Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: EK0muJJKstAj3PaVYKRDkhfjhxev/uIR3dlLKP6Hjbw=
Subject key identifier: 42:5C:A2:35:CB:E0:79:3B:36:31:9C:03:A7:44:96:BC:50:65:78:BA
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 0199FC8F85FD73F3EC80080E5044CB5B826A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 13:01:28 +0000
Manifest this update: Sun 19 Oct 2025 13:01:28 +0000
Manifest next update: Mon 20 Oct 2025 13:01:28 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: sdV7CWYsM3FJl+bS0czzN4P9RPPUmV5FGk9VzqvOcns=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:85:fd:73:f3:ec:80:08:0e:50:44:cb:5b:82:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Oct 19 13:01:28 2025 GMT
Not After : Oct 20 13:01:28 2025 GMT
Subject: CN=425ca235cbe0793b36319c03a74496bc506578ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ff:d1:1e:e0:8a:5d:ba:2a:e7:bb:dd:7e:f3:
b7:b4:e8:dd:cc:4a:71:00:4c:8f:c2:01:c7:44:d6:
db:b7:f3:80:e4:49:59:ce:e6:50:34:3a:0a:16:7a:
b1:49:63:14:b7:78:4c:98:f5:cf:11:95:24:85:36:
f1:40:70:71:40:70:5c:5c:11:ea:17:62:29:be:f0:
07:2c:63:8a:f1:84:3f:47:c2:36:63:53:7f:b0:75:
d4:bb:89:fb:ea:a5:de:0d:d2:93:44:a2:4a:99:f0:
f1:8d:e2:74:f6:81:a6:3f:ce:86:c6:7f:6d:0c:6f:
7d:81:d7:de:78:74:5b:dc:f7:bb:bb:88:13:b0:bc:
c5:23:d6:5a:b0:d3:de:77:27:0b:f8:4d:a3:68:3a:
95:fc:71:59:8d:38:97:ac:a7:78:40:b7:3c:37:10:
86:97:40:77:73:8c:da:ff:dd:b0:3f:8a:f0:67:7f:
b4:8d:31:8d:6f:f0:44:bd:a2:85:3f:7c:de:46:9a:
98:84:d2:3b:12:e3:f5:55:f9:a8:40:1c:f7:3a:81:
a6:56:0d:f9:ef:d0:bf:04:fc:c8:ba:e5:35:d6:ad:
68:cb:57:42:79:8b:9c:5e:01:d3:c0:de:fe:be:1f:
24:64:d1:32:92:78:28:65:61:5a:1d:46:2a:4e:e8:
32:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:A2:35:CB:E0:79:3B:36:31:9C:03:A7:44:96:BC:50:65:78:BA
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:2e:85:9c:1c:d2:17:3b:51:7c:d8:39:35:cc:e7:c4:78:67:
5b:75:ef:8f:b0:7a:b7:37:b2:51:77:bb:64:7e:24:1e:14:14:
cd:a0:9a:49:0e:ea:0c:e0:df:88:91:8a:62:b3:35:93:9c:8e:
90:85:f7:a2:2f:cc:26:fe:67:b6:ee:e5:54:38:f5:14:41:8a:
94:c4:5f:1e:d3:18:9e:17:21:13:ca:a2:2c:0b:a5:1f:80:c9:
47:0c:cf:a2:0b:35:a3:ab:c1:77:d4:85:b8:69:e6:31:07:1e:
35:27:00:9d:3a:73:76:d1:9a:4e:02:71:35:61:e7:69:25:17:
11:e9:84:97:1b:d0:fa:3c:60:da:5a:b8:9e:eb:82:db:69:0c:
f6:8d:d9:4b:ac:ec:52:10:7f:e9:f7:c1:cc:e4:d0:d9:e5:15:
29:21:15:53:70:a6:cd:f5:48:a4:bd:42:6e:94:b1:21:d9:2c:
3c:fd:80:07:0c:e3:46:e5:82:a7:ab:e9:0b:ef:2d:05:21:a5:
00:3c:7b:40:af:fb:e4:52:60:00:e2:8b:2f:aa:5d:c8:58:08:
6d:3e:02:40:b3:1a:31:a2:9c:47:3c:55:e6:e3:9e:20:af:9c:
71:3c:8f:7f:5e:06:c2:31:ae:fe:02:5b:e7:a1:34:39:3b:1d:
45:7c:d5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:05:58 2025 by rpki-client