Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: 164cu2PYYh2V1yscXZmbjJmszQjImx5e8hQ2o1qIBak=
Subject key identifier: 44:78:E7:92:F1:79:1F:98:74:28:4D:01:49:F8:09:17:AA:78:10:9A
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 0196DF9EEAAAFFAB44327E30BE518D274040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 1544
Signing time: Sat 17 May 2025 19:00:56 +0000
Manifest this update: Sat 17 May 2025 19:00:56 +0000
Manifest next update: Sun 18 May 2025 19:00:56 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: bCTD1sGpa2VIWN43gT3nfINj2Xz7xZ7e2r/b+xKnNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 18:14:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:df:9e:ea:aa:ff:ab:44:32:7e:30:be:51:8d:27:40:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: May 17 19:00:56 2025 GMT
Not After : May 18 19:00:56 2025 GMT
Subject: CN=4478e792f1791f9874284d0149f80917aa78109a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6f:42:75:8b:44:9d:be:28:60:29:a9:5a:d6:
39:2d:e6:48:f5:2c:3c:46:93:21:2d:15:a6:d6:95:
64:4e:66:74:42:c5:a0:d5:24:60:a7:4c:4f:97:d6:
e5:51:9a:47:5c:c1:c7:58:6f:62:29:dc:62:c5:45:
ac:86:26:32:08:49:8d:ce:a6:6b:8d:cb:9a:88:bb:
5c:bf:ba:ff:12:a9:3d:ed:18:3f:4c:1f:3e:30:03:
c2:f2:fe:03:02:35:65:bb:90:ca:b5:55:98:2c:ee:
c2:02:c2:8d:01:59:dc:48:83:5f:9a:04:b9:50:99:
43:6a:42:22:83:3e:5c:60:31:df:fb:97:9b:58:5a:
8f:3e:68:31:50:65:3a:60:3c:9b:24:33:6d:23:1b:
cf:47:16:7a:26:2b:8e:3e:e6:5a:24:4d:ad:71:58:
2f:17:e6:3d:ee:24:7a:a2:23:65:1d:63:4c:a5:6b:
2a:97:07:e6:4c:92:79:77:43:71:db:cd:9f:a4:14:
b6:d4:00:61:54:ac:fa:1a:a4:f4:31:60:5f:87:06:
09:7c:0a:43:92:94:10:84:9a:2c:a5:9a:76:51:ab:
c2:e1:a5:49:47:57:27:8b:02:64:c0:25:ed:75:a3:
06:1c:db:fd:5e:49:c7:a5:14:70:11:6c:28:f4:d9:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:78:E7:92:F1:79:1F:98:74:28:4D:01:49:F8:09:17:AA:78:10:9A
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:09:e8:6e:c6:17:aa:b5:59:94:19:85:c1:a3:12:3e:2e:83:
d7:ef:c1:d6:e2:5b:e7:e8:0d:f5:c7:b5:79:22:56:b5:8c:24:
e0:a9:bd:b3:5c:2b:4b:db:84:8e:68:74:f7:4f:cd:ca:d6:e1:
17:a9:6e:c7:f4:22:e4:df:7a:09:fb:c3:c2:c5:43:3d:e5:d1:
58:3a:de:c1:69:f3:78:e7:26:d6:df:da:18:ed:15:a6:2f:e6:
9c:4e:2b:ed:ef:89:31:41:4e:9c:e8:40:05:a8:95:ce:eb:94:
94:ce:b7:9e:04:cb:7e:e4:85:69:5e:a1:0c:96:01:68:e5:3c:
2a:5f:ea:5c:d7:f7:74:69:a9:17:fc:c5:a1:b9:8d:78:1e:31:
df:ec:4f:38:a6:9f:d5:93:ae:cc:ec:7f:91:80:cc:70:26:0a:
68:ed:0c:b3:23:29:45:6c:4b:f4:f2:83:c5:7b:40:a1:91:6c:
b4:34:10:83:b6:e5:50:8a:0b:92:d4:36:28:d5:b6:59:48:6f:
97:b0:8c:2d:65:d0:e1:85:9c:99:cb:80:70:c1:02:eb:a5:64:
fe:22:2a:9b:29:ba:e5:30:34:8c:83:9d:84:b0:bd:69:70:eb:
2d:13:80:cf:35:c2:33:eb:a6:79:78:b4:d0:f2:77:c4:d9:ed:
1b:d2:93:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 22:45:46 2025 by rpki-client