Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
File: RN71p33MmqyZw04tcZuLoNBOA9E.mft (raw, json)
Hash identifier: VKyaDQYDZO3u/844T3vaTYOB5jaw6YlY7GzzC5Q1xVo=
Subject key identifier: 53:1D:C7:EB:93:5B:3D:D8:33:92:5A:8B:87:7B:7D:B0:53:A5:3D:BF
Authority key identifier: 44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
Certificate issuer: /CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Certificate serial: 0198D54E43CADBF41C5537838505D98C5518
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: RN71p33MmqyZw04tcZuLoNBOA9E.crl (hash: z7J60+bynIPpUlM1XwWfuse7vGdfCvGGVeRpAJfgjbQ=)
2: ktIncahrfLa4AKcR1V4yol-a_BI.roa (hash: Mx4NBM7kiKGaNo0WSweTZJBXr6mw6+aPoRI2jYSEHVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:43:ca:db:f4:1c:55:37:83:85:05:d9:8c:55:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44def5a77dcc9aac99c34e2d719b8ba0d04e03d1
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=531dc7eb935b3dd833925a8b877b7db053a53dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0a:23:a2:33:61:d3:f7:82:22:3e:2d:26:5e:
ff:74:21:86:36:af:8a:2a:16:c5:e4:a7:34:42:bb:
12:dc:e4:28:4c:dd:c8:dc:a1:1c:30:0f:09:ba:82:
eb:06:5c:79:c9:4d:ac:0a:5a:34:92:d2:7b:73:1f:
a7:17:b7:d5:c4:b2:73:62:0f:a3:a6:10:cc:5d:73:
1f:4a:45:52:80:41:71:08:06:95:1a:94:48:19:32:
b5:cf:46:28:78:6d:27:26:4c:d4:2f:49:8c:42:87:
e8:16:ae:b1:03:9c:4e:1c:17:ac:51:c5:3d:dd:be:
03:04:d3:11:4c:27:c1:87:cf:38:e4:90:9b:2e:be:
59:91:f0:69:69:dd:9a:18:e7:4e:27:05:3a:c1:11:
22:7c:74:28:1e:51:f6:df:d1:55:4a:33:31:46:be:
91:4d:7a:05:0e:1e:c3:2a:65:3f:b7:50:43:bb:97:
63:0b:73:96:a6:01:7e:c4:46:6c:63:d1:05:96:78:
ca:c7:a6:f3:16:50:7b:23:b3:f4:c5:46:62:14:32:
33:26:87:09:80:e4:38:d8:a7:09:db:fd:ea:21:4c:
ef:d4:a0:ab:bc:dc:42:61:64:96:6e:f0:99:0e:7c:
bc:77:c4:b9:e5:72:4b:81:5d:ad:e1:17:a3:63:e2:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1D:C7:EB:93:5B:3D:D8:33:92:5A:8B:87:7B:7D:B0:53:A5:3D:BF
X509v3 Authority Key Identifier:
keyid:44:DE:F5:A7:7D:CC:9A:AC:99:C3:4E:2D:71:9B:8B:A0:D0:4E:03:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RN71p33MmqyZw04tcZuLoNBOA9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/1a031b-a71f-4bee-91e2-d4bd53c94b66/1/RN71p33MmqyZw04tcZuLoNBOA9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1e:79:4e:e3:99:14:32:fa:f1:3b:ba:1b:b8:5d:6b:03:04:
20:11:d4:74:0a:56:a8:cb:55:0e:c6:4d:d4:e6:1a:86:69:87:
24:28:60:91:8c:12:5d:28:40:8d:18:63:ac:e7:23:38:13:ab:
a3:da:18:23:e2:74:f5:a7:aa:a8:1c:1d:2b:4a:30:b2:a8:93:
ad:f8:ce:c7:c4:c5:23:c4:e2:e9:8a:ce:5b:f6:2b:23:4a:cd:
90:81:fb:96:b2:bd:3d:db:1a:4a:f6:64:74:e6:d4:f0:ac:33:
f4:a6:2c:b0:72:8a:27:a9:9b:01:ad:9c:bb:a0:fa:50:ec:f3:
58:6c:9b:63:7d:fb:8e:ff:67:48:da:5e:ef:af:14:33:9f:5a:
92:d8:c5:df:7d:ea:ac:7f:19:00:ca:b4:df:83:8a:db:84:35:
d0:fb:68:9c:e1:5c:f0:a2:f3:c0:95:a7:03:9b:06:66:c8:32:
c3:5a:d1:1b:3a:8a:6e:ee:52:41:34:0c:43:fe:f5:63:e8:93:
38:fc:c6:cf:2f:53:f0:5b:7a:a5:30:5d:9b:72:40:4b:47:af:
48:c3:79:2f:b4:90:36:85:6a:0e:aa:39:7d:13:a7:67:4a:30:
ac:85:1f:3c:81:7d:b3:f2:0a:9a:fa:75:c5:04:e5:71:df:d4:
ea:f2:a4:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:23:27 2025 by rpki-client