Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: 1hEPfwi02fLdvVo7423joyEE0/hbvkhscyW/qvnrUJ4=
Subject key identifier: 55:F4:BB:FC:66:DB:97:04:E0:B3:6C:4A:A2:8E:0E:FA:9F:72:F6:A9
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 01989034C0FCA1AF3403C0D18ED3C7B0E83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 1627
Signing time: Sat 09 Aug 2025 19:00:32 +0000
Manifest this update: Sat 09 Aug 2025 19:00:32 +0000
Manifest next update: Sun 10 Aug 2025 19:00:32 +0000
Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: EsPOR3VRmN0BB2UEVMSyrrQvONpg6YvYdgULTxzlHmc=)
2: f55jTIdQsHwVwkpSlpByg0fWwy8.roa (hash: 25acZzU2K48rff6CSQnqCSvHpfoM5LhDm4D2D9V3Y28=)
3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:90:34:c0:fc:a1:af:34:03:c0:d1:8e:d3:c7:b0:e8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Aug 9 19:00:32 2025 GMT
Not After : Aug 10 19:00:32 2025 GMT
Subject: CN=55f4bbfc66db9704e0b36c4aa28e0efa9f72f6a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:49:3a:71:31:11:16:0e:7e:27:08:c3:a4:
4a:8a:b1:e1:c3:fa:48:52:4b:f2:c0:fb:c1:26:7d:
33:83:39:23:6a:3e:a2:78:fb:1a:84:6c:a0:2a:3f:
e6:da:10:6b:38:af:32:45:36:ea:dd:8d:0a:c0:b8:
d1:c8:67:62:0b:51:8a:00:31:a2:2e:ef:8f:1b:f7:
16:61:ef:f5:52:fc:af:83:11:bf:e0:aa:50:75:6d:
c8:c5:2a:77:45:b9:df:25:f4:e6:11:b8:03:aa:6d:
ce:0d:21:14:91:36:2c:ae:62:e7:d7:2a:6b:af:71:
6e:82:b6:66:20:5e:85:74:0f:6b:d4:4d:2b:33:d1:
16:6e:92:ed:e0:ef:67:95:af:15:cc:29:e2:ff:a6:
dc:21:29:6c:d5:d2:75:09:f1:7e:1d:00:d7:d6:75:
a0:b3:a9:a9:33:43:64:4c:8f:86:d2:9b:38:18:53:
c8:57:4c:d8:f3:2b:9d:ee:02:ae:15:90:70:d3:b0:
42:95:e6:96:82:ff:9e:b5:29:3a:a2:9b:3e:d1:dc:
b7:a5:87:57:69:22:c7:22:8f:e6:d9:cf:a7:de:20:
89:39:35:ad:ce:9e:80:d2:cd:b7:fc:05:fb:65:6c:
57:3e:28:a6:b1:ef:fb:71:82:a6:21:52:e5:dd:0b:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F4:BB:FC:66:DB:97:04:E0:B3:6C:4A:A2:8E:0E:FA:9F:72:F6:A9
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:48:ae:17:aa:eb:55:19:c8:a9:34:9f:a6:3f:fd:ef:82:9f:
da:52:c6:2f:5f:90:5c:f5:98:4d:57:97:92:a9:0b:c3:e2:6b:
89:af:31:42:7f:4e:1f:75:35:8c:51:db:fe:46:c2:91:50:5b:
f0:82:f2:e3:e2:5a:32:f7:3e:53:58:13:7e:bb:b4:51:63:f8:
47:3c:ba:69:04:0c:ba:9a:9e:22:3d:ec:12:cd:5e:53:dc:3d:
db:10:f5:7f:e5:f0:a1:d6:0a:e1:db:e1:9c:82:22:1c:3b:62:
1c:b6:f9:2d:dc:3d:44:15:0c:db:70:16:8d:a0:04:08:38:62:
d6:06:aa:75:49:5f:66:9e:b5:ef:b4:cd:e9:82:a4:97:b7:73:
32:d8:c5:7a:82:13:82:e2:d6:a9:e1:a0:be:90:37:11:86:97:
91:3f:ed:6b:6a:1f:90:1e:f6:d8:18:f3:31:90:58:d9:fd:22:
d7:e6:ab:63:65:1e:e7:14:0b:22:a1:58:2a:75:c1:09:1a:89:
5a:7e:c7:d6:76:e2:88:f7:52:b2:96:2b:9e:4c:cc:a0:bc:37:
a6:b4:6b:a0:91:e0:00:b5:ec:ea:9d:8d:7b:4c:0d:99:76:70:
85:c1:19:9c:8e:c3:da:89:4d:b5:3f:60:c2:1d:fb:bc:54:ce:
d7:f2:d6:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiQNMD8oa80A8DRjtPHsOg9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNTgzNjg2NDY0YzUzM2Q0MTUyYmNhMmVkZjNhMDFiNDg3
ZWVhOTIwHhcNMjUwODA5MTkwMDMyWhcNMjUwODEwMTkwMDMyWjAzMTEwLwYDVQQD
Eyg1NWY0YmJmYzY2ZGI5NzA0ZTBiMzZjNGFhMjhlMGVmYTlmNzJmNmE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnRJOnExERYOficIw6RKirHhw/pI
UkvywPvBJn0zgzkjaj6iePsahGygKj/m2hBrOK8yRTbq3Y0KwLjRyGdiC1GKADGi
Lu+PG/cWYe/1UvyvgxG/4KpQdW3IxSp3RbnfJfTmEbgDqm3ODSEUkTYsrmLn1ypr
r3FugrZmIF6FdA9r1E0rM9EWbpLt4O9nla8VzCni/6bcISls1dJ1CfF+HQDX1nWg
s6mpM0NkTI+G0ps4GFPIV0zY8yud7gKuFZBw07BCleaWgv+etSk6ops+0dy3pYdX
aSLHIo/m2c+n3iCJOTWtzp6A0s23/AX7ZWxXPiimse/7cYKmIVLl3QuZxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX0u/xm25cE4LNsSqKODvqfcvapMB8GA1UdIwQY
MBaAFO9YNoZGTFM9QVK8ou3zoBtIfuqSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUt
ZjQzYWEyNzAwM2M1LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS82YTc1NGUtNThmNi00YzEwLTlkNWUtZjQzYWEyNzAwM2M1
LzEvNzFnMmhrWk1VejFCVXJ5aTdmT2dHMGgtNnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMEiuF6rr
VRnIqTSfpj/974Kf2lLGL1+QXPWYTVeXkqkLw+Jria8xQn9OH3U1jFHb/kbCkVBb
8ILy4+JaMvc+U1gTfru0UWP4Rzy6aQQMupqeIj3sEs1eU9w92xD1f+XwodYK4dvh
nIIiHDtiHLb5Ldw9RBUM23AWjaAECDhi1gaqdUlfZp6177TN6YKkl7dzMtjFeoIT
guLWqeGgvpA3EYaXkT/ta2ofkB722BjzMZBY2f0i1+arY2Ue5xQLIqFYKnXBCRqJ
Wn7H1nbiiPdSspYrnkzMoLw3prRroJHgALXs6p2Ne0wNmXZwhcEZnI7D2olNtT9g
wh37vFTO1/LWtQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 04:55:59 2025 by rpki-client