Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: dKUdidK6nnfKEDT8eYmRPsKTHuhlMiDCVK0HaPsch/A=
Subject key identifier: 8E:32:D8:58:65:2D:1D:1E:04:F1:B4:6E:F6:37:E3:16:A4:A7:F8:50
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 0197B77C735366798E34B33995BB7A501A9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: mCFvsiPJM/Dp1USRDqo34yCgX/IP4qI/ctx+iyjfp6g=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:73:53:66:79:8e:34:b3:39:95:bb:7a:50:1a:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=8e32d858652d1d1e04f1b46ef637e316a4a7f850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9c:60:da:8d:bc:da:0e:59:11:59:3f:0a:36:
ab:6d:51:22:f4:84:14:a1:07:12:1a:71:09:0d:25:
cf:bc:1b:c9:86:95:6d:20:3d:cd:50:6f:0e:ab:4c:
10:4e:73:c3:c0:09:8a:a8:98:f4:eb:4f:2f:66:3a:
c0:67:e3:4c:58:d0:18:cd:bd:d5:53:03:75:5e:95:
15:a4:d8:1d:e6:55:bb:21:28:5f:9c:ff:b1:99:a7:
b9:d3:48:a9:91:cb:75:f6:50:50:fd:7e:23:e3:fc:
e5:5a:56:e5:67:e8:80:42:da:31:bd:59:41:6e:6f:
ad:ad:42:47:60:39:4a:b1:e9:22:4e:e0:62:29:ce:
7d:4d:0e:79:fc:8d:75:c7:81:c4:fa:1b:c4:cc:cd:
23:d6:78:05:4e:ac:50:bb:b6:87:5c:61:75:22:a6:
c2:a9:92:52:ad:79:17:c2:d7:4a:70:2d:2b:a6:2d:
1f:15:61:be:4c:f7:fd:28:e2:61:66:81:6c:c5:7d:
27:01:d6:1d:83:1a:75:7e:fe:28:e0:ce:6c:c4:89:
15:11:5a:6f:78:e5:b8:d7:1a:a7:46:a8:1e:07:88:
ee:ef:ae:25:5b:df:27:19:f8:d4:b6:3a:b5:07:a7:
19:bb:e3:a1:45:f5:bd:fa:83:65:99:03:9b:1d:a2:
9f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:32:D8:58:65:2D:1D:1E:04:F1:B4:6E:F6:37:E3:16:A4:A7:F8:50
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:94:e4:ea:5a:c4:0c:cc:00:4f:12:be:f2:77:b0:35:4b:85:
a6:1a:a8:ee:c1:c9:73:b5:d1:89:ee:4e:82:3b:6e:b1:84:0f:
7a:37:ac:29:49:30:59:05:99:72:4d:aa:fe:e2:cf:b3:07:db:
1e:89:bd:ba:36:6d:66:b9:3c:8b:59:a6:73:41:69:79:4c:10:
6a:8d:82:91:ad:45:f4:a0:f5:0b:cb:63:fd:15:07:37:00:9e:
53:41:41:a4:6b:f4:ca:e5:da:fa:43:79:9d:57:52:10:a0:fc:
74:9a:88:eb:47:2b:d8:13:db:5f:8b:3f:57:6d:17:73:3f:d0:
cf:d9:89:28:cc:45:20:11:37:2e:7e:d0:b7:c5:aa:e4:1e:08:
97:f4:d5:a2:d5:90:61:e9:b4:b0:d0:11:02:10:3a:f8:ce:76:
40:2a:81:7e:ac:65:e0:b0:c5:e5:3b:41:c0:0a:d7:5d:02:33:
04:a4:1e:f0:27:38:57:2d:9a:bb:f3:da:7a:7f:ab:f8:76:e2:
c4:bb:42:be:fd:68:28:40:55:81:a9:53:30:13:7f:1a:27:d3:
c5:01:16:c4:05:19:e6:74:69:15:c8:c1:87:9f:e3:3d:cc:e9:
3b:5b:3d:60:8d:95:5d:3e:6e:a7:f1:8d:46:b1:b4:2f:cd:99:
c7:2d:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:52:24 2025 by rpki-client