Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: k/4n6Pxj4NYDAGnJpPhdK1mpAVKOuiBcTks1Gi9tLi8=
Subject key identifier: 4E:15:E9:07:1E:E5:8C:41:16:F1:01:FB:0E:F9:72:6C:DF:6A:FA:E9
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 019921B253291874CAD92DC56505D283BE0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0F06
Signing time: Sun 07 Sep 2025 01:02:38 +0000
Manifest this update: Sun 07 Sep 2025 01:02:38 +0000
Manifest next update: Mon 08 Sep 2025 01:02:38 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: Et47XRj21PLE4WHjWVXNmuBoJWWo61h1XQfurIUPETo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:53:29:18:74:ca:d9:2d:c5:65:05:d2:83:be:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Sep 7 01:02:38 2025 GMT
Not After : Sep 8 01:02:38 2025 GMT
Subject: CN=4e15e9071ee58c4116f101fb0ef9726cdf6afae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:b9:58:8d:d6:c0:93:87:ee:0e:34:e6:c3:c9:
79:bd:a1:fe:9d:69:f3:b7:c6:30:b1:ac:0a:67:da:
a9:84:48:18:60:83:36:a8:47:03:31:a3:f0:14:8e:
6b:9f:32:df:12:d2:e7:cb:8b:ba:92:ce:3e:71:02:
df:95:d3:32:e1:e7:bd:ef:84:26:59:42:dc:54:4e:
ca:e0:c0:cf:7b:b8:f5:60:c7:47:44:97:d0:63:c6:
0d:bf:bf:1a:ac:89:c2:67:d7:88:68:7e:d3:01:9a:
5b:b1:26:57:70:fc:0f:04:bf:f8:b7:26:0b:c8:78:
36:49:00:17:1b:98:34:84:d2:80:39:37:45:73:7e:
92:9e:76:03:70:9a:e0:e9:6f:46:0e:0a:83:38:94:
8e:53:99:1e:ea:23:ef:93:90:e2:77:e4:8d:c9:a9:
40:2a:e7:b5:68:61:b4:9b:f1:6e:ed:3c:35:a6:ca:
ce:88:9b:4f:73:a0:44:66:48:b3:f9:df:c6:d1:6a:
53:1a:59:02:60:bb:67:9a:aa:f7:4e:d3:b9:1a:68:
3e:93:fe:06:f9:f7:95:96:03:dc:d9:7d:99:d8:93:
bf:af:3e:4e:41:e8:21:b1:2e:97:6b:b1:7b:42:4f:
88:6b:4d:b9:39:6c:56:40:0d:9e:e1:45:c8:65:81:
d9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:15:E9:07:1E:E5:8C:41:16:F1:01:FB:0E:F9:72:6C:DF:6A:FA:E9
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:4b:6e:2a:f3:50:9c:48:6d:9e:fe:fd:31:e7:4a:85:25:45:
85:0b:a1:2e:ce:cf:ce:89:8a:eb:ea:be:3e:18:1a:f2:d7:af:
63:c2:60:30:a0:2c:ec:2b:8f:8f:8e:14:f5:e6:d8:d4:0e:f5:
fe:ed:ec:87:85:f4:5a:b7:d9:49:87:ed:af:63:a9:78:ba:59:
b7:9e:8c:20:f4:14:f2:1b:8d:5d:83:72:21:fa:9f:ad:f4:1e:
d6:dd:a4:f5:e1:1b:3a:2a:96:8f:97:c7:8b:e5:e4:12:a6:0b:
9c:93:b8:45:40:32:54:0d:2a:3c:2f:6b:a0:64:19:23:cd:c7:
51:6c:be:7b:0d:eb:61:06:1c:f8:bc:b1:6e:80:77:5a:ee:58:
d1:b4:c0:39:96:01:55:c2:32:e8:9d:18:8f:4a:c4:30:a9:0f:
be:cf:02:6c:c6:65:37:16:a5:ec:42:67:c4:4c:80:91:71:69:
bd:44:4b:8b:ce:06:d0:68:54:af:db:f8:8b:52:61:44:53:52:
37:7a:62:0d:10:49:a4:62:b3:43:26:81:c8:1d:7b:49:11:bd:
5d:cc:fc:b1:15:94:b6:27:c0:79:aa:de:a8:fd:aa:c2:de:07:
a3:89:fd:78:45:49:c8:34:12:b9:fc:bf:6b:5f:3e:5d:0d:8f:
e6:4a:c3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:20:57 2025 by rpki-client