
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: WcGt32PkpAh2Fn00zdmQwkRY0rtHOCWeoLjmcK580wg=
Subject key identifier: AA:22:F4:B5:5E:34:F1:38:A6:C8:DA:29:B8:EB:0C:35:7F:24:D1:BC
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 0199326D10B2A0933614C5787C672820D6F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 1144
Signing time: Wed 10 Sep 2025 07:00:32 +0000
Manifest this update: Wed 10 Sep 2025 07:00:32 +0000
Manifest next update: Thu 11 Sep 2025 07:00:32 +0000
Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: HXao+ZgNcXHop63R8Nk1M5sgSuFf05QNun1xNl4p4ys=)
2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 07:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:32:6d:10:b2:a0:93:36:14:c5:78:7c:67:28:20:d6:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Sep 10 07:00:32 2025 GMT
Not After : Sep 11 07:00:32 2025 GMT
Subject: CN=aa22f4b55e34f138a6c8da29b8eb0c357f24d1bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e9:33:4f:a9:7a:a1:4a:fe:56:4e:4b:6d:24:
fa:82:8f:f2:52:5f:cb:d4:22:56:78:08:90:d7:0b:
3f:76:df:54:07:19:6f:44:ad:34:74:ba:5a:ed:20:
03:20:4e:d1:80:bb:97:26:a6:56:32:87:f6:18:45:
49:96:0e:0a:6b:ec:02:ff:99:ca:3a:9c:3a:dd:a1:
70:26:3b:d6:e8:e0:b4:6d:d2:b9:42:07:29:70:08:
20:e3:50:dc:04:52:b9:d7:9c:72:94:a4:e5:03:1b:
32:d8:e6:27:a4:19:f9:2f:1d:54:35:45:ef:98:07:
50:db:74:0d:4e:09:18:89:81:44:7e:84:ba:a9:35:
0b:0b:f5:0b:d4:b4:6f:7a:42:38:0e:e5:13:d0:f2:
4c:0c:03:82:56:cd:77:35:6c:94:a7:1f:9a:c7:dd:
49:09:47:9f:6c:9b:b5:f5:75:59:66:6c:c9:b5:d2:
d8:b3:f8:f3:a8:31:7a:db:33:f6:81:02:f3:9d:85:
21:6a:d8:64:ce:da:cb:75:a8:36:90:8c:97:5f:6b:
77:c2:3d:08:b2:d6:bf:a2:fe:55:ce:56:0a:cc:22:
f7:b9:05:79:ec:8f:52:90:51:2e:53:9e:af:a9:47:
4e:58:85:40:f7:25:be:9f:a2:69:6e:b6:76:23:d8:
27:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:F4:B5:5E:34:F1:38:A6:C8:DA:29:B8:EB:0C:35:7F:24:D1:BC
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:31:dc:01:41:e8:d9:52:95:61:b9:91:31:08:e8:8f:c0:58:
ef:1b:90:7c:59:7c:e7:8d:59:10:b2:3e:7d:18:d6:05:70:4c:
e2:66:78:84:dc:da:f5:cd:10:ec:75:0c:bb:08:45:30:3d:0e:
16:1d:72:e5:ab:51:de:5c:72:37:1d:11:f0:d4:8f:71:7c:89:
ba:ae:73:90:85:90:e0:43:7c:21:1e:0d:32:16:f8:83:d1:29:
d5:fe:50:28:c1:72:16:83:53:8f:eb:34:0d:1c:31:4a:9a:ee:
86:1f:72:38:e5:9c:8a:92:5e:ce:cb:2d:34:8a:1e:10:45:4b:
f6:63:c1:56:f5:87:ee:bf:c1:8e:16:ee:91:24:29:bf:49:16:
2a:4e:ba:b9:66:ae:4c:0a:c1:4f:30:95:20:b4:f9:85:56:ff:
0d:70:fd:10:ae:dc:13:1a:6f:6a:00:a4:ce:62:ec:51:3b:d4:
fd:6b:74:a2:3c:1f:73:b7:4c:d0:8c:50:25:96:32:c8:78:56:
ff:83:18:93:94:c2:b6:f2:6f:85:59:08:52:56:20:eb:e8:28:
e4:d0:b7:c0:76:d7:fc:9e:23:f2:71:47:d5:2a:74:9e:5b:79:
47:23:6b:e8:b0:ef:6f:2b:d8:aa:4c:06:75:da:2a:61:ce:35:
ce:8f:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:19:54 2025 by rpki-client