Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
File: 73OcDASkJxtarWLBGSKeGPraX9M.mft (raw, json)
Hash identifier: lOl+hVVg913b5s+YaeUiqVOq8hzLx6KdyUQjn8zsTMY=
Subject key identifier: FB:D5:B0:FD:7B:0E:16:7A:EE:BB:62:2C:4F:D1:6A:59:DD:96:A9:24
Authority key identifier: EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
Certificate issuer: /CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Certificate serial: 0198D4E0851188205CF8A88F6427E601985A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
Manifest number: 0E0E
Signing time: Sat 23 Aug 2025 03:02:20 +0000
Manifest this update: Sat 23 Aug 2025 03:02:20 +0000
Manifest next update: Sun 24 Aug 2025 03:02:20 +0000
Files and hashes: 1: 73OcDASkJxtarWLBGSKeGPraX9M.crl (hash: JWxxYY0LUzDwSwjD6shCEgwzH0yhKsPzuoqcyRCnrBs=)
2: GO5PY0agBoKkma7NteMSdFbX44k.roa (hash: jwM1qR7KbSYH5wU03Z7/YrapkXuYuB0WPqYmk8E3608=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:85:11:88:20:5c:f8:a8:8f:64:27:e6:01:98:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef739c0c04a4271b5aad62c119229e18fada5fd3
Validity
Not Before: Aug 23 03:02:20 2025 GMT
Not After : Aug 24 03:02:20 2025 GMT
Subject: CN=fbd5b0fd7b0e167aeebb622c4fd16a59dd96a924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:6b:cc:2d:48:a9:41:07:b3:f7:5d:34:b0:
08:28:b2:bb:f9:11:20:c4:1e:75:c0:6a:14:b3:b9:
d6:f7:51:8e:03:cc:d4:e5:e9:3d:f9:e6:b1:a8:28:
dc:0a:aa:9f:49:6d:e5:36:67:07:32:f9:41:a1:68:
c9:ab:8c:a4:90:0c:10:6b:36:32:5f:99:8e:81:8c:
d2:56:e6:d4:06:a8:38:6b:cb:d7:53:ca:9b:d6:6d:
8b:01:b1:93:af:21:ec:ed:a6:66:00:e5:d6:e3:c7:
42:32:63:82:4d:73:0d:a8:b3:b4:8d:51:2f:ad:5b:
fd:87:3a:5e:c7:97:9c:42:89:6a:bb:fb:22:27:a9:
f3:50:b6:15:d3:42:48:2f:66:07:7b:c8:c9:5e:50:
1d:c3:06:c2:8c:ac:ab:2d:47:93:f3:fc:56:f0:e4:
c6:fa:03:4e:2e:66:8d:12:e4:c1:0d:7d:f0:5e:a7:
92:11:4a:3b:a0:79:46:77:b5:2b:31:7a:10:f0:9d:
47:8b:18:43:9d:70:9b:f0:eb:f0:07:ba:12:f3:cc:
6d:fc:2c:d6:b6:e0:d9:25:25:9a:e5:f3:a2:91:ef:
44:cc:70:af:36:da:c9:ab:5e:d1:6a:d3:41:40:ef:
c5:f3:35:d6:c1:12:d0:25:d0:24:46:24:ca:44:34:
a3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D5:B0:FD:7B:0E:16:7A:EE:BB:62:2C:4F:D1:6A:59:DD:96:A9:24
X509v3 Authority Key Identifier:
keyid:EF:73:9C:0C:04:A4:27:1B:5A:AD:62:C1:19:22:9E:18:FA:DA:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OcDASkJxtarWLBGSKeGPraX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/28519f-dc48-4f31-a35e-99ee4a8985c3/1/73OcDASkJxtarWLBGSKeGPraX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:51:b2:9f:5a:d3:85:c3:12:63:b3:ee:c4:d4:94:e7:57:19:
4e:68:39:9b:5a:e1:3b:b0:eb:2c:11:d9:4c:46:6c:cf:ea:ef:
da:d7:fc:47:b4:70:12:41:b8:8c:33:d0:90:42:24:8f:93:d7:
ef:5b:38:e7:f4:04:64:69:e3:e2:a1:65:7a:fe:97:a3:51:8a:
33:fc:3a:8c:79:e7:e5:fe:11:7a:a7:9b:53:54:d3:5a:ed:02:
64:82:04:be:19:59:42:9b:d1:4b:02:e6:08:74:75:72:9e:b7:
ea:61:ee:cd:4b:30:c4:18:7d:d2:f5:1a:51:c4:e8:14:d4:f5:
81:33:fa:81:08:8e:4b:e2:d3:68:15:aa:db:08:46:5a:b5:90:
0a:ee:58:13:d6:c4:71:7c:32:23:4b:37:7a:84:9d:9c:e3:8f:
ab:15:a6:23:25:85:67:f0:a2:af:e9:e0:d2:ce:90:fa:c8:2f:
71:0d:c6:77:de:e9:46:44:5c:14:2b:b5:a8:c9:22:32:ce:c8:
00:f7:f8:65:e3:59:2d:f0:4f:46:69:7b:4b:09:9b:33:ff:00:
f8:bb:b4:59:f9:67:b4:80:a0:1a:29:c8:9c:32:22:7e:95:6d:
5b:24:40:f2:18:af:3e:ee:70:6e:ef:02:5a:3f:80:cb:cb:00:
d0:af:ba:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:13 2025 by rpki-client