Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
File: 73i8lpqDBzNu9ARPPf7x_hNjgrM.mft (raw, json)
Hash identifier: 6j6073s3/LjscTRYDkwmJnt+4J9wFqhFprZcptI+vQ8=
Subject key identifier: A7:E8:65:5B:0A:E7:4F:DE:B2:8D:6A:4B:09:6F:47:D8:88:7C:31:8A
Authority key identifier: EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
Certificate issuer: /CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Certificate serial: 0197B77CCBB9B64F99DB9E4FA638396084A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
Manifest number: 0B7D
Signing time: Sat 28 Jun 2025 17:01:38 +0000
Manifest this update: Sat 28 Jun 2025 17:01:38 +0000
Manifest next update: Sun 29 Jun 2025 17:01:38 +0000
Files and hashes: 1: 73i8lpqDBzNu9ARPPf7x_hNjgrM.crl (hash: 2F7FIQPS8gYsJ4+T6Ny4ZgY6q+HjHuq1MLgxvHaXDCY=)
2: uuMH9xwnTCchffmAJa-oKrLfAYc.roa (hash: gi00uqlY9uodrepVtMPHWYj2E0gYu71bOvNoVXlRiVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:cb:b9:b6:4f:99:db:9e:4f:a6:38:39:60:84:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef78bc969a8307336ef4044f3dfef1fe136382b3
Validity
Not Before: Jun 28 17:01:38 2025 GMT
Not After : Jun 29 17:01:38 2025 GMT
Subject: CN=a7e8655b0ae74fdeb28d6a4b096f47d8887c318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:e3:06:2f:d7:16:be:df:5e:b8:27:4c:86:
f2:da:98:96:33:8c:10:95:4c:5e:1b:c5:e6:1f:29:
5f:54:23:0c:e9:e2:d7:dd:51:7c:1d:2e:f8:e7:b3:
05:7d:58:27:66:cf:8b:f7:83:62:7d:0f:1a:d3:79:
59:be:db:a7:19:91:a5:90:ed:68:a1:23:68:c2:da:
3c:ca:24:25:28:c8:70:2e:dc:fe:c1:68:77:02:15:
4d:16:27:6a:da:7f:91:f7:9e:f0:f7:f4:23:25:dd:
4c:86:7c:c2:f3:60:d4:ba:d8:b7:3a:ec:c4:84:99:
86:5e:b0:ce:c7:36:7e:8d:00:b8:31:03:5a:d2:00:
df:59:44:58:6b:bd:53:12:df:ee:6d:4d:02:4e:57:
b4:39:d7:3f:10:9a:cb:d2:c6:12:53:c5:0a:30:91:
4d:2e:ef:c7:64:f4:41:71:a8:58:aa:51:93:d1:94:
2d:e2:e8:f3:1d:17:9d:a7:58:ad:96:2d:66:72:07:
e0:52:b8:24:cd:a7:41:e4:76:ff:5d:7b:1d:5c:0a:
1f:84:27:8a:bb:1b:4c:a6:9d:fe:ee:89:28:4a:32:
d1:f8:d3:ba:59:d7:e3:82:82:ba:92:d7:a1:95:45:
f9:98:e1:a1:61:57:9c:dc:69:97:9e:46:94:d2:da:
93:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:E8:65:5B:0A:E7:4F:DE:B2:8D:6A:4B:09:6F:47:D8:88:7C:31:8A
X509v3 Authority Key Identifier:
keyid:EF:78:BC:96:9A:83:07:33:6E:F4:04:4F:3D:FE:F1:FE:13:63:82:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73i8lpqDBzNu9ARPPf7x_hNjgrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/e4bd6a-adaf-48c8-b999-53570a1abd04/1/73i8lpqDBzNu9ARPPf7x_hNjgrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:c2:6b:bf:9b:6b:10:c2:d6:70:e2:31:83:76:cf:d1:2f:f5:
e7:f4:1c:3c:ce:92:15:8e:8e:43:6d:71:3f:2e:72:07:aa:01:
3c:2b:5b:b1:8a:44:8e:97:28:60:17:c5:27:95:0e:96:34:f2:
84:e5:46:7e:93:74:95:a0:b2:21:06:23:ae:cc:d6:af:1a:f0:
7f:db:95:3c:37:0d:56:de:95:2b:d4:ec:61:dd:c5:62:5c:c3:
c7:20:6e:a3:1e:d6:a5:3b:49:e9:8d:dc:b3:aa:92:a1:01:84:
b2:65:a8:a7:67:92:fd:fd:0a:09:2a:df:62:78:65:9d:eb:f5:
e9:95:71:1f:74:1a:e9:76:f0:d3:7d:68:0b:a5:2a:28:18:cc:
7b:30:e0:01:37:80:b1:f3:36:55:30:21:39:e3:2e:ce:71:58:
4c:7d:15:80:8d:3d:5c:d2:7c:52:25:18:c8:4c:94:62:21:e4:
f0:ca:47:6c:4e:43:75:d7:45:9d:14:85:14:c5:96:2a:99:56:
94:89:4b:56:da:ef:06:54:6c:1d:48:64:8f:b2:f0:52:b2:44:
c1:14:ca:eb:a3:a7:64:f1:e4:0a:a7:bf:ff:50:e6:fa:d3:0f:
ed:4c:c6:59:b3:6d:7c:0e:42:65:00:53:e6:e2:af:36:07:ab:
37:5d:6d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:35 2025 by rpki-client