Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: TBfo8rUajkpoM+LFYEwbyPqYyJUZWhsVpnDvopRLink=
Subject key identifier: 14:78:F4:CD:22:81:D2:19:5C:CE:5B:66:4F:B0:1F:C2:CE:69:3E:86
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 33F6DCE28C3257DB1DECA472AD33870CB1EA2BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 01EE
Signing time: Fri 06 Jun 2025 17:04:47 +0000
Manifest this update: Fri 06 Jun 2025 16:59:47 +0000
Manifest next update: Sat 07 Jun 2025 19:30:47 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: uJRJ4J2MoHNOYZ3q87FBw9BO5v1ZbufhBSsa9MWSJF0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:30:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f6:dc:e2:8c:32:57:db:1d:ec:a4:72:ad:33:87:0c:b1:ea:2b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Jun 6 16:59:47 2025 GMT
Not After : Jun 7 19:30:47 2025 GMT
Subject: CN=1478F4CD2281D2195CCE5B664FB01FC2CE693E86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:0a:2a:1b:36:a9:36:ea:a0:5f:67:fd:bc:
50:29:26:49:d5:96:67:39:70:ca:f3:df:4f:dc:8d:
bb:65:fc:12:2f:04:ec:ab:58:76:a1:d0:10:f8:05:
c1:1c:7c:2e:fc:a7:21:24:93:3a:99:a9:de:5f:81:
61:a1:06:23:a0:3a:34:41:6e:23:9a:2e:3f:6f:cd:
a1:fa:a0:c3:4e:b8:d0:b8:6a:15:77:db:d0:74:51:
44:f3:81:59:b3:1e:0b:6f:64:ed:92:cb:b8:14:1e:
61:db:c8:f8:ff:8e:a6:27:aa:a6:f3:56:59:9a:55:
9a:db:23:73:7e:a3:ca:ea:97:be:ee:90:c5:9c:84:
52:d1:02:22:35:cb:05:e6:5f:5c:8b:9b:f0:ff:fc:
81:63:39:07:69:46:22:8f:a3:97:32:76:5b:13:59:
9f:e1:2b:6a:9b:fd:35:40:00:b3:d6:34:e0:48:1d:
0d:0b:33:cf:a5:13:93:3d:d2:43:24:ab:e6:95:a6:
cf:03:5c:9b:f7:06:d1:33:fb:04:ad:e8:a7:cb:12:
ea:5f:7c:f6:86:24:d3:20:ce:b4:1c:f5:0d:64:08:
d0:fb:67:36:28:30:9d:89:7c:a6:52:d5:f2:95:a8:
ef:e5:bd:e8:a4:ee:0b:a2:aa:f8:13:81:ba:ab:24:
8e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:F4:CD:22:81:D2:19:5C:CE:5B:66:4F:B0:1F:C2:CE:69:3E:86
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:cd:5b:71:73:91:5c:61:bf:85:f1:9e:22:9f:c5:63:44:42:
f1:95:65:91:ae:50:ee:0a:71:f3:9c:dd:3b:4d:30:f4:92:0a:
10:75:e8:d7:ea:41:fc:11:ae:94:f1:3f:c9:b7:bf:26:b1:db:
79:a0:a5:71:f8:b6:53:5b:90:f2:be:1e:3b:60:aa:de:c5:e1:
83:2a:36:12:f7:4e:6c:71:6a:8e:b1:3b:b4:8b:30:44:34:bf:
87:df:64:6f:4d:e9:f3:1d:e6:a8:d8:57:44:ab:6f:4a:72:06:
63:43:af:3d:39:26:b2:f0:49:7a:c0:f1:37:a7:04:c8:8a:34:
fc:77:ab:c0:ef:07:44:6e:c2:e8:f4:c2:9e:1e:65:f5:7d:e8:
f0:ad:dc:8d:a8:47:3a:05:35:55:43:64:2f:26:50:83:7d:81:
67:3e:69:eb:69:9b:1c:87:cd:7e:25:69:d5:a7:1f:f8:0f:7a:
01:02:32:24:b7:43:05:3a:be:b2:e2:5d:90:2e:57:00:49:d9:
1d:13:66:0c:f3:86:38:24:c3:9f:65:e3:a8:fc:84:23:64:f8:
e7:7c:35:7f:29:c6:79:ea:bc:c8:f0:0a:b7:a0:fe:a3:a0:2d:
12:72:05:4b:ba:25:3b:04:64:53:c6:1d:38:38:28:13:a0:bd:
af:c4:5f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:05 2025 by rpki-client