Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: 1DUV+8p0REPtATc6t16pc85r0AYstmatGS/FSf6MXzk=
Subject key identifier: 18:E3:55:64:42:85:AE:00:46:C6:5D:D1:18:03:7A:8D:5C:0C:F3:0D
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 0197B70E9134D27AB74D4415ED3E535FB902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0D7A
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: d/hkfu4Sp3ZwyYODWLKbrqlvweXArd0P56oNXsoXjTA=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:91:34:d2:7a:b7:4d:44:15:ed:3e:53:5f:b9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=18e355644285ae0046c65dd118037a8d5c0cf30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:23:47:07:af:36:ec:77:14:b9:1e:5a:c3:
f1:3a:d2:a6:1e:70:79:61:0e:3a:99:df:a9:6d:f2:
ad:42:3a:e2:73:a6:63:6c:30:77:c4:96:77:36:9d:
d5:3a:7b:74:42:b9:b3:2b:c3:12:7f:f4:4f:79:cc:
9a:34:b1:de:84:a9:46:4a:6d:b4:27:23:75:7b:25:
5e:e0:e0:61:c3:4c:e5:70:59:a9:8c:d0:e7:a4:5d:
f6:44:60:29:06:36:66:b3:10:17:6d:9d:39:ba:30:
d3:05:01:d2:48:2c:02:5d:8d:95:e4:7c:b1:34:83:
41:94:2e:9f:89:ea:ec:27:0a:8f:28:17:f6:52:f3:
77:2c:0c:03:25:87:c2:d0:e3:0e:1e:10:11:93:7b:
f3:f1:f0:59:70:e7:f2:34:ca:4a:c9:bb:62:70:af:
a6:f6:ff:ab:e8:3c:06:c0:9a:f8:16:b2:66:60:6c:
71:5c:44:57:fc:ee:6a:9b:30:df:f2:72:eb:f0:c1:
fc:4b:54:06:02:6e:37:8e:91:5e:fb:6a:dc:29:d6:
97:a0:8d:e7:84:95:4e:47:fd:35:a2:de:3e:3b:2d:
d1:0b:74:ae:4a:2b:72:e8:44:dc:16:c4:77:59:7a:
6f:34:5f:37:44:2a:7c:a2:80:fc:c6:3e:61:f2:27:
c6:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:55:64:42:85:AE:00:46:C6:5D:D1:18:03:7A:8D:5C:0C:F3:0D
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d3:2f:6a:62:c4:c5:8c:73:8d:a6:08:f0:42:d7:b5:9a:f3:
7c:4f:e4:02:da:cd:05:81:e3:74:7a:b0:b9:4c:57:28:e3:22:
76:c3:2f:90:7a:e0:17:be:9d:ef:45:c8:73:a5:4b:c9:eb:96:
ed:29:45:36:e1:7b:20:4a:07:10:45:4a:5b:c2:46:07:45:ae:
9a:c3:37:46:23:15:d8:d6:e9:84:cf:cf:db:58:be:7e:4d:c6:
36:01:17:3c:b9:60:19:52:a8:81:a0:46:f2:dd:6b:68:11:b3:
43:bf:ec:e3:5a:61:06:af:70:14:80:c3:66:b8:bc:df:93:fe:
1e:76:04:04:36:d5:a8:f8:5e:29:21:a4:78:38:0d:fb:d2:f8:
ba:3c:6b:f6:23:6a:f8:82:3b:6b:30:3d:5d:84:ef:fb:6b:b3:
57:fd:f3:99:11:db:74:1b:de:ea:1f:b6:0f:16:db:1d:3d:dc:
fa:7d:43:d5:df:a6:82:b3:38:b6:e4:24:a8:7e:45:e7:26:41:
0f:f2:71:f2:81:60:b9:14:85:20:80:71:89:61:7f:44:46:60:
7f:fb:83:da:58:3b:ef:56:5c:c3:4a:44:62:5a:38:b0:fb:05:
a9:fd:44:f3:0c:06:b1:6f:71:7e:e1:4f:e0:18:02:74:37:93:
f6:1e:48:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:57:24 2025 by rpki-client