Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: wOU3kMnOLpw52wpg7vPpIwURSp5myBixDjp465WCGG8=
Subject key identifier: 5F:94:EC:AD:A3:F1:67:CA:FA:79:0B:58:E4:D3:D1:45:4D:7C:EF:89
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 0197B6A10DF89AACF4D79EA127845417DB03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:37 +0000
Manifest this update: Sat 28 Jun 2025 13:01:37 +0000
Manifest next update: Sun 29 Jun 2025 13:01:37 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: f1YddV9aQuZMC/q8rg7NcgebcRW6oqwLE7zY8fe7qHM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:0d:f8:9a:ac:f4:d7:9e:a1:27:84:54:17:db:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Jun 28 13:01:37 2025 GMT
Not After : Jun 29 13:01:37 2025 GMT
Subject: CN=5f94ecada3f167cafa790b58e4d3d1454d7cef89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b4:b2:ae:5a:ac:b3:c6:05:37:50:d5:90:fe:
6b:9b:c8:ba:4d:6f:f3:cc:7b:e8:f3:2b:4d:c3:0f:
59:5c:09:9d:90:5b:38:de:23:d6:42:ef:a5:e7:44:
4d:07:fd:04:fc:a4:49:9a:59:b9:c8:97:41:08:a9:
4f:42:0c:8c:0c:66:6c:7b:5b:d0:cc:34:f9:8a:b0:
fc:59:60:f2:b5:81:be:b5:1c:7a:68:77:15:38:7f:
0f:8d:88:91:3e:9e:20:da:c8:63:bd:d0:f6:8e:67:
c4:5c:3f:31:27:eb:26:7a:02:c4:5a:b4:f7:9e:64:
f0:f4:ab:87:f4:26:c2:16:24:50:72:67:bb:e9:71:
c8:11:81:50:00:35:87:da:40:a3:8f:34:6f:fd:82:
7d:27:7e:da:41:1d:d4:f1:97:25:00:96:53:d8:d8:
82:f0:42:89:ca:2e:fa:f5:83:70:65:2d:29:cb:95:
e9:2f:27:51:67:c6:10:14:dc:68:64:3a:63:9b:95:
12:d0:8e:f9:29:80:41:73:6e:c6:bd:7f:a0:8e:ab:
e8:65:3b:33:40:28:3a:ba:13:f2:3d:b7:da:9a:d9:
48:87:e7:94:52:cc:ff:16:9b:c3:da:d0:cf:eb:54:
5a:5a:a8:6c:29:93:4c:14:19:1f:e1:ff:22:7c:ed:
5d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:EC:AD:A3:F1:67:CA:FA:79:0B:58:E4:D3:D1:45:4D:7C:EF:89
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:aa:34:78:5d:d2:ab:79:3d:67:0b:e9:88:6a:89:ee:b8:2c:
d6:0d:f5:d3:78:a6:58:c2:b5:16:0d:04:23:fd:ba:6b:0d:7f:
48:e0:04:5e:14:eb:07:cd:65:a4:19:32:32:51:39:9d:b3:54:
7d:d3:8b:37:a4:ed:e9:48:87:04:ea:97:ce:68:3d:bb:73:39:
1d:18:0a:15:fa:f7:e8:f3:60:5e:14:6a:33:b4:89:8d:f9:8a:
f6:cb:8a:3f:da:4b:32:85:37:08:88:20:f9:36:7f:02:c8:b7:
76:a2:ac:e5:bf:f4:0f:2d:2f:47:34:4e:74:6a:fe:1e:83:91:
eb:74:de:27:0b:57:20:aa:9c:42:22:49:99:ab:84:66:4c:64:
35:ce:ab:32:5e:49:3f:ec:4b:88:27:39:16:4a:df:5c:3b:6f:
86:34:15:89:56:51:48:d8:35:73:bd:d8:c7:7c:06:58:10:8c:
85:b3:37:96:80:cd:a5:a7:46:e0:01:bc:09:61:4e:3e:50:93:
43:df:68:6f:94:e5:23:e5:3e:a9:ef:74:78:30:35:6b:36:0f:
bc:8a:f1:87:80:ae:09:69:30:16:83:31:49:c3:9f:2a:9a:97:
ab:f2:b3:09:f5:30:b7:98:78:ad:dd:d8:f5:d8:bd:08:42:7d:
3e:a9:5b:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:35 2025 by rpki-client