Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: sLroqVHfK9cZONWq8KwRd1EpLsihTf6bZIUooRShhC4=
Subject key identifier: 6C:06:A2:3E:39:92:A3:83:29:D7:AA:D5:B1:33:42:78:BE:B8:19:37
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 0196B71049648AF8A137563E7B37BD72FB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 0FFB
Signing time: Fri 09 May 2025 22:00:19 +0000
Manifest this update: Fri 09 May 2025 22:00:19 +0000
Manifest next update: Sat 10 May 2025 22:00:19 +0000
Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: wPJyNc9eSYDKxh1c3mk7esjxt/uWn8feeFi5H/6/v74=)
2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 22:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b7:10:49:64:8a:f8:a1:37:56:3e:7b:37:bd:72:fb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: May 9 22:00:19 2025 GMT
Not After : May 10 22:00:19 2025 GMT
Subject: CN=6c06a23e3992a38329d7aad5b1334278beb81937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d0:58:1b:03:83:ee:54:ea:37:7d:85:3a:1a:
25:5e:96:2a:6b:eb:68:56:a8:a4:39:64:87:3e:05:
99:91:f9:a4:fb:3d:b1:16:e3:e1:57:80:67:1d:ba:
27:71:61:e1:aa:22:b7:86:27:cd:1e:d5:c8:d5:4b:
76:3c:f7:31:f5:5c:53:b3:36:25:23:fe:91:12:49:
6d:b9:e0:29:e6:b9:0c:5d:84:3b:6c:fc:e3:0b:e5:
d9:a2:59:f4:91:54:fb:45:6c:fc:04:58:db:d4:fa:
f7:18:ef:c8:fc:a6:f1:5b:d3:52:61:d6:14:62:64:
13:c6:60:1c:bf:3e:ff:1b:82:89:f3:1c:65:ce:c8:
ae:0d:9c:c5:26:93:09:0e:1a:c1:38:98:ee:b0:77:
6c:d7:83:c0:3f:53:19:68:a8:97:3d:ac:58:ee:1b:
d7:10:f6:32:a1:24:6f:d0:f6:7c:cd:2d:34:3d:68:
18:7f:03:03:78:52:84:3f:05:2e:32:51:6c:8e:aa:
fd:5f:75:3a:cf:9d:dd:34:3d:b9:6d:ea:4f:90:6c:
ad:90:b9:77:ce:c7:c9:5f:a7:5a:35:4c:c3:85:51:
01:84:b3:0b:72:2e:f5:bc:79:c3:08:a3:70:f3:0d:
e7:11:25:36:39:33:d4:9e:08:ed:09:b4:ac:80:f4:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:06:A2:3E:39:92:A3:83:29:D7:AA:D5:B1:33:42:78:BE:B8:19:37
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b6:16:a7:d8:1b:cf:63:3d:42:1b:44:6b:33:6f:6f:fa:56:
34:8e:65:f4:e9:22:15:26:80:62:89:85:a9:61:3c:f9:07:74:
d0:c9:8c:6a:7b:54:c3:f6:86:d8:69:fe:5d:72:8a:66:c7:6e:
d0:cc:56:ea:cb:c3:09:40:2c:aa:87:08:0c:55:34:0f:c8:7f:
98:16:e8:ca:e8:a3:cb:9e:21:99:8d:74:28:4e:f1:f0:23:4c:
ff:50:33:97:fa:ea:9a:23:3f:ee:cf:fe:f5:85:0c:0f:1e:49:
ec:c7:78:c7:51:8f:aa:26:38:4e:c6:90:30:c0:e9:21:cf:d1:
d4:a2:b9:b2:51:c5:2e:a4:ef:30:de:fe:49:f2:fe:de:b8:b7:
03:ff:b9:16:ef:33:5b:8a:27:45:5b:68:e4:b9:50:7e:8f:a1:
8a:a2:9b:69:95:a9:52:c7:e6:26:84:10:41:6d:bf:3e:db:66:
15:21:77:1e:f7:5d:de:fb:9f:94:a1:8f:49:4e:94:61:84:db:
98:16:ce:05:cf:7b:31:57:65:f6:7a:6f:73:16:f5:95:57:99:
03:38:f8:08:0f:70:25:ff:4b:80:05:24:b6:c0:77:ad:af:6d:
e0:82:b0:04:00:57:55:42:ea:67:2e:aa:11:83:eb:af:19:5d:
99:08:86:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 08:23:00 2025 by rpki-client