Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: aaFOTwHpr+tOKbCxEfGao74Ve92I0z4PRxprJHgHBhY=
Subject key identifier: 28:AB:AA:31:6F:E3:E4:39:D5:F6:2B:46:14:94:51:0F:3D:4A:C5:6F
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 01969F3F713AFED535812283165FE0FED149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 1524
Signing time: Mon 05 May 2025 07:00:57 +0000
Manifest this update: Mon 05 May 2025 07:00:57 +0000
Manifest next update: Tue 06 May 2025 07:00:57 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: egT7X0aXbVzKzXcqCasddDWmEyOJ425Ec7LnogfBntA=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 01:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:9f:3f:71:3a:fe:d5:35:81:22:83:16:5f:e0:fe:d1:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: May 5 07:00:57 2025 GMT
Not After : May 6 07:00:57 2025 GMT
Subject: CN=28abaa316fe3e439d5f62b461494510f3d4ac56f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fe:62:6f:76:1b:37:ff:93:c3:c5:3d:36:8d:
83:79:05:ed:8d:78:4b:d5:aa:46:4e:61:c9:00:bf:
45:bd:64:fe:a7:08:a7:9e:3b:a2:83:a9:0a:bc:9f:
25:6b:f3:1a:3c:0d:c6:84:84:4c:45:48:93:f6:83:
c7:d0:63:85:1c:89:21:a0:1c:50:13:e5:35:9b:79:
6d:eb:8a:cd:bf:2f:4a:56:e1:c8:b9:58:52:f7:a6:
2d:8e:44:7d:d1:34:29:70:f6:0d:50:a2:3f:73:d3:
b2:1e:a9:8b:93:b7:8e:a1:70:05:26:ca:a9:13:b5:
2b:07:88:4d:c5:bd:c7:05:38:a6:2b:30:36:c3:87:
de:2a:e3:a7:22:02:0f:18:ad:71:bf:b5:45:e2:59:
39:7b:50:06:af:fd:9f:54:32:60:d1:a0:6b:b2:01:
d6:f3:a1:06:06:d3:35:12:ad:3d:80:49:33:3f:96:
2d:2b:0f:5c:2c:17:eb:f8:60:6b:85:6c:07:02:bc:
4a:d4:d1:e6:6c:b9:9f:eb:8a:68:87:23:09:16:a6:
72:a0:3e:a2:24:e5:09:4e:24:c0:a7:70:5c:8f:27:
41:36:28:63:99:d3:d6:31:55:7a:8b:5b:0d:bc:dc:
d1:67:fa:17:59:53:7e:ef:8a:4b:e8:9d:b9:77:a3:
a2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AB:AA:31:6F:E3:E4:39:D5:F6:2B:46:14:94:51:0F:3D:4A:C5:6F
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:a3:5f:17:b4:2e:15:bf:72:05:6b:59:5d:cd:f3:37:c5:41:
ee:c2:2e:7a:48:36:4c:32:af:dc:a5:5b:c4:f0:1d:f8:ec:09:
0e:a1:d0:38:0b:c1:31:db:a2:83:31:cf:dc:1b:e2:88:68:2b:
fe:1b:f5:fc:a8:9d:31:8b:62:65:44:ff:03:6e:28:46:30:59:
80:93:0f:f5:ee:4a:12:8f:c6:19:c3:8b:e0:84:f5:97:8b:af:
37:2e:1f:97:e0:94:d4:94:9d:9b:33:0b:60:39:0b:b8:3c:f7:
09:db:cf:63:b4:b5:3c:d3:10:2b:da:7a:99:15:d4:c9:08:d1:
db:d0:9c:1f:b7:1b:5d:8b:92:f5:52:0b:34:ae:14:8e:b7:60:
56:6a:b5:b1:a3:aa:19:53:36:39:21:85:11:e5:1f:92:45:bb:
57:9f:5d:14:6a:46:47:06:97:e3:3f:1e:9d:4d:5f:e6:b1:0d:
bd:7b:42:71:eb:50:5c:8c:07:ea:2a:56:36:1c:da:ed:2a:ea:
16:60:3b:d0:fb:a4:25:c1:70:01:85:c5:45:4b:9f:87:76:5f:
44:9e:a2:83:1b:b6:6d:f5:39:33:b0:b6:4c:f0:72:c2:59:6c:
c3:00:30:da:69:37:32:c4:14:de:f0:01:cc:9f:35:74:cc:4c:
b8:2a:f2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 10:17:22 2025 by rpki-client