Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: T2y/urYWTL7xaH+9qKG+wSRLshev1QAeaJGCHar0Wqk=
Subject key identifier: F2:F3:6E:8A:F5:C6:F3:45:A2:E3:C8:49:42:64:38:F8:39:13:AC:BD
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 01976C98D375B0CDCBD2BEC868BE977A7FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 1059
Signing time: Sat 14 Jun 2025 04:00:44 +0000
Manifest this update: Sat 14 Jun 2025 04:00:44 +0000
Manifest next update: Sun 15 Jun 2025 04:00:44 +0000
Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: fW8ka3KGbLVmAXg/EzzF/bBCMpmDyPiaRbDlcOrd4KA=)
2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:d3:75:b0:cd:cb:d2:be:c8:68:be:97:7a:7f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Jun 14 04:00:44 2025 GMT
Not After : Jun 15 04:00:44 2025 GMT
Subject: CN=f2f36e8af5c6f345a2e3c849426438f83913acbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:93:4c:da:9f:38:ce:34:03:d5:bc:fa:c5:54:
ac:f7:45:8f:7f:45:a6:9e:d3:2c:85:d0:bc:1c:ac:
5a:54:eb:d4:2c:08:60:5d:e7:8f:ab:18:1f:77:0b:
e4:8b:79:f7:c4:7e:2b:c0:21:07:91:b2:de:e1:f1:
bb:d1:d9:24:fc:31:51:d0:99:5b:4b:71:02:91:fd:
4d:86:08:bb:fe:ba:bc:3c:ae:5a:2b:8c:00:7a:70:
ad:0c:42:96:f3:ef:3f:6d:fb:75:96:93:14:2f:40:
2d:14:dd:03:b7:45:82:36:65:7a:25:b5:0b:48:69:
5e:b0:b3:9d:22:6a:00:39:e8:b5:dd:e0:91:a0:d9:
eb:02:80:86:59:60:2f:e9:94:18:59:7c:8f:7a:09:
ae:04:f3:0d:99:e8:38:d2:e0:ab:46:f8:8a:25:54:
4c:90:fb:b8:9b:0d:61:df:61:da:76:7a:f1:e5:87:
e2:c0:55:d6:e3:d0:4b:37:1a:12:63:9a:f6:dc:cd:
78:ca:68:48:5c:79:cb:0c:96:54:5d:eb:35:c2:16:
90:f9:8e:b3:34:7e:7c:da:29:29:19:b7:23:71:bd:
5c:67:33:6a:82:3b:ee:14:99:c7:56:8b:7c:3b:e6:
ac:0d:50:46:5f:a5:d7:9c:cd:6f:03:50:84:4a:7e:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F3:6E:8A:F5:C6:F3:45:A2:E3:C8:49:42:64:38:F8:39:13:AC:BD
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c2:60:90:8f:e5:a6:ab:29:cd:75:04:e3:78:f6:74:c5:1c:
cc:3f:ac:68:6c:8d:d1:43:56:25:eb:19:35:96:e2:f6:e0:85:
a4:1a:db:76:d6:1e:61:c8:9c:fd:33:1e:7c:3a:60:74:8d:33:
8e:87:68:25:45:29:5d:13:92:1c:53:8d:b2:17:ec:98:88:98:
e5:e8:45:11:46:1c:ed:44:fa:bc:d5:36:69:30:fa:04:90:1d:
92:62:4d:78:56:92:20:01:bb:19:ed:01:a7:d1:25:12:bb:a2:
c6:d2:7c:28:da:ec:25:74:14:ac:d8:0a:80:05:70:72:9a:c4:
40:7b:1c:0e:44:7d:2f:da:8b:15:84:39:e5:1c:9b:54:d6:2c:
dc:0e:c6:0e:c2:d7:69:7b:b5:9b:5b:e2:17:3a:7a:47:fa:ba:
af:ce:ee:d9:e7:31:1e:09:6d:e3:51:f9:e6:b7:17:bc:b3:d2:
35:1e:0a:a7:27:ca:5d:26:b6:7f:5b:2c:46:2d:54:4f:8c:bb:
0e:b5:b7:9d:45:58:90:bf:b4:28:5f:47:b9:ff:33:e6:0a:a9:
d2:bc:cd:b9:b0:91:bc:8d:04:08:f0:78:c9:e3:7a:35:45:71:
bd:46:3e:bd:1e:41:cf:6b:6f:75:ea:a8:0e:e1:47:3a:62:f2:
81:0f:87:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:56 2025 by rpki-client