Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: JAFviRfm/qnktTYiPgipo70txfH/fQL4fTyAgYRxqjQ=
Subject key identifier: 20:62:C4:04:9F:54:45:1B:47:56:6B:EE:09:46:D9:1A:0F:E1:B3:6B
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 0199FB45E088EF65AD0F64E73C4BA68517F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 16E0
Signing time: Sun 19 Oct 2025 07:01:24 +0000
Manifest this update: Sun 19 Oct 2025 07:01:24 +0000
Manifest next update: Mon 20 Oct 2025 07:01:24 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: 93sGmf8UpCJEpn7VPIo5kEZmrt+XkAJdSBYiWjQFTtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:e0:88:ef:65:ad:0f:64:e7:3c:4b:a6:85:17:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Oct 19 07:01:24 2025 GMT
Not After : Oct 20 07:01:24 2025 GMT
Subject: CN=2062c4049f54451b47566bee0946d91a0fe1b36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:32:6e:8b:9d:1e:89:b1:ef:d8:6d:46:0a:
a6:76:d0:f2:59:d0:cf:5c:c2:4c:b3:34:95:c5:2f:
b0:0e:80:38:3a:ce:a8:fd:79:98:f9:0d:b6:4d:7e:
0b:8a:70:2b:fb:a5:1b:30:02:6d:15:b8:35:1c:fd:
9f:88:2f:fe:a2:74:2a:05:02:69:5a:83:9e:4d:a8:
d5:b8:59:7b:73:07:78:8b:b9:45:b2:b8:7e:43:f4:
d9:07:1f:70:d1:7e:cf:77:f6:9b:d6:9a:6b:d6:ae:
00:0b:dd:be:a4:ee:86:e3:58:0b:2b:b0:fc:d4:c2:
f0:79:95:aa:a4:84:ff:42:04:db:88:bd:7f:b9:86:
bb:32:94:e3:e7:ea:4f:d6:f9:4e:90:7b:26:32:95:
64:fc:ff:29:36:74:da:56:e8:6b:c2:a8:91:e9:14:
b9:90:4c:9b:3b:35:f8:3f:3e:fe:0e:2c:2e:ac:d3:
68:09:1c:98:d2:c6:3a:fe:47:42:3b:a8:dc:37:b6:
7a:a4:24:f6:8d:d8:95:49:27:7b:ea:6f:06:5f:b1:
c7:8b:98:a2:79:c3:1c:0c:fd:5c:a0:df:e3:30:71:
08:80:a8:cc:d5:7d:db:9f:c1:fd:be:4a:34:60:3a:
94:a6:7d:0f:9c:98:67:75:0f:2e:16:70:38:16:08:
8c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:62:C4:04:9F:54:45:1B:47:56:6B:EE:09:46:D9:1A:0F:E1:B3:6B
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:79:cb:09:7f:fb:a5:5f:ba:bd:df:bf:6b:c5:01:22:24:a0:
b4:df:c1:c9:55:07:6e:b7:78:23:08:dd:a3:7d:ce:26:90:43:
cc:77:dc:e3:3d:58:c6:72:70:e9:7f:5b:90:f6:a7:48:78:19:
09:e4:4b:f1:62:2f:78:62:df:22:27:3e:ae:25:38:2d:7b:67:
7e:4b:f3:99:07:76:84:7a:aa:bd:f2:e9:c0:91:f3:15:35:7a:
03:b9:4e:a7:8f:bc:0a:6d:3e:56:8b:ad:40:b3:b5:b3:9e:35:
ab:03:c6:2e:8e:7d:3a:24:5f:36:60:a6:58:3a:e3:b2:8c:cc:
37:42:d2:7b:6d:9c:f1:fc:c8:cf:f2:00:28:c3:02:31:b9:ed:
44:78:94:d4:78:37:51:86:b5:ab:11:8c:3a:81:ac:d1:97:18:
b1:3c:0c:0c:a7:4a:9e:b4:25:39:a7:fe:0a:ba:12:71:87:ce:
c6:66:59:84:c0:75:5c:2b:2a:31:e7:98:f4:ce:77:c8:60:42:
f7:d9:b8:08:c8:1f:4c:38:94:f3:d4:ea:5e:4d:5e:dd:6a:61:
bb:dd:94:d0:a2:31:4f:01:45:63:0e:34:a3:b8:d4:3c:00:cd:
de:1a:3a:7e:33:8a:89:11:e5:7c:2d:c3:7d:cf:55:31:38:6c:
d4:f8:2a:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:43:51 2025 by rpki-client