Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
File: aWZ-UauBVWetZ8u10biJY4Nfqfc.mft (raw, json)
Hash identifier: z4qmHCsIaQn+Da2bV6yrOIB4ISijNUx50ATv16RzgSs=
Subject key identifier: 27:07:D1:05:0E:BF:67:90:6A:3C:23:76:5F:90:69:58:B1:D1:0C:4A
Authority key identifier: 69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
Certificate issuer: /CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Certificate serial: 0197B6A159312499398BC749EF0534F70B81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
Manifest number: 0D15
Signing time: Sat 28 Jun 2025 13:01:56 +0000
Manifest this update: Sat 28 Jun 2025 13:01:56 +0000
Manifest next update: Sun 29 Jun 2025 13:01:56 +0000
Files and hashes: 1: aWZ-UauBVWetZ8u10biJY4Nfqfc.crl (hash: W1VRp1Bm8y50Cafw4gGLncaYbvnSh/F12rDrlJ+0qK4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:59:31:24:99:39:8b:c7:49:ef:05:34:f7:0b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69667e51ab815567ad67cbb5d1b88963835fa9f7
Validity
Not Before: Jun 28 13:01:56 2025 GMT
Not After : Jun 29 13:01:56 2025 GMT
Subject: CN=2707d1050ebf67906a3c23765f906958b1d10c4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d9:63:1e:ff:4e:db:fb:93:62:98:df:78:de:
0c:97:6d:0c:b7:f6:55:7d:f6:9e:c3:f6:e2:ec:4b:
12:2a:78:59:b9:49:56:db:97:e5:d3:10:da:c6:33:
31:4b:40:3e:d0:cd:60:74:c2:e5:e5:62:88:72:e7:
10:cf:28:8c:f2:f2:aa:ea:c5:79:47:4f:53:87:72:
fa:8d:de:df:61:c7:d1:64:44:42:09:35:42:8d:ea:
f3:09:69:09:bd:55:0f:3d:4d:ae:66:fd:e5:a4:73:
95:af:cf:e0:c5:21:59:76:f8:75:3c:a9:8f:1e:fe:
36:6b:31:a2:b7:b8:6b:94:2b:ff:e6:a8:c7:a2:7a:
8d:d7:e7:a2:bc:1f:36:96:fe:d0:ba:92:57:9f:7c:
35:cb:44:f8:75:e0:89:0d:23:c1:30:05:b8:e8:98:
cc:e7:a4:d8:2a:a7:6a:4a:0c:ba:47:2e:dd:a6:88:
4d:f4:2d:c1:0d:bd:9f:cd:b1:28:cb:9d:70:94:03:
39:c9:2f:be:13:8f:85:5d:a7:15:9b:91:3f:36:db:
98:dc:b1:f7:3b:5d:8c:90:5e:c5:29:29:bc:f6:e0:
a8:bb:4e:9c:6d:10:50:c9:62:3f:10:bf:35:67:73:
8b:0b:5e:b8:42:8b:67:06:a1:2d:f8:fe:ea:02:e8:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:07:D1:05:0E:BF:67:90:6A:3C:23:76:5F:90:69:58:B1:D1:0C:4A
X509v3 Authority Key Identifier:
keyid:69:66:7E:51:AB:81:55:67:AD:67:CB:B5:D1:B8:89:63:83:5F:A9:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZ-UauBVWetZ8u10biJY4Nfqfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3ec692-a3e4-4379-a1c7-a7e3c6a892ec/1/aWZ-UauBVWetZ8u10biJY4Nfqfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c0:1f:09:87:a0:62:b5:1c:b4:2c:7f:4a:ab:02:af:f5:28:
e2:f3:1e:6b:a2:07:92:b7:de:b4:6f:b0:5e:19:d5:84:6b:1c:
b4:6e:b6:c3:9a:38:0f:40:dd:4d:d4:1f:97:7f:5f:08:58:30:
a9:6d:9c:cc:77:f3:82:49:3b:4b:a7:db:f4:05:ed:60:5d:ed:
6a:f0:b3:8d:4d:75:c6:e8:89:59:88:d5:97:60:e8:4f:6f:08:
fb:3e:d8:18:3d:84:69:60:0d:e8:fd:f4:a2:70:cc:28:fb:05:
1d:4f:cf:51:de:ef:34:93:1b:9e:28:a7:bc:6b:d1:38:03:3a:
4c:6e:8d:58:b7:54:49:90:19:5e:51:4c:44:84:21:26:a1:7c:
96:c8:ba:b9:42:2b:b6:a8:ab:75:20:bf:d0:60:d5:83:ee:ec:
06:08:e4:5b:22:b5:56:54:16:45:5b:c2:bd:51:62:f6:1b:ae:
72:e8:04:fc:ce:5e:e1:36:05:42:e3:3a:0f:11:3e:aa:64:48:
12:80:5b:73:45:05:50:83:80:5b:a7:1c:a0:5e:86:74:a6:0e:
8b:91:10:1b:a7:cc:12:0b:c4:0c:dc:46:ff:43:91:3f:0c:c0:
b1:f4:8b:42:83:28:1c:aa:f5:83:5e:39:44:70:26:ed:5f:e8:
a0:26:12:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:16 2025 by rpki-client