Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
File: 73imvMheyK3m7M6IDuBz1jdweWU.mft (raw, json)
Hash identifier: qSPi8twwBcuJw+884HW4rIBRZPQskl45gSllymeH3R0=
Subject key identifier: 56:B3:29:FF:57:05:65:20:21:F0:EA:7B:06:DA:68:7E:BC:2B:2B:0C
Authority key identifier: EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
Certificate issuer: /CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Certificate serial: 0197B6D76FFEAAF6051C09A44A560452B425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: 73imvMheyK3m7M6IDuBz1jdweWU.crl (hash: T1RTKBuNJ+e7Tng1+mEuDAjVV3AYVxE/nN4KnpYGPxE=)
2: 8ofg2JoTyb5e1GIiVqV2PdSesOU.roa (hash: z/SuBS1vMLBWp74A2t3I4/K0L71UAtSRqfDU9yXXBww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6f:fe:aa:f6:05:1c:09:a4:4a:56:04:52:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78a6bcc85ec8ade6ecce880ee073d637707965
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=56b329ff5705652021f0ea7b06da687ebc2b2b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:d2:07:bc:d7:3a:4a:99:c6:a2:db:16:29:
76:5e:5b:6c:83:15:ab:88:63:2d:48:fe:5e:3f:9d:
9b:d3:45:03:70:d1:84:c4:73:55:d9:74:0d:36:0e:
4a:f2:82:3c:7c:a4:5c:4e:b9:d9:02:7f:10:7a:9b:
2a:97:23:79:d0:31:23:3a:8d:65:2f:6a:ec:06:08:
a1:7c:68:af:e7:6c:50:5d:0a:02:56:ed:0f:e1:b7:
6d:81:e1:20:46:09:a0:86:60:47:e6:8e:cd:3a:97:
12:ec:8a:38:24:77:5d:de:0c:58:79:58:ed:a4:fd:
ce:da:2f:39:0a:39:db:a4:f6:37:51:82:68:97:40:
23:43:e5:d1:b5:86:38:87:39:27:f4:5d:b8:ee:a1:
6b:9d:d4:5e:e7:d2:22:6e:75:8b:e2:1b:33:c1:1a:
69:59:e7:94:f2:29:71:22:48:73:3b:75:7b:0e:c8:
50:5f:7b:0b:68:e3:84:e4:99:71:e4:ba:31:22:1e:
07:cf:86:36:da:20:df:cf:e8:4d:f1:79:4a:61:75:
1d:0c:dd:ce:96:f9:39:bf:b8:f0:d0:5b:62:1f:c6:
c8:80:cc:bc:72:54:0a:50:2d:52:d7:c7:0b:0b:5d:
70:e5:52:4a:46:60:fb:ce:66:b2:76:3d:51:09:79:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B3:29:FF:57:05:65:20:21:F0:EA:7B:06:DA:68:7E:BC:2B:2B:0C
X509v3 Authority Key Identifier:
keyid:EF:78:A6:BC:C8:5E:C8:AD:E6:EC:CE:88:0E:E0:73:D6:37:70:79:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73imvMheyK3m7M6IDuBz1jdweWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/49aba4-e63d-4e06-8a12-96f216893dec/1/73imvMheyK3m7M6IDuBz1jdweWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:aa:f3:07:7d:d5:12:58:58:d4:0e:6d:23:3c:f4:94:41:f2:
f8:cf:03:4b:47:6e:f3:eb:f7:9a:b0:df:f3:8f:09:f6:39:4f:
6e:04:a4:a7:40:68:ac:0e:8a:6c:8b:15:75:87:83:52:f6:c7:
34:2f:85:6d:5b:32:03:8d:51:cf:a5:5d:89:7e:80:d8:70:b0:
63:0d:43:26:33:76:4b:d0:b5:d7:75:33:ac:19:2d:ce:33:f3:
94:e3:60:ca:6b:9b:26:63:fc:f6:50:aa:d1:37:eb:19:20:26:
66:cc:a8:9a:7c:3c:2b:3f:ef:35:2f:2f:1e:38:8f:10:f0:36:
b5:6b:3c:89:40:ae:0d:a6:88:cf:c7:38:af:80:32:aa:24:6c:
39:6b:9c:15:a1:cf:fc:c5:7b:65:4b:75:0f:b6:0e:64:da:8a:
12:0d:37:9f:62:dd:11:23:e6:22:3c:7b:f8:df:6e:e7:21:ba:
0f:6d:63:62:c2:47:a0:4c:8e:ed:25:27:b7:4c:9e:0c:10:46:
bb:b9:e9:e3:d8:5c:ba:3f:d4:de:33:1d:c6:b9:cf:6f:a7:a8:
d5:4a:d4:ed:35:52:c1:bf:18:fd:4b:64:d8:23:78:12:3f:23:
d0:f5:2e:3c:2e:7e:a4:da:62:30:68:2b:97:16:bd:67:ff:8e:
6b:d5:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:18 2025 by rpki-client