Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: c6MxyFE/rnfPlMFKbcOy5VjVtTtA+WezVuS5ZcsQths=
Subject key identifier: 37:F7:CF:62:83:2A:2C:48:9B:14:AC:95:96:35:15:A8:DF:8C:E6:12
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 0196A0F681D0AEF3C3A82EA24E236A6CB1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0CEA
Signing time: Mon 05 May 2025 15:00:31 +0000
Manifest this update: Mon 05 May 2025 15:00:31 +0000
Manifest next update: Tue 06 May 2025 15:00:31 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: s/Qz4VbMzYWoKrkeN2FMe+Oi9ydk1p8Ki/Qak9VofT4=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a0:f6:81:d0:ae:f3:c3:a8:2e:a2:4e:23:6a:6c:b1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: May 5 15:00:31 2025 GMT
Not After : May 6 15:00:31 2025 GMT
Subject: CN=37f7cf62832a2c489b14ac95963515a8df8ce612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:32:c1:09:7c:55:30:15:b1:44:a3:d2:6b:11:
31:55:46:63:b3:74:32:67:fd:1c:f2:4d:74:fd:25:
88:e7:09:97:f9:ff:db:e7:39:6e:03:fa:20:0d:39:
b4:b1:66:fc:0e:00:2e:c9:08:92:2b:6c:1a:0d:59:
3c:cf:3b:42:33:e8:b1:62:77:28:0b:ef:94:a5:e5:
ea:8b:a0:40:e9:57:28:d4:1f:c7:b7:44:3f:27:b8:
fe:56:85:23:2e:c7:c9:35:5b:b4:5b:ad:38:b6:a0:
db:7a:1f:41:15:5c:5f:db:8b:9e:c1:c7:94:ef:cd:
a1:b5:61:01:45:6c:03:27:11:1c:42:c3:b5:df:69:
c7:9f:73:29:53:f6:56:a2:45:58:da:d5:77:6d:60:
00:90:c5:70:1e:38:20:fa:a4:67:f2:57:0e:92:1c:
2b:2e:b2:db:8f:29:47:40:55:7a:5b:12:68:4a:dc:
a5:cf:f0:5f:6d:b5:85:29:55:e6:30:1d:a3:42:90:
fe:3a:4f:a4:08:7e:e0:d5:28:71:83:35:b4:0b:44:
9f:91:e2:79:06:f0:80:f6:46:ea:2b:14:03:b7:14:
af:cb:23:1d:81:5f:d7:d5:3b:84:b2:da:21:59:79:
59:14:52:7a:90:fc:6d:4a:a1:b3:8d:74:68:10:33:
c6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F7:CF:62:83:2A:2C:48:9B:14:AC:95:96:35:15:A8:DF:8C:E6:12
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5d:7d:5f:e1:e1:53:1c:3f:f5:49:1b:ff:1b:4f:32:bc:1f:
87:5b:b4:4d:66:41:20:c7:48:52:87:89:37:66:63:81:f4:ca:
fb:9b:e8:ed:f4:17:7a:cd:1d:ef:46:2b:07:7d:d6:19:c4:e8:
61:d8:ee:2f:e5:da:2b:31:f6:02:f9:42:0e:8b:20:fa:3f:00:
5d:9f:6c:c2:49:6c:91:9b:dc:14:3a:ab:ed:6c:5e:a1:14:31:
dd:cd:ec:c4:1f:54:0d:3c:ab:cb:bd:15:7d:78:f4:5b:94:56:
fe:f9:06:a0:81:95:2b:da:f8:1a:6a:f3:5c:fe:a2:7c:44:b6:
87:19:ec:85:c3:8b:24:aa:86:c7:66:3d:49:27:12:69:38:9a:
18:86:3b:17:dc:c2:32:6e:01:28:71:e7:02:62:0a:47:f5:dc:
1e:9a:19:7a:8b:8a:e4:c6:b9:ef:82:65:29:83:ff:2b:35:e8:
2f:e2:d1:7f:78:a5:4e:39:f1:a2:f3:1f:f0:e7:26:7e:3d:c6:
f5:86:5a:6b:5d:95:36:7b:e1:b4:2c:a8:87:5c:22:a8:47:f5:
a4:e2:16:e0:a1:df:ba:67:03:af:c8:ca:b6:e3:cb:0b:f3:ee:
ac:af:1c:81:32:34:bb:ab:a3:ce:67:98:a0:84:d8:e0:a2:29:
56:93:7f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 18:51:31 2025 by rpki-client