Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
File: 71LcaSC94AdFBjC7_AIWreTgP2I.mft (raw, json)
Hash identifier: Qi6PaZEHHsCxo7maM5TscyCugx9aVKW0fSa/Ip/LJrs=
Subject key identifier: 17:B9:0A:40:1E:22:9E:11:9F:43:D5:F3:48:FD:36:14:37:8E:F5:AE
Authority key identifier: EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
Certificate issuer: /CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Certificate serial: 0199FB4624AF05F4C3A4597D64BE2CD1113C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
Manifest number: 11AC
Signing time: Sun 19 Oct 2025 07:01:42 +0000
Manifest this update: Sun 19 Oct 2025 07:01:42 +0000
Manifest next update: Mon 20 Oct 2025 07:01:42 +0000
Files and hashes: 1: 71LcaSC94AdFBjC7_AIWreTgP2I.crl (hash: 3ubdGSQdwo7Q6JAeJGledN8/cJFzJdGYOSmJ6BdDAOU=)
2: V1vVkCD_hYAxWNWDgqEkxwXmBxs.roa (hash: beLxsDvZQpuYRB3PxpFoppyIArw7qA7fuMUy3puqPPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:46:24:af:05:f4:c3:a4:59:7d:64:be:2c:d1:11:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef52dc6920bde007450630bbfc0216ade4e03f62
Validity
Not Before: Oct 19 07:01:42 2025 GMT
Not After : Oct 20 07:01:42 2025 GMT
Subject: CN=17b90a401e229e119f43d5f348fd3614378ef5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f5:14:e6:eb:d8:12:f9:d6:dd:d6:1b:28:bc:
f3:7c:1e:59:89:be:ee:e6:f0:1f:a2:2f:c2:eb:16:
a3:15:2c:e4:3b:21:21:21:01:22:ef:ee:75:15:3a:
7b:9b:eb:70:01:dc:41:5a:0c:13:aa:e5:30:4e:78:
4d:d5:be:82:65:23:f1:c7:02:f6:9b:bf:af:fd:a8:
e9:dd:c7:74:e5:2d:62:0d:89:e3:d6:b1:6f:96:6e:
51:a1:ae:83:8d:b7:07:e5:ca:68:90:e4:c2:28:c5:
6c:4c:da:33:16:38:74:dc:3f:cb:1b:46:10:05:98:
6f:6f:78:6d:dc:fa:fd:31:81:1c:9d:c0:58:93:36:
43:e0:74:f3:fa:b5:98:42:37:de:fe:11:26:fc:78:
01:38:00:aa:aa:f0:86:f7:23:9e:41:df:e5:2c:b3:
ce:6a:cb:e4:54:83:f4:f0:f3:e7:8e:ea:ce:cc:e2:
b7:fa:6f:11:93:91:40:4d:59:0f:38:ec:d2:bc:8f:
24:33:15:d4:af:60:f1:a6:23:df:f3:89:6f:bc:af:
44:09:bf:0c:fd:28:25:a0:03:5d:af:93:cb:87:3e:
90:4a:c3:d8:62:bc:b3:a8:e5:88:84:b0:6e:dd:12:
68:b3:00:b8:da:8b:bc:64:e3:f2:f7:de:27:ce:4c:
81:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B9:0A:40:1E:22:9E:11:9F:43:D5:F3:48:FD:36:14:37:8E:F5:AE
X509v3 Authority Key Identifier:
keyid:EF:52:DC:69:20:BD:E0:07:45:06:30:BB:FC:02:16:AD:E4:E0:3F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71LcaSC94AdFBjC7_AIWreTgP2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/27847c-5113-4a4b-a788-764363b13cd2/1/71LcaSC94AdFBjC7_AIWreTgP2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:7c:b5:e1:29:19:c8:73:c8:13:70:48:49:56:04:5b:ed:92:
6d:0b:4b:dc:dd:8a:2b:3f:82:8f:d9:e1:47:71:d1:5c:dc:fc:
0d:67:1f:d7:4b:3f:ed:97:49:f1:b6:e1:c3:d7:e3:3b:d0:27:
7c:0d:04:35:e9:dc:c8:30:af:cc:7a:3e:fc:67:f5:74:fa:29:
f3:f2:01:4a:cd:2f:02:5b:2f:28:f8:1a:db:53:25:ca:5f:64:
f2:ff:3c:4a:cf:c7:ac:12:b2:e8:ef:01:07:6a:fb:99:9c:42:
d0:b4:90:b7:ab:c6:bd:ec:8e:4e:32:4c:51:94:4d:b5:15:31:
20:ff:3e:71:4f:42:0f:0e:75:7c:02:2f:cb:6e:e9:14:79:b1:
62:5b:26:fd:6b:01:f3:6e:33:62:b6:c5:2d:f3:eb:51:d6:c3:
b9:fd:f7:0b:fa:6f:41:4c:85:b2:bc:e5:cb:ed:c3:78:22:2b:
45:51:ab:92:68:fc:11:3b:fb:a2:e4:3c:7a:4b:6e:2b:9e:c4:
5f:3a:04:a1:0b:3e:12:00:f3:81:b1:53:54:83:bc:8f:70:88:
1d:73:a9:b3:90:d4:c8:77:2f:35:d0:c1:cf:17:39:0f:57:c9:
5e:a6:d4:cb:3e:a7:5a:0d:df:a9:8a:92:3a:19:06:40:53:4a:
e7:1e:a4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:26 2025 by rpki-client