Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
File: 71VFlkWXnEE9C8b3RU8NNuQOmfk.mft (raw, json)
Hash identifier: PWZXK8bIpVchIXNhhz1WQrNO4RRDQYpzJ2vj2JaCyS4=
Subject key identifier: 90:2B:5B:5D:6B:4A:9C:0C:B1:BF:96:C3:F8:78:84:6A:05:C4:94:B3
Authority key identifier: EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
Certificate issuer: /CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Certificate serial: 01991FC2D2727269016770ACBA82DB64FD73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
Manifest number: 0357
Signing time: Sat 06 Sep 2025 16:01:25 +0000
Manifest this update: Sat 06 Sep 2025 16:01:25 +0000
Manifest next update: Sun 07 Sep 2025 16:01:25 +0000
Files and hashes: 1: 71VFlkWXnEE9C8b3RU8NNuQOmfk.crl (hash: bbuAzFMZqaUfRyji0q44fdUBKQxr7TYwQxB5+kbpsXM=)
2: ANJPzCxK_HnMEX4DpZted-gFbKc.roa (hash: u7oq/DdEoSmnGW4xIokmlTuk13k00LAjUJfdE5RPRJY=)
3: ZxWk3FF7G-mV4dvIh9xuINcMa3g.roa (hash: osnpqNECQOCJYS+g2GUaYHD48aPmIaJ8ifNTfYGelL0=)
4: iRgiX3Efpdb7rWw9dQBln7RbaAs.roa (hash: ml9tFxjDO5V7oa+IDi4ukeu4c4f+IE/tPFsfezwpU2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Sep 2025 11:14:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1f:c2:d2:72:72:69:01:67:70:ac:ba:82:db:64:fd:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef55459645979c413d0bc6f7454f0d36e40e99f9
Validity
Not Before: Sep 6 16:01:25 2025 GMT
Not After : Sep 7 16:01:25 2025 GMT
Subject: CN=902b5b5d6b4a9c0cb1bf96c3f878846a05c494b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:b3:71:91:a0:e5:e3:b0:b3:aa:0b:65:2b:
7b:5a:f8:bd:16:36:8b:38:51:d5:b3:11:42:ea:18:
c0:a0:7b:2f:0a:24:b4:37:26:96:be:05:ad:5d:48:
7f:5d:65:ba:f0:17:2e:02:b8:5e:bf:23:23:27:62:
6a:c1:8d:cd:74:5f:6f:8f:fa:5a:cc:92:26:e4:b9:
13:ce:3d:27:f2:33:4a:dc:53:d3:17:01:cd:6a:4f:
c9:23:b9:c3:31:8e:ae:33:cb:17:c7:1c:4c:76:66:
e0:bb:35:b3:ea:ab:0a:13:6d:c2:a9:d8:6f:ff:ad:
78:52:2f:e4:fb:7f:61:61:c7:52:30:32:0d:5b:91:
c7:b1:b0:b8:25:17:d2:7e:5d:de:f5:a7:df:c1:62:
e1:3a:dc:70:30:39:25:24:e8:41:5a:e5:80:c9:82:
bb:ed:31:47:13:83:e5:fe:f3:0e:7e:7f:22:e0:69:
85:99:89:85:b3:b7:57:36:dc:38:a1:88:c8:d1:67:
f1:72:bc:f1:f5:11:b1:c5:63:a3:7a:d0:cc:a1:26:
99:e5:0f:3d:48:a5:ce:32:48:93:ed:8c:c3:c8:5b:
81:a8:58:b9:4e:29:ea:5b:1a:8f:12:18:ba:6d:80:
64:14:85:85:dc:5b:fb:f9:b2:6c:27:98:30:df:c3:
b6:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:2B:5B:5D:6B:4A:9C:0C:B1:BF:96:C3:F8:78:84:6A:05:C4:94:B3
X509v3 Authority Key Identifier:
keyid:EF:55:45:96:45:97:9C:41:3D:0B:C6:F7:45:4F:0D:36:E4:0E:99:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71VFlkWXnEE9C8b3RU8NNuQOmfk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/0512df-7d0c-463b-8724-82531e9c7804/1/71VFlkWXnEE9C8b3RU8NNuQOmfk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:5f:85:a3:7c:70:f8:3e:51:0a:36:3b:04:d9:b5:04:65:be:
b3:f0:ff:33:d9:a6:58:e7:03:9e:c6:81:f7:7a:23:e0:f1:0d:
2f:37:04:ad:52:ec:bc:f4:d6:35:84:ac:6e:80:c2:9b:63:91:
18:64:25:51:32:77:71:ea:7f:3d:b2:84:88:5b:b1:88:95:b1:
a4:ee:36:01:80:8a:46:50:e9:0f:4f:f5:37:c6:94:84:35:d4:
64:95:eb:36:c8:9c:07:ed:d4:1d:27:33:30:d8:19:7a:54:c5:
d1:6f:7a:df:fa:cd:14:16:fd:f5:6c:35:20:ef:d1:3d:18:7b:
85:e7:c2:16:7d:7e:35:cc:92:03:57:99:a0:85:95:01:91:00:
18:39:d9:38:fc:e3:9b:b6:00:66:4d:31:0f:1e:f4:58:79:0d:
31:f3:93:e6:4e:28:e9:35:d9:0a:23:6b:c0:7f:d3:d6:6e:c8:
0f:e8:99:fe:99:1a:dd:6c:23:e1:7f:73:7a:a5:38:d4:0a:6c:
fb:3f:e8:52:64:cd:ce:f3:f8:2d:44:9f:30:1b:42:53:b9:0a:
c2:61:7f:76:33:5d:05:19:7f:66:96:0e:08:c5:5d:d5:ca:85:
0c:36:25:bd:7b:5b:eb:d9:7a:b4:0f:3a:7b:47:17:a6:5e:6f:
a9:3f:89:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 17:26:44 2025 by rpki-client