Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: DFuosuW5gkwGUZBZZ7/1DDBYK1Dg3rLLcMzWfDVpRN8=
Subject key identifier: 5A:F2:5C:B0:C4:5C:4F:12:DF:A4:5A:4E:01:35:D4:B3:AF:42:9A:01
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 019766CDD3CE7D52BE94D4113565B08C56DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 01:00:54 +0000
Manifest this update: Fri 13 Jun 2025 01:00:54 +0000
Manifest next update: Sat 14 Jun 2025 01:00:54 +0000
Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: 36CAPR9Ybs29/HUnRmnBNbYN6k3ADgV+s37H5qXt0PI=)
2: f55jTIdQsHwVwkpSlpByg0fWwy8.roa (hash: 25acZzU2K48rff6CSQnqCSvHpfoM5LhDm4D2D9V3Y28=)
3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:cd:d3:ce:7d:52:be:94:d4:11:35:65:b0:8c:56:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Jun 13 01:00:54 2025 GMT
Not After : Jun 14 01:00:54 2025 GMT
Subject: CN=5af25cb0c45c4f12dfa45a4e0135d4b3af429a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:c5:99:65:00:7a:c3:df:89:e2:9e:fb:97:
45:e1:fd:3d:65:79:bb:a1:bb:1e:93:8c:ca:a4:1d:
9d:6a:45:80:8e:d6:4b:3e:ec:3d:c1:72:29:80:ee:
d0:d2:95:a0:19:75:4c:7c:2f:c8:31:0a:6e:ab:c2:
11:7d:e8:0a:e0:77:7e:48:1e:8a:73:27:b7:c1:6b:
a9:9b:41:91:74:51:c8:07:20:44:30:37:22:94:1f:
0b:e9:b7:95:5c:18:73:7e:01:76:1d:d6:e2:bc:4e:
40:db:94:f8:51:15:6d:1f:94:db:b0:fc:22:82:80:
21:db:ff:c7:11:43:b9:65:8e:a7:1a:87:dc:19:1d:
29:91:96:78:d4:2c:df:c5:0c:f3:a3:38:f1:8d:6a:
d0:51:f3:9c:91:df:2a:69:68:e9:24:5d:b9:8c:ce:
9f:f4:aa:f7:53:1a:be:7e:db:fe:9c:71:0a:7d:14:
b1:5b:07:2e:6d:3d:5f:01:d0:1a:e3:84:c0:c8:0e:
40:6e:a0:48:fd:56:b6:ca:59:77:2b:b5:d3:3b:f7:
f7:15:80:df:23:92:1e:02:64:52:72:51:ab:e1:e2:
ea:53:b0:f4:57:3d:45:b0:28:23:e7:13:95:f6:cb:
e7:61:4e:e4:d5:ed:2e:84:9b:c7:c0:c1:fb:46:41:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:F2:5C:B0:C4:5C:4F:12:DF:A4:5A:4E:01:35:D4:B3:AF:42:9A:01
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2f:b7:18:40:e3:9c:71:16:80:20:a3:11:b0:d1:93:e4:10:
5d:04:ef:47:22:8f:fd:37:bc:2a:bb:c5:4a:f2:29:b4:61:5c:
85:9a:6d:75:4f:96:e7:e0:b2:78:50:02:d6:14:b5:81:bc:88:
8b:eb:e4:24:22:34:bf:01:f5:d4:95:b2:52:16:e3:2a:37:de:
d1:f1:06:b4:5d:6f:1c:00:09:47:db:84:05:44:17:65:27:48:
db:cb:24:7e:0b:7b:72:31:01:f3:91:ab:57:6d:02:2a:df:9c:
3c:07:9e:32:c1:fd:77:8c:fc:5f:e9:3c:f0:33:f8:16:b1:65:
a7:5c:9c:36:3b:0f:ea:9f:d7:83:ac:d8:0d:9a:0c:9e:f1:e3:
42:9e:02:c7:d4:b5:18:91:38:b8:5d:37:13:50:bc:b3:89:ef:
95:2c:6f:38:e4:10:8d:13:5d:91:cf:08:90:57:11:ae:09:da:
67:9e:18:52:99:1a:f2:02:ae:51:e7:5f:40:33:d7:18:f5:ee:
81:49:9b:64:cd:71:db:60:89:bb:41:f1:dd:81:e9:30:83:e4:
b2:b0:4c:24:c9:65:a1:fa:52:d7:c4:93:64:0a:42:3a:2d:27:
0d:d8:ff:d2:10:de:2d:6e:97:17:d5:7e:af:7d:61:90:d0:83:
fb:0c:a3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 04:01:32 2025 by rpki-client