Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: eD1ooJW0rUTjzBvxA+88q6NQEjRna/5G3Ul+Vv/4qnU=
Subject key identifier: 17:AE:A5:44:F8:2C:D7:C0:15:65:CF:87:B7:C6:BB:AB:E9:EB:E7:C7
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 0198D5BC09733EA36771DE2C451A7E87E759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 1114
Signing time: Sat 23 Aug 2025 07:02:06 +0000
Manifest this update: Sat 23 Aug 2025 07:02:06 +0000
Manifest next update: Sun 24 Aug 2025 07:02:06 +0000
Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: 3i3Mqav7F4YlIz+X0AVkVGcpiduRj2pM4i9OvVycrYw=)
2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:09:73:3e:a3:67:71:de:2c:45:1a:7e:87:e7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Aug 23 07:02:06 2025 GMT
Not After : Aug 24 07:02:06 2025 GMT
Subject: CN=17aea544f82cd7c01565cf87b7c6bbabe9ebe7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2b:e3:b6:7f:6d:70:de:9d:73:09:ba:4e:f6:
b5:9b:07:f5:39:dd:97:41:ae:f7:61:16:49:a5:0b:
f1:a9:f8:3e:50:11:7b:09:2b:c6:5b:aa:96:b5:e3:
bc:08:b1:ac:b7:ce:f5:af:c2:0a:e6:76:72:6b:28:
9c:09:16:d3:78:b2:0b:99:0b:3e:1e:fb:ce:d7:10:
49:0a:b6:c1:9a:24:32:49:cf:cf:84:51:86:c3:3b:
d8:9f:83:21:3b:5c:4e:0e:41:12:e4:59:c8:5c:6b:
4f:4f:2e:83:6c:8a:b8:93:b2:42:96:62:d5:19:a4:
98:fe:83:e3:09:81:bc:2c:12:9f:c1:1a:56:1c:b5:
3f:25:87:1d:00:1f:71:c4:e2:59:ae:fb:a7:7f:58:
25:f0:fe:90:ac:7f:89:9c:98:b0:9c:3b:02:99:67:
a3:dd:eb:ff:71:a0:06:8f:d5:a2:4a:2a:60:8f:f7:
8c:cd:57:23:bb:bb:92:fa:6a:9f:b3:2f:aa:6d:0c:
8c:01:e7:b7:71:73:3e:22:8d:b6:dc:b5:12:23:3f:
54:43:72:cc:7c:80:a4:ea:32:a7:21:f5:b5:63:a8:
4c:d1:f9:9f:83:58:43:98:f2:86:dd:ab:c3:b0:6f:
85:21:d6:4c:d4:23:b5:a7:75:86:d5:45:df:28:e2:
bb:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AE:A5:44:F8:2C:D7:C0:15:65:CF:87:B7:C6:BB:AB:E9:EB:E7:C7
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:27:a2:1a:df:34:dc:ea:38:3c:64:ae:31:16:c8:17:5f:1d:
96:cf:57:4b:2a:77:22:5a:1d:78:42:fe:ab:dd:c6:b9:5e:3e:
60:5c:87:52:01:8a:0e:eb:e0:84:d4:af:59:29:fa:eb:1e:a1:
d8:a4:99:2c:42:9b:4d:ae:04:9f:5b:95:bd:87:8e:e2:b1:b4:
38:4d:76:b1:41:08:cb:f1:19:d0:09:36:ff:c1:bf:0a:b3:08:
8e:9d:ec:2a:4f:f6:c3:85:6f:0d:75:90:55:b0:90:5a:73:e0:
69:e8:17:60:70:27:35:ed:d8:bf:d7:ab:22:69:b6:3d:bd:ce:
e2:67:0d:d9:90:93:46:9a:d8:09:fe:f6:2e:da:c5:9d:25:28:
5a:7e:76:6b:e7:39:70:11:e5:84:69:8b:08:10:6f:a0:5d:bb:
93:b4:11:dd:3e:35:11:06:f2:45:72:4c:b3:5d:f8:e0:58:51:
37:74:f2:8f:e7:01:1a:b3:1d:13:b2:76:13:35:af:22:4b:c7:
0a:80:77:ae:2c:fa:0a:93:01:52:78:36:14:e7:d2:b1:39:7f:
8f:09:d5:04:bc:2a:1e:bb:a7:91:83:ef:0b:4e:30:21:33:e4:
68:c9:7f:e8:4b:71:50:72:1a:b4:88:b8:62:d4:8a:10:8b:51:
68:7b:d8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:50 2025 by rpki-client