Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: q+gG69YXQeYmGtWOgDYgxo/Cp1yeGG7QFmDjWXJoYPs=
Subject key identifier: 2C:B2:4F:51:FC:77:93:19:BC:E1:0F:26:CF:4F:3A:12:99:25:7F:98
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 01984776D546065B4839344184382E159A20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 16:00:26 +0000
Manifest this update: Sat 26 Jul 2025 16:00:26 +0000
Manifest next update: Sun 27 Jul 2025 16:00:26 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: CmPS/rJdHuClZl+M2OQ0X/0PtOvrTJsTlIL45rUuCYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:d5:46:06:5b:48:39:34:41:84:38:2e:15:9a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Jul 26 16:00:26 2025 GMT
Not After : Jul 27 16:00:26 2025 GMT
Subject: CN=2cb24f51fc779319bce10f26cf4f3a1299257f98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:b5:69:84:10:38:04:52:e5:ef:fb:e7:ce:
a5:cc:04:09:22:46:7f:f3:be:d0:eb:c0:8c:20:40:
8f:2f:b0:a6:cd:35:6a:f1:48:d9:15:6f:80:c1:e9:
a7:ad:cb:76:20:40:51:c3:87:fd:ee:da:85:2d:10:
48:60:1a:49:11:a6:cb:c9:b5:4a:59:ec:b4:b8:a4:
b6:61:b4:60:c4:13:13:f3:fc:6b:16:d0:28:2a:2a:
95:c5:af:c9:d2:aa:d0:43:c9:14:e9:56:8d:ad:84:
74:98:6b:bb:79:ec:c4:02:c5:6a:9e:3c:07:57:0d:
cb:23:68:63:09:36:80:df:8c:99:c5:e7:ba:68:32:
63:86:ad:93:78:1e:bf:57:dd:3d:c0:77:b2:b8:4b:
14:a1:89:14:5c:80:8d:2d:80:c9:ae:03:11:0e:c7:
7b:67:40:bd:60:2f:02:e4:0e:de:23:56:be:84:c5:
5a:71:5b:af:26:a7:5f:69:d4:9e:17:67:32:8c:9f:
5d:cd:0b:95:2c:02:48:ef:c5:26:5e:af:81:4b:6b:
bc:47:f6:d1:0e:36:ac:2b:01:b5:4a:58:d4:72:48:
af:e8:c6:80:3c:b9:a8:1d:da:66:3e:f0:53:9c:db:
29:e7:70:3b:70:50:08:b8:c9:a2:d0:11:b2:70:e6:
8b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B2:4F:51:FC:77:93:19:BC:E1:0F:26:CF:4F:3A:12:99:25:7F:98
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ba:da:c9:fb:ce:44:b7:79:be:f2:b5:da:5e:16:45:ca:58:
64:66:4f:49:dd:21:6c:a4:b4:8e:2b:61:e7:13:d0:2e:ea:24:
8b:21:db:03:16:79:af:9e:e6:89:9f:1f:ec:15:df:bf:16:57:
25:3e:3f:20:90:ba:9c:2b:fc:f1:d0:2e:b5:2b:c2:8f:88:ef:
61:f0:78:3b:0d:5a:33:b1:c3:c7:ea:ae:d8:d6:0d:b0:d1:a0:
d9:bc:5d:f1:35:69:cd:a4:47:95:6e:1b:9d:04:d2:74:65:82:
c8:97:b7:35:53:aa:22:96:80:1b:9d:cc:34:b7:75:2a:eb:c0:
71:ce:9b:71:f5:df:2d:99:00:d1:a1:a4:59:f7:c7:24:59:41:
b1:b6:55:2a:1b:b8:29:e0:a2:42:38:05:b1:0e:37:9e:e5:94:
61:e2:c6:28:e2:08:25:44:6a:0a:d1:ac:ee:e4:5c:73:12:f8:
f8:a3:27:22:96:04:eb:ad:2d:d2:63:05:45:38:4d:e5:de:a6:
e3:51:29:b9:15:8f:0d:aa:8c:b7:60:09:6b:30:64:e5:26:b1:
86:0c:89:1d:75:03:cd:42:48:3f:76:87:b0:e8:f0:cb:b6:9b:
58:aa:5f:ad:e6:5e:61:25:77:9d:f0:21:42:21:76:01:9d:a8:
23:22:2f:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:21:44 2025 by rpki-client