Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: g167KcilXN2RAHbi3GHjKc0g6D5OFey5llWOST8LJzk=
Subject key identifier: DC:84:3B:92:9E:FE:3D:2C:18:68:60:97:9E:F6:96:60:9F:D9:4E:19
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 019768BC020B413EB8D7BAA5CD50E8A4EB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 10:00:41 +0000
Manifest this update: Fri 13 Jun 2025 10:00:41 +0000
Manifest next update: Sat 14 Jun 2025 10:00:41 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: lAB5iLFuAQhShemFiGVpl5TV+VnmN8lp9bzKSjeGcD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:02:0b:41:3e:b8:d7:ba:a5:cd:50:e8:a4:eb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Jun 13 10:00:41 2025 GMT
Not After : Jun 14 10:00:41 2025 GMT
Subject: CN=dc843b929efe3d2c186860979ef696609fd94e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:0d:fb:5c:ad:09:93:af:b4:68:2f:a4:43:e2:
8d:0b:0a:cf:d1:58:8e:dd:03:83:0e:2b:9c:30:70:
e0:d9:c6:a2:0c:e6:41:85:cb:c7:92:c8:7d:bc:50:
74:45:f6:ed:4d:ad:93:e9:0a:6e:ef:43:50:1a:23:
aa:34:4e:b0:1f:e9:19:b5:64:ac:fe:0e:16:55:d6:
7c:bd:f1:a5:2a:a1:b5:f3:38:6a:1d:d8:7a:9b:b0:
dc:f0:14:89:dc:1d:cb:c8:48:fc:03:ad:79:07:2d:
11:b3:19:1c:90:6c:1e:1f:82:89:85:6e:b6:b1:14:
f1:d4:03:6f:f1:50:df:0e:c0:40:07:a5:8e:96:9e:
e0:dc:f4:a2:75:10:e0:2c:08:44:27:ec:b0:5d:fb:
cd:e2:ef:db:90:37:09:37:52:87:02:33:5c:3b:39:
f8:ad:f1:15:e4:33:1f:3c:36:35:e8:4d:82:bc:bb:
e1:0d:e1:e7:ef:92:df:a6:23:0f:34:69:a2:90:c4:
93:29:b6:a3:be:28:1d:26:7f:b2:e7:b3:a0:6e:32:
61:e4:c7:93:3c:12:1d:d3:5a:80:e3:d4:90:b9:3c:
96:4a:ba:9e:e6:30:76:da:99:e6:42:94:51:34:a7:
1d:c6:8e:f6:a8:7e:a2:74:63:7b:42:6a:2f:08:00:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:84:3B:92:9E:FE:3D:2C:18:68:60:97:9E:F6:96:60:9F:D9:4E:19
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9c:dc:9c:21:29:08:d9:2b:20:b7:19:23:87:0b:1e:32:94:
63:70:cd:f9:a9:e0:70:bd:e5:e5:0c:4f:71:94:02:7e:0a:54:
f9:8f:c7:b3:3f:ba:29:4b:8d:72:94:28:52:77:31:cf:48:8a:
10:dc:74:b5:5b:70:2b:05:53:2e:13:46:f8:0b:ca:82:ca:63:
4d:c5:a2:02:90:c4:38:95:54:2e:3f:35:17:f0:75:c1:2b:7b:
96:ca:65:d6:76:6f:5e:45:56:5a:69:0d:94:91:ec:41:91:1f:
ba:3e:39:07:dd:15:8a:bf:40:33:75:39:f6:a9:35:49:ac:9c:
bf:87:f4:4b:f7:7e:9a:03:b1:d7:78:3e:93:be:88:1f:ea:55:
bb:9c:6e:21:c3:dd:e4:03:02:41:31:42:fe:b3:93:d7:73:51:
a2:6f:00:66:f7:1e:7e:18:cb:f3:cf:ca:51:87:6e:08:88:ef:
89:da:0d:1f:a5:5f:6e:ba:b2:91:9a:79:c3:3e:07:1d:51:30:
b8:48:ac:ff:05:c6:3a:7f:56:55:85:3e:c7:8e:f8:3a:dd:44:
2a:cc:7a:66:38:e7:a6:69:d3:7e:cb:0d:b8:6d:4a:b8:4f:c8:
a0:07:52:2a:41:4c:ca:2c:04:58:bd:fe:94:9d:81:83:51:3a:
f4:80:6c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 15:41:35 2025 by rpki-client