Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: 1U2kG8PLa2Rdf7V+Kv+ppAwCW7ZovFziisDah+Vc9N0=
Subject key identifier: 7C:E1:0D:4F:49:BC:31:9F:03:51:C9:47:C4:EE:3A:B6:75:97:55:C8
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 0198D5162FCBFF13E5FDFAEABD31ED299A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:57 +0000
Manifest this update: Sat 23 Aug 2025 04:00:57 +0000
Manifest next update: Sun 24 Aug 2025 04:00:57 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: YGnJzIgLFzVu1wYCU2fCCEY+/oAxF/xhOe/JipRaGbo=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:2f:cb:ff:13:e5:fd:fa:ea:bd:31:ed:29:9a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Aug 23 04:00:57 2025 GMT
Not After : Aug 24 04:00:57 2025 GMT
Subject: CN=7ce10d4f49bc319f0351c947c4ee3ab6759755c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:f1:ac:08:ef:d7:ea:6f:71:a7:65:32:9e:
a5:c2:e5:d5:70:09:69:14:88:15:36:de:f5:52:78:
ca:63:72:d3:d9:a6:bf:fa:74:78:49:70:78:d1:d4:
5e:40:bd:f3:2b:18:1d:f3:bb:b2:92:ea:b1:79:76:
00:53:92:83:a1:14:27:b9:74:6c:d4:6a:94:b7:cf:
48:dd:3a:60:23:e8:d2:74:39:7d:dc:a2:37:46:af:
cc:72:4a:89:f3:5c:e6:d9:ee:e1:d4:93:7c:4a:d9:
a0:41:95:5d:ee:31:f4:9e:56:b2:2f:3a:19:61:e6:
aa:7a:34:0b:e6:d6:84:9d:bc:a6:4c:cf:14:9f:63:
95:26:c0:a2:df:e2:ae:56:70:73:b9:4c:a7:db:b6:
d5:f7:c4:f5:2e:13:1f:0b:5e:0f:51:57:09:17:8f:
5a:db:14:b1:66:d0:bb:f0:2c:71:27:78:22:1f:81:
b8:1e:64:f9:b8:20:6b:25:e9:ea:0b:5a:d7:f9:90:
67:86:61:49:28:94:2e:ef:f3:03:cc:12:1c:5e:a2:
52:cc:1b:bd:61:c6:46:d7:44:31:5e:66:b9:8b:ae:
20:a4:42:ed:fe:3e:20:4f:36:03:d8:cd:6e:33:f7:
d4:15:dd:38:22:b1:e8:95:7c:ac:f7:47:72:af:1c:
09:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:0D:4F:49:BC:31:9F:03:51:C9:47:C4:EE:3A:B6:75:97:55:C8
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ec:aa:28:b4:79:eb:01:b4:2f:28:95:15:c2:8e:d3:91:2c:
85:06:15:f6:db:8e:46:61:e6:df:5e:38:b4:a2:1b:d2:77:81:
ca:a4:86:cf:ff:a5:d2:33:13:16:1a:ed:9e:b8:d3:cf:29:e7:
8c:8e:39:27:a7:a2:f0:b9:05:36:b1:19:52:15:04:cb:3a:b9:
e7:dd:9c:53:3a:b4:a0:c8:12:68:41:29:9f:25:68:c9:12:75:
48:64:38:34:b4:f0:90:e6:ba:15:24:54:30:82:c7:4d:5e:85:
13:75:3e:6a:30:6a:56:7e:31:e6:f5:e3:dd:a3:3d:45:d7:24:
00:8b:be:f3:78:4d:37:3d:9b:17:bb:f6:7d:92:8c:57:e7:79:
79:47:58:a4:78:6f:f5:69:50:e3:2b:01:fb:89:61:c6:f6:fb:
a1:ed:61:71:77:ef:f4:c1:69:bf:8f:6c:59:8f:3b:48:c9:ef:
d5:8f:3f:40:a1:de:ae:b9:ef:42:a2:b0:06:e2:b3:c3:59:71:
80:9f:01:15:78:01:67:95:91:8f:68:85:ad:76:f0:2f:55:b4:
78:1c:45:7a:ae:95:d9:b8:7c:3a:d3:cd:43:4a:f7:30:1b:8e:
d7:bd:05:d9:b9:84:fa:e1:10:e7:83:59:77:9b:de:70:ef:df:
42:86:92:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFi/L/xPl/frqvTHtKZp8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmN2NjYThhYTNmMTc4Yjk5OWE0NmU1ZmY0ZmE3ZGFmOWY5
ZjJlNmYwHhcNMjUwODIzMDQwMDU3WhcNMjUwODI0MDQwMDU3WjAzMTEwLwYDVQQD
Eyg3Y2UxMGQ0ZjQ5YmMzMTlmMDM1MWM5NDdjNGVlM2FiNjc1OTc1NWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPDxrAjv1+pvcadlMp6lwuXVcAlp
FIgVNt71UnjKY3LT2aa/+nR4SXB40dReQL3zKxgd87uykuqxeXYAU5KDoRQnuXRs
1GqUt89I3TpgI+jSdDl93KI3Rq/MckqJ81zm2e7h1JN8StmgQZVd7jH0nlayLzoZ
YeaqejQL5taEnbymTM8Un2OVJsCi3+KuVnBzuUyn27bV98T1LhMfC14PUVcJF49a
2xSxZtC78CxxJ3giH4G4HmT5uCBrJenqC1rX+ZBnhmFJKJQu7/MDzBIcXqJSzBu9
YcZG10QxXma5i64gpELt/j4gTzYD2M1uM/fUFd04IrHolXys90dyrxwJkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHzhDU9JvDGfA1HJR8TuOrZ1l1XIMB8GA1UdIwQY
MBaAFO98yoqj8Xi5maRuX/T6fa+fny5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAt
OTkwNzc3YzM1N2UzLzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8zNmQ2NDItNTY0My00NTRmLWI1YzAtOTkwNzc3YzM1N2Uz
LzEvNzN6S2lxUHhlTG1acEc1ZjlQcDlyNS1mTG04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOyqKLR5
6wG0LyiVFcKO05EshQYV9tuORmHm3144tKIb0neByqSGz/+l0jMTFhrtnrjTzynn
jI45J6ei8LkFNrEZUhUEyzq5592cUzq0oMgSaEEpnyVoyRJ1SGQ4NLTwkOa6FSRU
MILHTV6FE3U+ajBqVn4x5vXj3aM9RdckAIu+83hNNz2bF7v2fZKMV+d5eUdYpHhv
9WlQ4ysB+4lhxvb7oe1hcXfv9MFpv49sWY87SMnv1Y8/QKHerrnvQqKwBuKzw1lx
gJ8BFXgBZ5WRj2iFrXbwL1W0eBxFeq6V2bh8OtPNQ0r3MBuO170F2bmE+uEQ54NZ
d5vecO/fQoaSeQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:22 2025 by rpki-client