73VRezFhoEd2JBMwFhQhdnmoJgg.crl (hash: j5fjTRW8J8Yqs8C8RuxjAHOVI3TXEX+6BOF9iqsJ1Sk=)
2: I9DHGKx_AzmEJdMn8QvC9F9ySxQ.roa (hash: dPotTh32y5QoI9nrsrf5Jji9m8QedErHZ0IgteKV744=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Apr 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:7d:c6:8a:43:5d:b8:1e:c3:75:04:fa:90:bd:e4:a5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef75517b3161a047762413301614217679a82608
Validity
Not Before: Apr 28 19:01:25 2025 GMT
Not After : Apr 29 19:01:25 2025 GMT
Subject: CN=9e789b055ce661596eb95005afb8693a44c3a8f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:74:54:d6:3c:38:6c:9a:be:91:70:f1:03:
e4:e1:ad:ea:99:35:8a:39:d0:58:2e:5e:66:25:01:
1e:f5:fb:29:6d:f2:78:82:09:2a:96:db:85:d2:5e:
a9:db:e2:b4:54:90:83:6c:e4:91:39:b4:76:c5:09:
67:2d:f5:80:93:73:7c:23:f7:83:cf:eb:67:16:4a:
1d:16:8b:17:86:c7:be:bc:69:2b:c1:c5:bc:bc:5a:
30:ed:14:c4:9b:d9:03:8b:71:1c:26:d5:a7:a6:b4:
d1:be:d9:56:10:31:4d:b9:71:e2:2a:e2:51:81:0c:
7f:c8:02:96:3c:75:3f:79:59:61:8f:79:79:39:bc:
95:51:44:7d:41:14:3b:b8:d8:f0:24:59:3a:50:ba:
e1:8f:0e:ae:46:9e:34:f7:a2:0f:36:fd:fc:22:df:
de:20:34:ce:b1:50:3d:b2:c9:06:d6:78:fe:4d:76:
f9:67:2c:25:12:ea:28:46:86:7e:3c:57:3f:62:b2:
ce:f5:15:ac:5a:14:0c:38:59:9d:b7:8d:20:39:e6:
85:7f:3d:55:9a:7b:22:ac:d2:0e:ac:4a:53:2a:f5:
f3:e7:2c:d9:c5:eb:19:d7:df:10:d0:23:b6:29:90:
52:f8:3f:90:f0:ee:cf:f1:d4:ee:2f:ee:3b:3e:9c:
d0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:78:9B:05:5C:E6:61:59:6E:B9:50:05:AF:B8:69:3A:44:C3:A8:F0
X509v3 Authority Key Identifier:
keyid:EF:75:51:7B:31:61:A0:47:76:24:13:30:16:14:21:76:79:A8:26:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73VRezFhoEd2JBMwFhQhdnmoJgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/eeeaee-08d7-4e24-84dd-307b4971e266/1/73VRezFhoEd2JBMwFhQhdnmoJgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:5e:bc:f3:a6:11:e5:f1:ff:78:6a:14:a3:40:36:fb:05:58:
34:ee:27:5c:6c:c6:ab:2c:20:ab:a2:bf:e1:11:b4:57:14:9f:
70:19:77:05:d9:3e:14:69:f7:65:92:65:38:32:c9:ec:50:76:
ee:ec:0f:e1:9c:ac:14:79:bb:23:9b:e2:af:e8:bf:ba:53:18:
38:14:a5:6b:65:61:e5:48:4c:20:08:1c:25:6b:fe:56:3f:a6:
2b:c1:29:2c:83:c7:3e:7f:08:ea:b2:6a:fb:dd:92:96:6e:4b:
98:97:85:d9:78:e3:a3:2e:28:68:bb:73:4c:f0:3a:63:6e:ca:
c4:b2:16:44:cf:9a:f7:d7:7e:69:9c:9f:89:2d:50:7c:32:2a:
2c:a5:3c:02:da:15:44:d6:44:16:db:f4:b1:64:6e:15:20:99:
d6:08:46:38:b4:de:24:98:22:59:b7:cf:f1:ea:e9:74:8c:5c:
ba:e9:5a:19:ce:bf:30:3d:dd:b5:70:d4:4a:3e:b9:e3:fc:26:
22:7f:76:0d:69:09:c7:59:e9:ac:e5:f9:84:1b:19:7d:73:4d:
07:6a:da:1e:3f:37:0d:65:f7:a8:87:54:6c:c6:87:69:cd:9e:
a8:19:62:1b:af:1f:6a:20:08:ca:b4:f6:f8:af:07:d6:5c:cd:
8b:05:e0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:58:12 2025 by rpki-client