Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: ZUvqO9n5453ViwdR+fIUeWNt+xcmV6HX5sSd2cc1U60=
Subject key identifier: B7:59:AA:DF:43:19:15:BF:B6:F3:61:F0:69:E9:37:D5:64:17:82:33
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 0199180A3ADC0A566A5BC98776BE9FB3E912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 1666
Signing time: Fri 05 Sep 2025 04:02:27 +0000
Manifest this update: Fri 05 Sep 2025 04:02:27 +0000
Manifest next update: Sat 06 Sep 2025 04:02:27 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: jHEPopDdNkTVPcdVfwWiM+rapPecHGEEWlZjOJwT+u0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:3a:dc:0a:56:6a:5b:c9:87:76:be:9f:b3:e9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Sep 5 04:02:27 2025 GMT
Not After : Sep 6 04:02:27 2025 GMT
Subject: CN=b759aadf431915bfb6f361f069e937d564178233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:73:73:37:4c:82:a7:06:09:22:87:d1:2f:
7c:fa:32:14:cb:cc:07:c4:81:e9:73:11:68:79:90:
75:67:bb:62:c5:31:21:c3:0d:76:dc:0a:0c:0c:d9:
0b:e2:4e:8d:d2:30:13:42:00:76:8b:d5:dc:1d:e1:
17:d1:d7:83:84:cb:4e:86:3e:66:e8:20:bd:d7:cc:
3f:90:9c:f2:1b:20:c7:6a:73:a9:f7:02:c5:cb:76:
45:b9:d9:98:0d:e4:ff:bb:a9:a6:9b:8f:5c:77:5c:
46:36:5b:9c:48:31:fa:ae:60:be:48:98:cb:79:95:
0c:dd:58:d1:5a:8d:41:05:c6:78:7b:4c:6d:d4:54:
65:72:1c:7e:4b:c4:ae:dc:73:8b:86:69:c7:de:2a:
70:34:f6:20:6e:8b:40:cd:11:d6:cc:f3:44:06:c8:
23:66:80:14:43:07:c9:20:08:48:e1:79:50:fb:00:
cc:26:bc:f0:4c:a3:07:5d:8a:25:fd:83:6b:e4:2d:
fb:9d:7d:14:b4:7b:82:21:d6:3f:c0:0c:06:17:88:
3d:06:9e:e8:27:1d:bc:68:02:a5:d8:73:9e:6a:43:
bd:81:e8:fa:da:2a:cb:29:39:09:3d:38:7d:8a:14:
f5:0f:b2:6f:59:44:8d:67:bb:f1:cd:50:ae:ae:4e:
b1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:59:AA:DF:43:19:15:BF:B6:F3:61:F0:69:E9:37:D5:64:17:82:33
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:86:33:5d:90:05:ac:15:c1:36:c4:ce:cd:be:ad:bb:33:a1:
55:4d:35:9d:8e:b7:78:0d:87:bc:18:63:0f:aa:ef:01:94:c1:
df:c7:04:a7:06:e6:a2:d8:16:66:a6:83:f6:33:ff:3b:3b:08:
df:cf:e4:a6:f6:9a:5d:52:bc:68:74:48:bc:b0:54:ae:47:d7:
94:6d:88:20:14:8f:20:76:84:96:f7:d9:8f:b9:fc:b2:64:32:
44:2a:d1:48:4c:14:67:c3:30:9f:be:50:a9:ef:bc:61:c4:95:
e9:77:a3:f0:9a:f9:b3:cf:e1:b5:d7:c0:69:f3:89:07:f2:0f:
9c:fe:aa:5a:95:dc:03:80:ab:a3:c1:25:62:ac:7f:06:33:97:
21:c3:7e:7a:66:a2:b8:8c:0c:bd:c9:5d:ef:74:6e:b5:e3:98:
b2:a2:1b:40:36:d2:3d:f8:60:a6:8f:03:1a:c0:cb:40:2f:d4:
43:1b:1b:a7:c9:f7:62:1d:63:1c:b5:8a:3e:11:e0:37:2f:cd:
5f:a3:95:dd:0e:cd:4f:ed:00:54:4d:1a:c3:7d:66:61:09:0e:
d2:95:66:84:3b:4e:8a:76:52:f2:7a:b5:7b:d9:ed:04:95:25:
dd:59:86:3d:7f:30:35:1b:25:db:49:b0:f3:26:54:d9:55:f1:
be:86:82:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:06:19 2025 by rpki-client