Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
File: 71CC03-8gZmL_PlIpbvdpj7f3uA.mft (raw, json)
Hash identifier: SsLx9++Xjj/PHp+i35e4/QJPC8SXhXDuGeEZGV66C2s=
Subject key identifier: 3D:70:E9:28:83:AE:16:5B:44:05:83:27:12:D6:87:76:47:AC:C0:98
Authority key identifier: EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
Certificate issuer: /CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Certificate serial: 0198D705E96666C7ED1D5A3E06374A2F969A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 13:02:25 +0000
Manifest this update: Sat 23 Aug 2025 13:02:25 +0000
Manifest next update: Sun 24 Aug 2025 13:02:25 +0000
Files and hashes: 1: 71CC03-8gZmL_PlIpbvdpj7f3uA.crl (hash: EVYRvjTY2tMwk4gL4J5ZoAc/v9//bHAwaMamQuinDnY=)
2: Kbx3_7oGbgCwS5Hs4oY9uV32ucc.roa (hash: LAVz+eXpY1hxXAk84MXSOTjvvsZinRJwSkGnPzVHurQ=)
3: g7m9yx1NW8SRIFbI1YMp1R07s_U.roa (hash: j5HohraLr+uvJe+BKNjv5aVmggl6w9ivQvztm8iHfjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:e9:66:66:c7:ed:1d:5a:3e:06:37:4a:2f:96:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5082d37fbc81998bfcf948a5bbdda63edfdee0
Validity
Not Before: Aug 23 13:02:25 2025 GMT
Not After : Aug 24 13:02:25 2025 GMT
Subject: CN=3d70e92883ae165b4405832712d6877647acc098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:69:62:0e:2f:8e:0f:c7:be:0b:6d:31:cd:
99:cb:d0:05:ce:52:20:b3:75:71:10:e4:bf:d2:22:
96:5b:53:f2:80:af:4e:39:29:f0:8b:66:1d:a4:fc:
31:6f:bd:73:91:98:33:fe:f7:b5:35:c2:e4:40:96:
7e:22:d2:54:7c:5a:0a:53:e2:e8:b7:c2:49:8b:9d:
dc:ea:1b:3a:5f:04:0a:0e:b7:05:61:25:4e:a4:04:
49:3a:fa:a4:3a:3a:5c:9d:82:de:d8:e5:6d:02:87:
12:a0:c7:3b:ad:19:b6:b3:6e:9a:d1:80:cd:88:04:
9d:f7:ad:1c:13:a8:2d:a4:dc:30:26:06:a5:87:1f:
87:90:f0:f3:36:2e:f8:e3:fb:7c:ba:87:e9:9a:90:
da:74:a2:d9:e6:30:aa:88:f1:1e:05:86:68:44:67:
58:59:3a:55:19:cf:4b:95:06:31:d8:e6:07:b3:d7:
1f:5c:fe:8e:44:2a:4d:5f:35:25:fd:75:e9:e2:12:
90:a7:9f:81:2a:54:6c:52:6f:cb:f5:1c:0f:36:95:
3a:ce:09:1a:b1:01:c2:49:26:7c:c7:fc:01:c5:3c:
13:e7:89:42:0d:be:a4:3b:e6:64:7c:c0:94:5e:81:
b8:e8:6b:3c:b6:11:64:c7:57:f6:e4:08:ed:99:4b:
e5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:70:E9:28:83:AE:16:5B:44:05:83:27:12:D6:87:76:47:AC:C0:98
X509v3 Authority Key Identifier:
keyid:EF:50:82:D3:7F:BC:81:99:8B:FC:F9:48:A5:BB:DD:A6:3E:DF:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71CC03-8gZmL_PlIpbvdpj7f3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/0c3c4d-01d2-440a-a51f-9195d02ded55/1/71CC03-8gZmL_PlIpbvdpj7f3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:86:67:06:cb:80:7b:70:11:f1:09:3d:dc:b1:71:9c:63:
7e:86:4d:01:d4:ee:a8:43:01:bd:ed:8c:95:c2:b0:4f:2b:6a:
de:0a:dd:56:ee:06:cc:79:15:82:e7:ab:83:11:d4:6c:38:97:
64:25:34:b0:d0:83:0b:fa:1f:a3:90:50:db:27:0e:6f:ea:d9:
77:a5:09:b8:f1:9e:eb:fc:84:14:01:2f:91:d4:38:aa:d9:31:
a4:1c:45:07:58:e8:48:0c:68:8f:3e:26:2f:b6:83:ab:41:29:
a6:77:fa:b7:c2:20:4e:46:d4:60:05:38:d3:f1:4c:66:f6:18:
1a:ef:2d:73:61:bd:00:33:f2:c5:19:dc:e7:56:63:1a:bf:85:
75:22:29:f7:19:c4:16:12:ad:cd:d2:3e:18:45:2c:60:a0:fa:
09:52:9c:dd:4d:4d:18:0d:d6:6a:08:ca:f7:40:c9:6c:2b:1d:
e7:c0:ea:9b:dc:92:2b:c1:94:14:fe:d4:3a:70:17:de:6c:44:
f7:f6:ca:9f:cf:1d:64:35:ec:7e:dc:1d:37:26:14:35:88:6d:
f3:fb:3c:33:a4:17:46:ea:a3:62:ac:d4:30:ae:0c:6c:d0:6a:
e9:d3:ca:36:a5:65:cf:6b:6c:f8:1e:49:f1:a3:6b:23:63:de:
3c:cd:d4:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:57 2025 by rpki-client