Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
File: aWZRzL2U9r6et0MyEiM1yrvvw5o.mft (raw, json)
Hash identifier: eKFnMOrB/PZB8nJ5BVEQVpX/lZsjlsjr3ATO2sYlP9I=
Subject key identifier: 26:6B:CC:6C:34:01:86:C8:1C:F6:E6:5E:13:59:89:42:D5:69:93:97
Authority key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
Certificate issuer: /CN=696651ccbd94f6be9eb74332122335cabbefc39a
Certificate serial: 0199221F431FD8BA159925CAB174F330DAC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
Manifest number: 059E
Signing time: Sun 07 Sep 2025 03:01:38 +0000
Manifest this update: Sun 07 Sep 2025 03:01:38 +0000
Manifest next update: Mon 08 Sep 2025 03:01:38 +0000
Files and hashes: 1: aWZRzL2U9r6et0MyEiM1yrvvw5o.crl (hash: y84Bhz/7E8CLzfxngHYNOudUSd7JrAEeGsVaEYnQczc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1f:43:1f:d8:ba:15:99:25:ca:b1:74:f3:30:da:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696651ccbd94f6be9eb74332122335cabbefc39a
Validity
Not Before: Sep 7 03:01:38 2025 GMT
Not After : Sep 8 03:01:38 2025 GMT
Subject: CN=266bcc6c340186c81cf6e65e13598942d5699397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f3:f8:fe:8d:17:16:9d:ca:d4:0f:a1:54:a1:
78:f4:69:29:ae:fd:d2:02:b8:12:b1:89:3d:50:0b:
96:24:b4:73:fe:d3:62:d9:0d:0b:7f:7c:e5:3e:21:
eb:59:ec:4b:9a:c4:cb:7b:6f:54:29:34:cb:a7:df:
cc:74:2b:a9:14:62:47:01:5e:42:86:3b:75:8a:e3:
af:4b:6c:79:17:c2:b9:f2:a9:25:a9:06:f0:f2:d1:
68:62:83:1f:29:9f:96:fb:05:07:ea:28:2b:2e:65:
7e:22:e6:56:e7:90:81:4c:ef:7b:64:22:63:40:ad:
ab:98:e7:51:c2:5e:92:f2:b0:95:0f:31:0f:95:07:
2b:2f:7b:15:ef:0c:f6:f4:79:bb:df:45:8e:74:99:
4b:82:13:5a:20:06:63:f9:c0:da:d3:83:ae:3f:96:
07:27:96:da:ee:0b:41:04:8e:32:3d:3a:94:37:43:
a8:e9:a8:60:ad:1e:73:bf:11:02:a5:6c:a2:e2:3f:
40:d7:51:71:37:44:af:3c:13:8a:3a:76:0f:be:8b:
da:94:1e:ee:fc:42:63:28:dd:ef:80:7c:93:ad:32:
62:98:1b:03:0f:78:7c:fd:81:9a:64:fd:b5:05:4c:
41:0f:96:50:14:b3:9b:4d:52:23:ae:32:2c:c1:3a:
9c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6B:CC:6C:34:01:86:C8:1C:F6:E6:5E:13:59:89:42:D5:69:93:97
X509v3 Authority Key Identifier:
keyid:69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:66:0a:1a:0f:1e:57:20:69:f7:87:60:4f:e6:e9:c6:50:7c:
14:4f:26:13:c5:05:27:e0:5d:4b:c1:b9:ec:d0:0a:e7:09:48:
b1:84:0e:fa:1c:08:fe:33:fc:58:2e:ea:4e:63:c1:b5:ea:b5:
59:02:5b:dd:42:15:a6:a4:d3:f1:1b:33:8d:15:de:68:2a:68:
6e:e7:81:71:60:9e:82:61:a2:00:be:60:31:60:0f:a4:fe:94:
d8:c4:a6:1c:45:21:ea:b8:19:a6:f2:91:86:b7:99:ab:2c:d5:
22:27:5a:b3:c5:63:2b:24:5d:d7:14:e8:9d:49:3a:3c:dd:cc:
c5:1f:57:f1:49:a0:40:5b:91:87:9e:2d:20:19:c3:99:75:cb:
e9:36:74:89:f6:95:5b:a9:b9:a9:05:03:94:6e:78:18:50:c0:
22:96:d9:f9:58:b6:8b:8b:6e:ad:cf:4c:27:f7:b9:58:79:82:
d5:89:da:86:87:db:47:06:25:ce:79:36:c4:33:35:1e:95:6e:
6d:9d:27:f8:2f:07:a6:d1:80:e2:5b:b6:de:3a:82:43:35:8b:
3d:94:de:0e:ca:19:a2:40:a2:82:9e:01:dd:5e:b3:d1:0a:26:
b9:a9:6e:21:93:2c:ff:23:51:64:e1:8c:06:58:2e:0f:c0:81:
51:d4:0b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:37 2025 by rpki-client