Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
File: aWZRzL2U9r6et0MyEiM1yrvvw5o.mft (raw, json)
Hash identifier: d/WjTVFZg36GlokbB7tWjvXNBk5i0xsVTmwe4dUeUwk=
Subject key identifier: 33:05:B6:9C:3C:8D:F3:FF:97:93:C0:54:BE:A2:A0:86:06:60:63:28
Authority key identifier: 69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
Certificate issuer: /CN=696651ccbd94f6be9eb74332122335cabbefc39a
Certificate serial: 0197B70EF5F6AD66343750CEA84B9E363049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
Manifest number: 04E2
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: aWZRzL2U9r6et0MyEiM1yrvvw5o.crl (hash: Ku2xcGow9N8xmAsHekzanfdFzpl09Y/dz2+x8tKpeAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f5:f6:ad:66:34:37:50:ce:a8:4b:9e:36:30:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=696651ccbd94f6be9eb74332122335cabbefc39a
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=3305b69c3c8df3ff9793c054bea2a08606606328
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c9:52:aa:5f:52:8c:f6:a5:a6:0e:8d:62:69:
74:c1:81:14:42:a7:3b:76:d4:db:ac:b1:b9:5c:41:
c6:e3:3c:46:57:ec:de:fa:03:fa:21:ca:11:5c:0f:
9f:42:12:91:06:d7:91:a9:41:3e:49:8a:62:76:e4:
e4:9e:d5:99:36:35:32:0f:8c:92:0c:04:8d:f8:cf:
c5:ff:77:91:25:27:2d:43:a2:ef:4d:2a:26:e1:34:
d8:53:fe:d2:0a:db:89:8b:6b:44:1d:3a:f8:c1:d4:
4a:21:f9:77:ab:cc:91:90:bb:85:04:10:41:04:12:
0e:22:74:60:4b:6a:1e:fe:27:dc:e0:dc:70:0f:6f:
89:99:90:ff:a2:21:14:71:48:7b:0f:cc:06:d7:75:
31:4e:30:df:5b:d0:87:1c:4d:5b:96:2f:4f:b5:5e:
77:66:78:5e:8e:ee:25:38:ca:87:22:4e:fb:32:ad:
fe:15:f8:f2:39:7f:59:7b:21:1b:33:d9:66:58:ab:
9b:ce:d1:0b:ea:f0:77:fe:10:d3:e7:3d:3a:89:57:
94:41:fa:ee:9a:71:5c:f5:cd:ca:96:f4:8b:2a:74:
dc:f0:b2:7f:2d:da:1c:73:76:44:30:20:96:a4:a0:
c9:28:0a:2e:a9:c1:e6:74:42:d9:9a:05:15:c1:9e:
1c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:05:B6:9C:3C:8D:F3:FF:97:93:C0:54:BE:A2:A0:86:06:60:63:28
X509v3 Authority Key Identifier:
keyid:69:66:51:CC:BD:94:F6:BE:9E:B7:43:32:12:23:35:CA:BB:EF:C3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aWZRzL2U9r6et0MyEiM1yrvvw5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/dcc22e-aab3-4e17-a4a0-d87017d7a6ac/1/aWZRzL2U9r6et0MyEiM1yrvvw5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:71:0d:47:21:1d:7a:9f:82:82:54:83:2e:50:04:ab:b1:14:
7d:b9:42:85:50:5d:b4:93:23:3c:9d:1a:9c:fd:82:0c:c3:e7:
77:bf:0b:cb:33:61:ce:06:48:66:3b:df:eb:a1:d3:d9:c8:59:
0e:1d:43:3a:73:1f:af:c8:60:b2:84:3d:21:e9:b4:2a:59:16:
b9:e7:1f:a0:70:dc:fa:cc:69:5a:cc:47:fb:17:13:4d:8f:76:
8f:b7:1d:f3:80:01:ae:46:fb:a0:73:7c:4f:19:a5:6d:8e:6e:
2a:75:d9:40:b2:29:32:24:cd:d3:78:00:a6:da:e4:cc:ce:b4:
b5:65:1a:79:65:f1:a3:e4:20:5c:4b:78:3c:67:23:47:9d:98:
0c:53:75:87:d2:11:41:85:2a:3f:cb:e5:8d:0a:29:07:2b:bf:
54:71:78:5a:d7:39:f8:2d:aa:f4:36:b9:8d:18:7b:55:31:85:
55:07:12:bd:f8:3e:86:53:0f:c0:24:94:56:02:c3:ee:2f:6a:
a9:e4:83:71:b9:f7:cc:db:d9:21:7c:af:60:08:87:54:5b:44:
b5:85:2f:57:24:4f:53:02:8d:8e:a8:6e:bc:bb:b8:26:d6:b9:
2c:66:ab:89:65:65:f8:20:19:2e:56:9e:45:78:25:5b:db:6c:
bf:25:ce:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:05:42 2025 by rpki-client