Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
File: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft (raw, json)
Hash identifier: lEhcCEMDbHqS9+Ib4vlZA96hkFy0XsPbEw9OBXEJGAU=
Subject key identifier: BA:52:12:D7:5F:A3:63:8F:9F:87:ED:0D:83:6C:54:9A:ED:75:CE:03
Authority key identifier: EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
Certificate issuer: /CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Certificate serial: 0197B74513AD09036E9AA441570F1747E7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: 4glHJuD_KCBMnry_AIvlu5gy6-M.roa (hash: lhemPw8+U7+39+MkBxEYrWnD1G0tgMlJ/+cnZ3q/F8U=)
2: 73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl (hash: OJgNMWofAhFcAZzh3fJdi25QE3C2LwbONU6v/Uykbng=)
3: K9DBCJ0-OAE3o-OFlGFCn38jP1I.roa (hash: 6P77ASxKGjA6KEo+/324fY8nnGYUFzIMa60GccsP2nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:13:ad:09:03:6e:9a:a4:41:57:0f:17:47:e7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef7cca8aa3f178b999a46e5ff4fa7daf9f9f2e6f
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=ba5212d75fa3638f9f87ed0d836c549aed75ce03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5d:3d:d7:28:c6:f7:bc:2e:ba:9e:7a:7e:5f:
b4:b8:70:58:8e:a2:92:99:c6:fc:b6:ba:9e:9c:ed:
39:4d:8a:1b:51:4c:55:29:75:c0:3d:77:da:c2:7e:
fd:21:e7:76:ce:a8:21:6e:48:11:92:66:eb:8b:52:
5d:a4:58:68:bd:e7:53:f1:02:81:13:c7:0c:4c:0f:
c6:2d:bd:79:e3:82:ce:44:4e:a5:7e:f6:7b:31:40:
91:7a:5d:e7:33:b8:4e:3e:0b:e1:3f:41:c3:d8:51:
fd:7f:34:8f:55:24:74:7e:12:de:cd:54:56:92:a9:
66:fc:13:4b:db:0b:ac:3f:79:36:c0:ea:a2:93:06:
12:06:f5:af:9e:d0:92:b8:a6:ac:cf:77:b5:11:77:
d2:52:0e:2b:68:ba:80:ef:17:c9:84:e0:8f:8b:6c:
ed:f6:e0:df:86:fc:5f:64:fc:ec:57:0d:c6:26:ab:
0f:e0:4f:ec:83:7c:28:5b:29:48:25:35:54:8f:ae:
85:d8:8e:ce:26:1e:a5:a2:ea:4a:e5:0a:5e:14:fe:
38:cb:4a:a5:20:c7:3a:84:25:e2:d9:84:bd:9a:00:
6f:b2:94:3b:4e:df:51:15:42:1d:8f:ca:04:cd:11:
86:13:12:25:69:be:be:89:32:8c:7f:86:97:36:34:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:52:12:D7:5F:A3:63:8F:9F:87:ED:0D:83:6C:54:9A:ED:75:CE:03
X509v3 Authority Key Identifier:
keyid:EF:7C:CA:8A:A3:F1:78:B9:99:A4:6E:5F:F4:FA:7D:AF:9F:9F:2E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73zKiqPxeLmZpG5f9Pp9r5-fLm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/36d642-5643-454f-b5c0-990777c357e3/1/73zKiqPxeLmZpG5f9Pp9r5-fLm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:e3:82:ec:cd:ba:0a:a5:24:e4:37:a4:61:fd:54:81:8b:
08:8d:bf:61:2c:d5:80:cd:87:98:ae:13:d6:0a:eb:71:b0:77:
1f:4b:9d:c3:64:98:9a:0c:63:8a:a1:ed:43:dc:2e:69:17:39:
ba:8c:46:64:ef:d0:ce:ae:f8:71:2c:fc:4b:d6:2f:8d:bb:75:
13:db:82:5c:a6:62:f5:dd:b2:0b:80:ed:2c:87:84:86:7e:bd:
1a:90:2b:ba:19:a0:d1:c8:0e:00:88:3a:1b:6d:b8:8e:7c:13:
6f:ce:cb:9c:26:3b:c3:56:af:97:2e:f4:d5:6f:76:43:2a:53:
29:ab:e6:a1:63:99:a2:06:6a:9b:32:d8:db:38:b2:b9:34:ec:
9c:d5:9f:e9:12:ed:d9:45:4e:9e:cb:6a:0a:aa:ab:3f:4a:0a:
1d:b1:6c:40:6a:61:d3:67:05:1b:98:81:1d:14:8e:1d:05:80:
46:27:eb:84:bf:17:50:ce:ba:d1:5e:88:fc:f2:07:73:15:70:
ce:00:31:43:24:00:34:21:3a:62:3c:07:86:f9:03:6b:a7:27:
05:bf:f8:0e:8b:75:49:91:3f:cf:05:b9:51:cf:0b:e2:01:fc:
06:b9:62:e2:88:57:90:e1:b0:2a:d4:0d:69:55:3c:92:47:82:
62:0c:ea:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:20 2025 by rpki-client