Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: 0jpE4/2Dx+W8+6V3w0vcL/m3D24kzW5ei+gDSs0nGvY=
Subject key identifier: 58:CF:9E:28:BB:31:E5:92:21:FA:C0:E3:32:62:27:73:9E:94:96:FE
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 01987C40E86E370E784364C6DC023767030B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 161B
Signing time: Tue 05 Aug 2025 22:01:25 +0000
Manifest this update: Tue 05 Aug 2025 22:01:25 +0000
Manifest next update: Wed 06 Aug 2025 22:01:25 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: tLQfTTG8GgbcYSCYbjOPRXiRZjd91hqibZXResHpHs8=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:e8:6e:37:0e:78:43:64:c6:dc:02:37:67:03:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Aug 5 22:01:25 2025 GMT
Not After : Aug 6 22:01:25 2025 GMT
Subject: CN=58cf9e28bb31e59221fac0e3326227739e9496fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:82:2d:e9:21:57:a6:05:f4:ff:67:69:49:
7b:bc:d1:2e:4f:e7:d2:47:77:13:68:57:f0:20:d8:
e5:3e:37:c4:b4:ab:87:03:95:29:e7:33:d8:f7:d7:
ac:a0:e0:da:50:1c:59:ba:78:fa:5d:27:dd:cc:bd:
ba:b2:ad:60:70:b4:13:e6:6a:be:1d:3a:df:40:23:
8f:49:61:2b:6a:e0:82:10:53:3d:cb:ae:14:f0:96:
de:e0:13:95:4f:92:eb:c7:d1:ca:fd:8d:58:25:04:
c4:6b:57:0d:36:d3:8d:fa:da:57:5c:17:14:44:82:
c9:1f:c9:75:b9:37:ea:f3:98:15:19:8f:e0:50:ca:
58:01:9e:94:d3:d5:62:34:3d:d9:95:1f:c3:e2:1b:
84:54:12:04:54:26:64:54:23:88:74:15:e7:cf:f8:
6c:49:c6:37:58:58:02:6e:b4:86:47:9b:f9:56:79:
b1:f0:fb:e8:36:ae:bb:6e:1a:93:e6:ae:7f:1a:5f:
ac:d4:ab:b0:d7:37:7d:95:8d:65:a5:ab:d5:2b:b3:
30:c3:2d:83:61:17:b9:c6:02:1e:6f:51:32:8c:16:
7e:a0:00:2c:8c:3e:93:e4:fc:1d:20:ad:b6:a7:3b:
f7:69:55:b6:98:94:58:78:2d:1d:cf:98:2a:28:6a:
b4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CF:9E:28:BB:31:E5:92:21:FA:C0:E3:32:62:27:73:9E:94:96:FE
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c5:c4:10:20:c2:86:ac:dd:fe:05:67:9e:bb:06:97:a1:4b:
d4:81:70:2a:1c:3e:ed:ec:af:a1:9d:b0:c4:23:37:7e:35:f0:
4d:3c:d7:f2:93:12:55:3a:50:0f:ef:7b:52:8c:a8:58:b1:75:
63:4e:bf:b9:ae:a5:5d:26:6e:2e:ee:27:76:5e:41:d3:ea:c2:
f1:61:ad:be:59:56:f9:f7:2a:02:20:8d:1d:18:db:8c:f6:ce:
f2:37:2e:92:b9:13:12:32:af:3e:07:b6:d8:04:5e:c9:cd:e2:
b4:83:40:c6:95:d5:03:3c:23:f9:3b:2c:44:8a:69:24:15:5c:
f6:48:a9:ab:f9:55:0c:50:b4:ca:dd:b0:e8:45:99:26:18:62:
cb:6d:98:a6:d8:21:eb:19:73:b8:6e:d7:31:66:e1:e8:b9:59:
25:96:c9:6c:df:4c:63:92:b1:54:0b:ae:d6:bb:39:fb:ca:01:
16:3b:93:0e:b4:8d:fd:db:ea:73:10:f4:1c:1b:60:89:b6:a7:
ef:f1:4d:66:66:e1:26:4a:da:21:dc:3b:1b:91:12:22:0b:fc:
52:76:0b:bb:bf:66:db:23:6d:e8:22:73:4f:d0:54:58:72:88:
74:d8:6a:d3:77:8c:f6:71:b3:46:a5:fa:09:c0:4d:f2:40:e1:
0d:b4:8b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:03:55 2025 by rpki-client