Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: tYGmmFQSDlqlLop7njvFljhWz+KeYgLuOYK5jOvFNIs=
Subject key identifier: 19:1F:1E:31:AE:E5:9F:0D:53:13:CF:DB:A7:79:1E:45:4C:AC:6C:83
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 019771BF32E2A0AE629185220183200A89C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 1591
Signing time: Sun 15 Jun 2025 04:00:45 +0000
Manifest this update: Sun 15 Jun 2025 04:00:45 +0000
Manifest next update: Mon 16 Jun 2025 04:00:45 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: tk26bNS1d+/TTchJnjbF2YbHBSLoAsLVPvmksP+yWPE=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:32:e2:a0:ae:62:91:85:22:01:83:20:0a:89:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Jun 15 04:00:45 2025 GMT
Not After : Jun 16 04:00:45 2025 GMT
Subject: CN=191f1e31aee59f0d5313cfdba7791e454cac6c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:77:cc:81:2d:45:99:c7:22:7e:ba:1f:21:b2:
b9:22:34:c2:97:e7:e4:92:d7:19:6f:8b:ae:c3:f4:
d2:59:95:fc:18:16:2a:38:b1:69:76:53:24:56:eb:
da:4c:dd:e9:16:71:9c:88:73:e5:5f:c7:c3:09:14:
0a:d6:21:db:8b:23:fa:56:61:2e:65:7a:c9:2a:fe:
24:0a:ea:1e:74:21:12:7c:0d:90:6c:45:7b:96:44:
5f:57:cc:6e:4d:92:8a:ab:ec:f5:29:37:61:3d:7f:
f3:06:c8:98:75:19:a1:2d:01:dd:2d:e7:e0:85:15:
6c:f9:9e:c7:a8:33:c9:fd:a6:05:bf:86:05:e0:94:
6b:a1:22:71:32:f4:8e:64:2a:f7:18:a7:28:f6:16:
65:0b:bc:51:b0:79:df:6a:c4:7d:60:50:52:82:2b:
94:48:0a:6b:39:23:73:52:de:97:30:a7:7d:0f:3e:
22:61:f7:f2:2a:74:2d:d2:04:c6:75:b8:0b:40:e0:
3c:c0:7a:e1:27:d7:a6:2b:6a:09:2b:c2:9e:24:7e:
7d:49:23:26:08:90:f6:f5:11:eb:0b:2a:df:44:37:
e4:75:30:85:e8:ee:bd:77:a7:73:ac:08:41:09:82:
cf:43:c4:82:74:8d:b3:90:90:76:22:e1:37:8c:16:
7a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:1F:1E:31:AE:E5:9F:0D:53:13:CF:DB:A7:79:1E:45:4C:AC:6C:83
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:d7:e3:1c:c9:ae:4c:c3:69:8d:68:8a:fd:20:ec:1e:9b:ce:
4e:a7:89:77:fa:1a:eb:a4:ac:9b:c7:8b:6c:04:d5:3d:c9:90:
4a:fd:dd:5f:40:16:fd:eb:00:e7:32:e4:29:ef:14:9e:8a:32:
40:83:97:ce:4f:df:4b:78:18:fc:2f:d8:c0:5a:dc:ad:55:3b:
9f:d5:1a:82:69:89:76:cb:1f:90:73:20:27:2d:eb:ac:af:e1:
ab:88:a7:02:45:65:5c:b1:b3:82:4f:6b:79:ca:b4:b4:6c:d5:
da:33:fa:d8:71:94:15:d0:cc:d0:53:95:e8:f2:36:eb:19:98:
f4:d5:74:8b:bb:ed:1d:13:8f:e5:2f:ca:9c:28:fd:68:54:46:
75:33:b0:f4:b5:e0:b2:3f:0a:c1:42:b0:69:8f:b6:70:c1:4e:
d5:62:42:32:37:19:c1:0b:4a:7c:19:37:eb:de:07:6d:2a:83:
80:18:06:da:29:b4:98:b4:46:43:59:60:40:a2:e6:9f:72:97:
5c:2d:d7:d7:17:b1:04:64:86:67:aa:c8:cc:5a:cf:8f:58:21:
1a:03:cb:82:b1:45:94:30:88:44:8c:d7:8c:b5:ca:05:fa:06:
88:ac:75:ac:69:c3:27:88:a7:b7:94:31:97:b6:08:23:df:3d:
ff:f7:72:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:57:12 2025 by rpki-client