Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: FjprbXG2m3N+STV8rgd0U4CKKaIKnHJrqzo08x6XHd8=
Subject key identifier: CD:B3:AB:76:00:18:7D:50:6C:36:C2:C8:13:E0:8E:A5:65:5C:B8:73
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 0198959269A394FEB04F2BD66A98FCE03EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 20:00:57 +0000
Manifest this update: Sun 10 Aug 2025 20:00:57 +0000
Manifest next update: Mon 11 Aug 2025 20:00:57 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: b21id++jNxM5N8o6jZB1gL04S9m6xxAQKGFOgAdZ4BQ=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:92:69:a3:94:fe:b0:4f:2b:d6:6a:98:fc:e0:3e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Aug 10 20:00:57 2025 GMT
Not After : Aug 11 20:00:57 2025 GMT
Subject: CN=cdb3ab7600187d506c36c2c813e08ea5655cb873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:0b:a9:61:90:b0:51:27:a0:f9:5e:83:a2:
9f:59:74:20:75:e6:8b:c9:1b:aa:75:9f:c1:2d:5f:
fe:2a:e5:3b:fc:3e:8f:24:30:da:e5:29:f0:e8:4c:
ae:04:8a:05:5f:a9:2b:ae:c6:16:f8:32:fb:32:ed:
5a:f9:45:76:0a:07:0a:14:fe:b1:b6:f8:61:fb:f3:
41:82:27:01:cc:94:d2:7b:71:89:69:8f:3e:25:8c:
fd:82:e6:eb:51:8d:10:54:13:3f:11:21:1f:c3:a4:
7b:45:b0:9c:f1:e5:bd:43:f8:69:b9:5c:95:81:20:
ad:b4:d5:a7:e8:5e:b2:ea:86:73:78:61:d9:68:52:
16:d1:36:2e:5d:55:08:da:f6:b7:d1:ae:08:e6:bb:
bf:b5:7e:e6:0f:cf:30:1c:23:1f:2f:32:01:d3:b2:
2c:0c:3e:2e:d6:5f:49:e4:db:f3:9e:f9:b0:d9:e3:
1d:04:ec:db:da:88:a1:bf:09:e2:fd:86:43:42:2a:
b7:67:0a:31:c4:14:f5:b3:e0:2f:64:41:16:c6:ff:
c7:28:3c:c3:8f:d8:96:40:eb:50:77:9c:f1:92:fd:
a0:f5:6a:7f:93:80:e2:d0:eb:01:59:7f:b4:82:72:
30:6e:1c:5f:2a:de:8a:bd:59:35:49:c3:77:23:31:
24:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:AB:76:00:18:7D:50:6C:36:C2:C8:13:E0:8E:A5:65:5C:B8:73
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:2c:76:10:d6:4c:17:2e:b6:b2:4b:cd:81:35:b7:89:bd:d8:
7a:4f:a2:69:3a:fe:11:93:e4:5e:4d:8e:1d:47:61:75:e3:e6:
c8:15:d2:c7:96:bb:c9:9b:aa:6f:1e:0f:1e:d9:ab:12:34:ba:
85:7d:a0:33:53:96:7a:fd:7e:4e:70:57:ef:61:93:d8:28:dd:
6a:fd:ad:63:db:f1:5c:42:0c:50:f4:da:1c:33:83:76:2e:28:
01:a2:84:c2:38:a2:34:cc:44:a3:f4:24:3c:c9:26:c7:30:17:
9a:0d:08:ad:6e:41:2d:99:3e:5c:50:d6:14:70:11:c4:66:63:
af:b0:15:26:c0:0c:01:b5:ee:84:47:84:21:7c:e8:b4:2c:59:
14:cf:82:bf:9d:25:ed:ce:3f:bb:e6:ea:81:40:5d:22:68:c3:
a0:07:8f:af:b3:8f:bd:5c:7e:55:4d:f5:5a:41:c1:8f:9f:f8:
21:ea:20:fb:73:58:28:23:63:15:45:01:2d:4b:61:e5:58:73:
6f:06:b0:ee:bb:45:01:03:d0:b8:fa:a6:b5:c2:2f:0a:a8:77:
83:4e:e7:d9:5d:57:aa:d3:2c:3b:89:db:8e:28:10:de:2a:a9:
4c:2d:81:1c:9b:48:57:7c:c4:45:ff:8d:d7:1f:7b:7b:1f:dc:
2f:c5:20:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 01:45:07 2025 by rpki-client