Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: dyXempA+JxDu/pH8RzNT8RtC5GmFu9hcXAoEv/ld7S0=
Subject key identifier: 34:2F:0E:E4:E1:1A:3C:D5:70:79:32:BA:13:60:76:49:E1:AC:11:41
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 019676B119BD7C8E01BF44FFC8AE88D4F1BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 150F
Signing time: Sun 27 Apr 2025 10:00:39 +0000
Manifest this update: Sun 27 Apr 2025 10:00:39 +0000
Manifest next update: Mon 28 Apr 2025 10:00:39 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: ASg3KxCfMElGriW1E/Lsfi5suyX5Gxw0682zktb6jBo=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:76:b1:19:bd:7c:8e:01:bf:44:ff:c8:ae:88:d4:f1:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Apr 27 10:00:39 2025 GMT
Not After : Apr 28 10:00:39 2025 GMT
Subject: CN=342f0ee4e11a3cd5707932ba13607649e1ac1141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cf:e8:37:a6:33:bb:de:08:4a:a9:59:a0:a5:
52:42:cf:52:8a:ef:37:38:60:18:fb:d2:16:9f:d2:
a1:71:b4:b3:6e:f8:dd:da:68:42:dd:cb:ba:7a:b9:
2e:1a:06:76:35:b9:7b:c0:17:ff:76:0c:b5:a6:59:
64:c5:94:c4:26:8d:20:db:c2:a6:2c:95:ed:b4:ac:
f8:a4:47:c2:8c:a1:24:36:22:25:dd:5e:ee:79:15:
7e:3b:bc:47:86:90:9f:83:ea:4f:51:03:50:c7:c1:
81:67:b7:9b:d9:30:7c:da:5f:86:a5:bb:0d:83:56:
d3:76:e2:28:c0:e4:38:48:ac:08:2e:e0:9a:73:9a:
91:8a:e0:b7:2f:07:e4:e0:04:0c:9d:80:9e:81:65:
5b:70:44:53:03:ab:34:d5:e2:03:33:19:ad:b3:9b:
e7:8e:ea:9f:ca:dc:13:c7:e3:a3:ee:c4:50:89:2c:
e5:89:7c:81:2b:ec:8d:33:bd:97:d2:51:ca:92:c1:
9e:79:1a:9e:9c:ad:54:fd:bf:bd:1f:cc:bf:ed:76:
57:27:53:20:ca:68:58:8c:5e:35:a0:b7:a3:45:a7:
06:26:fd:07:74:21:b1:47:a9:d3:95:44:05:37:80:
2b:e4:65:2e:0a:cc:5a:b3:f8:27:c8:ed:82:ac:f0:
cf:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2F:0E:E4:E1:1A:3C:D5:70:79:32:BA:13:60:76:49:E1:AC:11:41
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:2e:14:90:41:98:cf:dd:54:8e:81:7f:53:ac:55:82:eb:74:
90:7d:b6:5d:9a:5c:0e:81:3c:13:53:e8:76:ab:d2:9a:7c:9a:
a1:18:b0:f8:a9:cf:9f:96:b6:53:7d:1e:b5:80:e5:05:79:0e:
b6:15:d7:ef:09:d3:ae:28:14:c6:83:79:bb:30:87:48:4a:d9:
96:24:9f:2c:6b:2d:a5:d0:25:47:a3:cd:01:ac:55:05:41:db:
1b:24:35:dd:cb:26:b3:5a:13:39:d2:02:54:4d:fb:6f:27:f7:
1d:e8:49:bb:76:a8:b7:0f:d0:a8:cc:8b:99:0b:66:8d:d9:08:
d5:dc:43:a3:e2:60:f1:1a:98:19:96:f8:9c:fc:91:c9:17:67:
c0:95:b5:fc:52:5e:ed:19:1d:25:f0:fe:ef:2c:2e:ea:04:bc:
c3:17:dd:19:13:7e:62:a1:98:3c:5e:21:d5:fe:9b:f9:72:dd:
40:f1:bb:4e:04:3f:b1:c3:40:fb:05:d6:9c:4f:2e:2c:81:c9:
c8:a6:ec:c3:fb:c3:2a:41:de:51:46:96:e6:3f:2d:64:8d:e9:
0f:2c:c7:d9:3e:e0:2b:c9:b3:77:ee:36:76:42:ee:7c:54:3e:
8f:95:3e:7e:d5:91:58:0d:10:f2:66:25:fd:fb:7b:61:b3:b7:
45:99:f8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:59:09 2025 by rpki-client