Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: yzEIXkeW9EMwo1pSMsRGnx1SWB2wLBfcarbfJCQ8CKQ=
Subject key identifier: 58:8A:2C:AB:DD:85:02:1C:8E:1D:E9:13:6E:C7:C6:58:21:5A:A9:99
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 019749686F966D6B5AE6C384277D0CFE6A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 08:01:10 +0000
Manifest this update: Sat 07 Jun 2025 08:01:10 +0000
Manifest next update: Sun 08 Jun 2025 08:01:10 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: KXyrQfTLGUCAuz4FTq+Zh+8+bOq23SfcFPr6JgyHnj4=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:6f:96:6d:6b:5a:e6:c3:84:27:7d:0c:fe:6a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Jun 7 08:01:10 2025 GMT
Not After : Jun 8 08:01:10 2025 GMT
Subject: CN=588a2cabdd85021c8e1de9136ec7c658215aa999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:56:ce:6b:28:86:ac:ab:b4:64:e8:06:95:48:
6c:39:88:f8:52:ea:2c:94:12:f0:53:b2:15:2d:d9:
7b:4d:48:e5:6d:fd:14:bd:6c:12:4a:e3:7f:e6:09:
4b:c3:9f:66:dc:ad:f5:87:b6:23:a4:8a:87:66:0d:
a9:b6:c5:5e:34:1c:a6:e7:e5:1c:0b:da:41:42:3a:
6b:25:68:1b:bc:c0:16:b4:03:be:7d:02:ca:29:b3:
89:f5:89:b7:b3:01:32:92:5f:44:42:7c:68:b8:ca:
99:fb:54:c4:42:fa:71:28:c4:b2:1c:f4:81:dc:3c:
df:1e:54:93:4c:6d:59:53:7e:fd:64:e3:67:df:19:
12:aa:a6:cc:f9:6d:2d:64:8e:f2:61:d3:9d:f8:92:
da:88:28:17:76:c2:2b:58:9e:31:3d:2e:5e:72:ad:
7d:9c:75:1f:02:01:c4:28:47:15:14:b0:bf:3b:4d:
f5:da:14:ee:13:e5:30:c6:0d:4c:50:06:48:f4:ab:
2d:ea:94:44:af:e5:65:4e:43:f9:ca:39:ff:d8:4f:
8e:b2:e0:fe:37:99:bb:ef:8d:d8:94:ec:e2:d5:b1:
c7:13:97:8c:09:59:e9:77:ea:68:7a:5e:45:9f:44:
76:e4:55:56:49:d3:44:4e:be:aa:16:dc:e0:42:26:
34:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8A:2C:AB:DD:85:02:1C:8E:1D:E9:13:6E:C7:C6:58:21:5A:A9:99
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:1d:8f:cf:28:49:7b:a4:1c:e9:81:0f:40:05:a1:8a:f8:f0:
69:18:a2:57:47:17:5d:7f:4f:b8:20:8b:7e:cc:48:15:c0:fe:
66:21:83:9b:78:8d:1b:88:24:5e:84:0c:f5:49:57:bd:da:1d:
9c:c4:d0:81:3b:76:2b:5c:d1:55:98:ae:a3:63:d8:1d:82:9a:
05:5b:5c:58:d2:d5:ba:4c:25:12:af:71:e1:a4:d7:e1:23:3f:
98:1a:15:e3:9f:d3:c1:71:49:f5:e4:53:1b:df:72:b5:b3:b4:
1a:47:5a:cd:95:5e:c2:18:3b:d9:13:2c:50:34:f9:14:93:66:
e6:5d:17:d3:b7:2b:b8:fe:de:18:fa:ee:5c:dd:a5:d6:41:0c:
79:2f:0a:e2:98:3e:b5:76:33:e2:33:2a:c0:09:c8:d7:6f:2e:
4b:46:92:ee:3b:f9:8d:61:6a:bd:a9:b8:89:34:1b:91:24:bc:
e3:86:a7:4a:fc:f7:60:b1:9e:14:a6:96:15:fa:b7:d8:0d:2a:
84:22:80:ef:fb:0b:39:d4:5a:1e:7c:1d:e0:33:3e:5f:8e:01:
4f:1b:c8:bf:89:2c:3f:eb:23:5d:59:4a:88:86:b5:14:c9:22:
e2:ea:af:96:be:0f:a0:65:9f:8e:34:1e:5f:a4:62:75:82:cf:
21:67:5c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:07 2025 by rpki-client