Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: gQROJPmXBajJbKvOSjXW7bhuXuhuAzqo6JBbqamJ6dE=
Subject key identifier: 45:17:63:5B:76:6A:4F:4E:1C:C9:82:68:90:FD:A7:C6:8D:BF:01:7B
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 01976102AA330B510C565983066B0A15B3DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 1587
Signing time: Wed 11 Jun 2025 22:00:53 +0000
Manifest this update: Wed 11 Jun 2025 22:00:53 +0000
Manifest next update: Thu 12 Jun 2025 22:00:53 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: FZy4+/IDlOcYG1IQFIboTNg2ggQmIZquVAyNHFRIdHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 21:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:02:aa:33:0b:51:0c:56:59:83:06:6b:0a:15:b3:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Jun 11 22:00:53 2025 GMT
Not After : Jun 12 22:00:53 2025 GMT
Subject: CN=4517635b766a4f4e1cc9826890fda7c68dbf017b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dc:64:37:07:8b:cb:45:d0:0e:bc:4e:5d:66:
a4:7f:db:03:4e:7a:25:cd:d1:b9:74:5e:69:29:1e:
e4:11:08:40:36:b2:cc:36:0d:fa:b1:8a:de:77:a0:
f7:c1:6f:63:bd:53:14:95:6d:4a:66:b9:31:9a:5f:
b1:99:0d:15:07:d6:6a:d7:43:be:4a:97:0b:13:76:
ad:b0:fe:e6:3b:7d:c6:12:30:49:3d:f7:f3:9e:80:
b7:d0:18:40:79:8e:07:5e:ee:54:c7:00:3a:ee:9a:
5a:83:a6:5a:df:88:53:62:85:dd:26:3a:85:0b:35:
ef:bd:ae:47:0a:af:15:34:df:5f:60:22:d7:cb:c9:
c7:cf:68:2d:1a:ce:c5:03:12:ed:4c:93:f4:af:57:
4a:18:c8:8e:61:8b:37:53:8b:c7:c1:fd:50:cf:9e:
56:ba:d1:0f:c9:82:dc:fd:82:a3:ca:5c:e2:39:3c:
8c:a7:65:a9:4d:87:e5:e1:9f:5e:31:8c:66:9a:b6:
6a:c0:cc:21:e8:20:ab:4b:67:f9:58:4e:7d:aa:e2:
83:88:12:7c:95:af:f3:11:6c:03:1d:45:8f:18:22:
7c:f1:76:dc:91:24:1a:3a:0c:29:78:12:8d:39:e2:
fe:2a:21:6f:8f:50:42:30:46:ea:79:08:1e:65:7a:
1e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:17:63:5B:76:6A:4F:4E:1C:C9:82:68:90:FD:A7:C6:8D:BF:01:7B
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c6:7d:99:49:13:41:73:53:ba:46:38:70:ec:ae:92:83:82:
1f:3a:a7:21:5f:db:b1:1f:9d:a6:bb:98:2a:9a:a0:5f:ad:9c:
fe:e9:d3:8a:de:87:fe:e0:c9:e9:40:37:c1:0e:4f:50:1e:46:
ca:30:39:b8:a2:4f:60:65:e0:e1:56:83:ef:ff:c2:35:3c:77:
02:00:f9:49:4f:ac:ff:28:2e:c4:de:45:f2:09:e1:e8:0a:7c:
7c:d4:7d:7f:58:ad:7c:e5:69:ed:68:04:dd:b8:5c:fa:e5:a6:
7a:c2:57:7a:6c:22:ff:b2:ce:8b:49:d2:59:cb:08:66:e6:69:
e8:f8:4a:62:6e:ea:8a:e3:e9:9b:30:1e:90:f0:1c:56:0f:7d:
d6:2f:50:52:55:ad:ef:72:d6:6f:3b:9b:81:2f:c1:88:50:e4:
cc:a9:3d:5d:30:d3:8c:8d:c1:74:4a:9d:01:65:c6:96:09:7e:
64:be:c9:95:1e:4c:19:a8:47:16:23:66:34:cd:e4:81:41:7f:
f3:e5:7e:d4:4c:bb:b3:97:3b:cf:99:c4:5e:31:ed:55:a7:5e:
9d:dc:29:70:9f:99:eb:5a:c1:56:fc:71:70:ec:7e:8d:3e:53:
f4:d5:1a:60:fb:c1:22:f1:33:86:5d:2f:68:75:0b:15:8f:08:
d6:36:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 07:09:45 2025 by rpki-client