Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: Qe3BuHuejUDaZ9uhgu3y63BqFwGCRC9sy57diFrKy8M=
Subject key identifier: CD:47:4F:61:3D:1D:5A:CD:0A:EE:80:B6:2D:F4:90:9E:ED:AB:6A:8A
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 01974D0DE31884BD9E6A48082807FAF18D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 01:00:45 +0000
Manifest this update: Sun 08 Jun 2025 01:00:45 +0000
Manifest next update: Mon 09 Jun 2025 01:00:45 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: u50nXYe/hhVfzxPFuCpB/wy4foPF/KRJQxXYuORMjIs=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:e3:18:84:bd:9e:6a:48:08:28:07:fa:f1:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Jun 8 01:00:45 2025 GMT
Not After : Jun 9 01:00:45 2025 GMT
Subject: CN=cd474f613d1d5acd0aee80b62df4909eedab6a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:10:f5:e0:c0:30:f0:d7:47:f3:2e:15:58:54:
6d:7f:8d:4c:91:e6:0b:4e:8d:cc:bf:c2:ea:fe:16:
1d:18:4c:b0:4f:19:07:21:cf:c5:73:c9:d5:31:5e:
e5:78:5d:47:d3:50:fe:d4:45:cb:7e:5f:5b:34:76:
6b:e8:6f:c9:dc:72:a1:7d:de:f2:46:b6:8d:bc:f8:
33:08:de:78:a1:cb:27:1a:a2:eb:cb:c7:9c:1c:e3:
c5:b6:da:68:1b:f5:41:f6:36:df:2f:79:b5:57:2c:
4a:52:6c:50:44:93:5a:60:1d:2e:19:ab:e2:0a:08:
9e:8c:c1:82:40:9c:b8:8e:3f:7b:58:ef:59:4a:57:
79:66:48:2a:0f:f9:4d:96:5a:de:74:f6:6f:fa:b8:
f6:fc:2c:3b:2d:d6:6e:a8:57:b4:89:3a:f1:4a:b6:
18:d5:d2:06:36:99:10:62:bd:4b:f7:fa:3e:33:d7:
fc:d6:fb:ad:a0:17:c9:7e:ef:be:90:39:94:97:49:
5f:70:d2:bf:01:d3:6d:a2:59:31:67:be:12:96:ce:
9c:58:d3:2d:e3:2d:3c:ca:5b:cb:70:c3:78:78:72:
bb:40:68:db:77:e8:70:35:cb:d0:d9:01:2b:a0:50:
c5:0d:6f:bf:fc:bc:9f:2f:ff:31:e5:f5:58:36:db:
39:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:47:4F:61:3D:1D:5A:CD:0A:EE:80:B6:2D:F4:90:9E:ED:AB:6A:8A
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:13:14:71:9c:10:c4:3e:27:2b:fe:2a:80:83:52:29:64:
27:f2:e8:aa:6c:0d:85:f3:70:fe:ab:71:5a:bf:bf:e6:a4:fb:
c6:26:72:d0:7f:44:d0:61:b6:84:f3:8f:10:08:99:97:3d:4c:
07:17:cf:e4:94:d4:1b:18:9b:a0:8a:81:3b:f7:e6:f0:c7:7d:
ca:2c:33:0a:e4:50:bf:93:36:7c:b3:d2:29:e8:c8:a2:42:b4:
91:33:cb:a8:fd:67:10:3a:60:79:5e:55:92:5f:44:2e:d2:33:
2a:fc:2b:a0:f2:51:8c:9b:40:de:22:0f:2c:6d:df:7d:b1:95:
c7:c0:1c:bf:6b:d6:b3:75:8f:c6:f0:25:15:7b:4c:dd:82:00:
56:13:d4:0c:86:7e:67:f1:40:b4:2b:8d:81:3c:5f:93:15:d6:
76:f5:59:08:40:48:aa:fe:8b:a9:63:ef:22:c4:04:93:aa:a3:
49:6b:5a:a6:85:09:08:90:88:7e:8d:38:e5:c6:98:aa:f2:ce:
53:a3:71:70:1e:14:e8:0c:4c:c4:12:6d:60:e9:4a:ae:17:94:
51:61:7e:60:52:76:64:85:e5:fd:50:b3:f3:b6:22:b3:6b:ae:
33:97:17:1c:fe:ab:6e:dc:53:bb:3b:5e:88:cb:2e:d3:2f:04:
41:c0:2c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:19:42 2025 by rpki-client