Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: Hx8X58VtooTeO6DWePtnq96qcjU0/vohgQM6yoiBCmM=
Subject key identifier: B0:6B:46:BC:3C:98:87:52:B2:12:9F:C3:E4:1C:5A:35:68:7C:79:97
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 0197B933AE4FE6FFDB7FE6A9C342CE115255
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 01:01:01 +0000
Manifest this update: Sun 29 Jun 2025 01:01:01 +0000
Manifest next update: Mon 30 Jun 2025 01:01:01 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: IJjPg7AnMC4sNyfuowmUM4yv0ya3zxf+Wo8cNYZaSIs=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:ae:4f:e6:ff:db:7f:e6:a9:c3:42:ce:11:52:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Jun 29 01:01:01 2025 GMT
Not After : Jun 30 01:01:01 2025 GMT
Subject: CN=b06b46bc3c988752b2129fc3e41c5a35687c7997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:90:a5:c1:88:be:55:e6:00:3a:e8:a0:36:89:
fd:36:81:a3:52:66:38:b9:9d:24:fc:c5:36:38:e7:
71:58:fd:ff:fe:e7:b3:c9:37:97:1a:3d:a8:fd:a8:
9d:aa:ac:a2:63:cc:28:3c:de:97:00:54:f3:3c:59:
9c:5e:6c:bd:8d:ed:37:5f:72:08:d6:be:45:fe:bf:
da:ad:51:75:cf:bf:5b:3a:08:d5:ca:1f:7f:9d:83:
9b:58:7a:b2:44:1a:fb:d8:69:94:cd:f3:75:ea:ad:
05:65:be:49:df:38:f0:bd:2c:08:7a:a4:7c:84:b9:
d1:9f:d5:14:5c:b5:7b:42:93:dd:71:29:8d:3b:03:
e2:0b:f1:c4:84:34:c4:9b:71:18:f0:12:0a:22:83:
82:ce:95:b1:64:e5:7b:87:e4:f8:b2:8d:19:96:e4:
39:16:54:ae:03:6e:6d:d2:82:2e:77:5b:5a:c1:c6:
c4:d5:e7:04:29:af:ea:30:2f:94:9f:1f:e4:5d:53:
e9:6c:ce:55:19:77:3d:13:60:6d:d1:46:71:66:6c:
d1:e8:9e:db:07:72:7a:05:87:e4:07:ca:07:2a:5a:
5a:ce:ff:e8:32:6d:f3:96:67:18:9e:75:e6:26:d0:
4c:fc:fd:4a:b9:89:9e:31:b3:24:e8:b3:bf:ff:b2:
54:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6B:46:BC:3C:98:87:52:B2:12:9F:C3:E4:1C:5A:35:68:7C:79:97
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:16:ea:9a:c8:db:d2:84:70:24:41:6b:e3:02:ab:bc:9e:20:
9a:b3:d5:5c:2d:ff:15:c9:95:ed:84:52:79:0d:d1:ed:13:ce:
ca:d1:8b:85:78:04:35:6c:4f:78:d1:66:78:dd:16:b6:ee:b2:
70:41:53:40:1a:4e:a1:3f:73:94:07:0c:57:84:31:5d:af:cc:
91:f9:fa:15:3d:f2:48:19:d6:1b:9c:2e:36:c4:12:79:64:f9:
1d:a3:6f:6a:d4:a7:b3:2a:a6:20:69:70:93:31:e5:3c:b1:9c:
2d:83:0d:47:7c:d8:01:46:d0:5e:03:58:2d:52:9d:db:c5:6f:
12:61:7a:56:7d:ab:fe:5c:74:12:48:24:47:b8:73:fa:33:2b:
03:22:11:38:50:5e:73:92:a9:98:51:df:62:19:bf:3d:4d:1b:
dc:3d:40:32:f9:a8:3d:02:85:55:0e:c7:b5:ae:44:8d:f2:64:
7a:e8:9b:9b:c1:5e:ad:9b:d0:18:c6:b5:bb:4c:8a:78:61:4f:
4b:9c:0d:40:fb:70:25:d8:44:50:34:f9:f9:b3:fe:7d:1a:50:
5a:66:09:b2:c0:6e:61:5e:84:3b:ba:5d:18:b4:b6:80:49:f7:
f8:d0:56:3c:55:f9:c5:28:0e:de:6f:2e:4e:63:de:88:2e:52:
50:84:fa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:04:56 2025 by rpki-client