Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
File: 71g2hkZMUz1BUryi7fOgG0h-6pI.mft (raw, json)
Hash identifier: JqNIn2LelMz0sEoRRdimVseZeOUa72DhJLMP2k6WO68=
Subject key identifier: DE:43:98:A4:AA:BE:05:72:34:5A:B1:91:E5:D0:8D:77:94:83:2D:2A
Authority key identifier: EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
Certificate issuer: /CN=ef583686464c533d4152bca2edf3a01b487eea92
Certificate serial: 0198D998F53831ADBA5C8D04E4F663B3FD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
Manifest number: 164D
Signing time: Sun 24 Aug 2025 01:02:16 +0000
Manifest this update: Sun 24 Aug 2025 01:02:16 +0000
Manifest next update: Mon 25 Aug 2025 01:02:16 +0000
Files and hashes: 1: 71g2hkZMUz1BUryi7fOgG0h-6pI.crl (hash: 0Pbk9FrFWJZtQYt+9I9giYG5ssqdlase1xVA3OZ8RAQ=)
2: f55jTIdQsHwVwkpSlpByg0fWwy8.roa (hash: 25acZzU2K48rff6CSQnqCSvHpfoM5LhDm4D2D9V3Y28=)
3: pDNMWZBm4DSQ8IaTBRK4JfyOvPQ.roa (hash: zFp7HXAJh1CoEp8dhPFuXJ5GjYTeml3rleudA3KDsw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:98:f5:38:31:ad:ba:5c:8d:04:e4:f6:63:b3:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef583686464c533d4152bca2edf3a01b487eea92
Validity
Not Before: Aug 24 01:02:16 2025 GMT
Not After : Aug 25 01:02:16 2025 GMT
Subject: CN=de4398a4aabe0572345ab191e5d08d7794832d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3b:86:58:e7:57:c9:a2:f7:ef:5e:f9:80:c4:
51:d4:30:1c:6c:50:ff:35:e5:37:82:52:ce:f3:f1:
c5:11:44:7a:7e:f3:d0:4d:fe:63:20:3d:20:9c:b3:
e7:09:16:49:38:4a:5a:74:d0:b4:4a:40:44:0e:1a:
a5:5c:aa:16:7b:05:95:ae:a6:a3:99:4d:72:87:8f:
02:9e:2f:17:04:8c:5f:ff:4a:00:f1:02:d9:71:b9:
2a:02:75:81:95:a7:1b:84:aa:69:80:04:86:77:05:
a5:e0:4b:2d:f2:91:f4:69:3f:ce:b1:6a:17:1d:0a:
cd:61:c7:0f:61:b2:16:80:3f:97:38:f9:af:4a:f8:
3e:32:9d:a6:0b:92:0c:c9:87:df:d8:31:73:f2:6c:
d7:0a:5c:3b:75:c0:4e:31:ef:d1:64:9b:c2:a9:8e:
48:59:25:49:27:28:42:16:11:94:5b:dc:7e:9a:fa:
4b:1a:94:c6:32:9b:06:40:a7:28:5f:dd:cd:7d:c7:
b4:c3:a1:1f:b1:c9:fa:cc:d7:b2:a7:94:c5:c1:fe:
b3:31:d2:f8:11:da:21:f4:1d:a2:aa:38:b7:9c:69:
b5:a3:9e:60:22:05:c4:d6:80:28:f7:9e:c5:94:51:
97:0e:ab:fd:46:f7:38:32:4e:e1:1a:55:0f:b6:11:
68:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:43:98:A4:AA:BE:05:72:34:5A:B1:91:E5:D0:8D:77:94:83:2D:2A
X509v3 Authority Key Identifier:
keyid:EF:58:36:86:46:4C:53:3D:41:52:BC:A2:ED:F3:A0:1B:48:7E:EA:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71g2hkZMUz1BUryi7fOgG0h-6pI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/6a754e-58f6-4c10-9d5e-f43aa27003c5/1/71g2hkZMUz1BUryi7fOgG0h-6pI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:c1:2d:44:2d:e5:be:96:5f:ba:c5:b5:5f:fe:e1:00:5e:ae:
3e:35:74:8b:9b:6b:ea:65:04:53:30:8d:05:c8:aa:10:2a:ff:
c4:20:e9:40:ab:ea:01:74:61:67:e1:ea:2a:54:e8:d8:2f:b6:
ae:cf:6e:13:d8:c9:4b:eb:9b:91:74:63:b0:26:18:a8:e4:fb:
b9:94:19:89:4c:91:a6:b7:ac:95:af:c7:34:07:b4:8f:df:55:
a8:57:1e:62:95:0b:bf:01:4d:99:dc:37:bf:99:27:81:53:16:
c9:fc:ad:f9:f5:57:62:82:da:03:90:63:b5:a1:a2:67:0d:6f:
c7:a1:dc:14:18:bf:6e:57:88:51:e4:8d:42:f5:c1:00:1e:47:
66:46:d4:f5:55:3d:09:e6:5e:60:3a:c7:75:55:0c:85:6f:24:
6a:72:31:4f:0f:0a:07:67:59:11:dd:63:93:2e:ac:04:cb:6b:
80:72:cb:0f:00:2d:d4:1f:28:c5:90:82:29:11:ff:3b:7a:96:
5e:0d:d0:70:6b:9a:0f:1b:29:12:56:e2:cc:10:4b:05:a1:18:
53:e1:b3:87:7c:27:46:29:91:fd:f3:07:c4:73:33:29:2f:46:
98:0f:9f:b3:d2:1f:a8:9e:b5:52:2f:f3:cd:36:43:25:8c:67:
7c:a7:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 05:15:54 2025 by rpki-client