Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: GYaWoGrw+sH/3O4okCtUnQzPQVXC+GIaUYUksWY0O3M=
Subject key identifier: 82:E4:81:E7:6B:93:4D:23:4B:B5:4A:D4:21:18:DA:5F:EE:8B:E8:93
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 0198D65F621F8FDDB2B48E8DFC537533604A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:00:31 +0000
Manifest this update: Sat 23 Aug 2025 10:00:31 +0000
Manifest next update: Sun 24 Aug 2025 10:00:31 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: wubIDni/5otvR8Ury41VN96sw5THoA9KTWHShS5t2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:62:1f:8f:dd:b2:b4:8e:8d:fc:53:75:33:60:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Aug 23 10:00:31 2025 GMT
Not After : Aug 24 10:00:31 2025 GMT
Subject: CN=82e481e76b934d234bb54ad42118da5fee8be893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:20:eb:00:ed:ec:66:a8:f0:f0:a9:ab:1b:8d:
eb:fe:96:23:97:f8:7f:0f:dd:81:6d:6e:98:f0:dd:
a4:a1:e3:61:86:66:03:66:64:74:92:28:b0:79:b6:
b8:29:f1:4f:3a:b6:f7:d7:ce:c0:89:03:49:5f:e7:
67:60:a8:82:55:b0:46:eb:1b:ac:72:c0:7b:94:82:
f8:2c:20:24:8a:33:bf:03:66:ad:6f:9f:09:8d:c3:
95:55:7c:0e:95:7f:b2:9a:f1:bc:6d:92:06:c8:d5:
ad:70:83:25:5f:fb:7d:f1:6f:b6:3e:cd:fb:79:ce:
a7:ee:eb:73:6b:fa:a7:4c:31:23:30:57:56:1b:f7:
7a:eb:bc:08:e2:79:18:11:a2:27:25:6e:96:52:0e:
fc:5f:f3:06:bd:f8:57:b5:7a:d8:a2:55:9f:c3:5f:
b8:40:4f:c4:0f:75:21:c1:4c:7d:e5:2f:95:51:86:
72:23:32:1e:ef:58:d8:b2:fe:fe:99:d7:76:18:f6:
6a:90:35:56:6a:3c:dd:84:b5:c8:9a:ed:28:07:ae:
ca:1f:2a:d5:95:17:a5:b7:c8:f6:b8:b5:29:cb:84:
1a:1a:59:e8:cb:8c:e3:5c:c3:37:0e:7d:cc:38:99:
ad:52:6c:a6:07:80:5c:d2:f1:51:19:ce:4f:68:3b:
d3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E4:81:E7:6B:93:4D:23:4B:B5:4A:D4:21:18:DA:5F:EE:8B:E8:93
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:7b:7b:e9:38:20:13:91:bd:30:48:5c:5d:9a:a3:f2:01:91:
ed:a6:4b:d4:c4:1a:a7:e6:2b:4b:32:ab:b4:79:f6:c2:27:f7:
98:1f:0d:13:cf:2d:69:c1:eb:42:45:11:86:9d:55:56:31:1d:
b2:db:ed:43:1a:3c:06:e9:38:cc:45:d0:e6:8c:91:8a:8e:2f:
a9:93:d4:19:65:2c:1c:4b:9c:df:79:11:1c:c4:96:91:f8:50:
61:bd:a2:4e:b6:e3:4c:78:56:be:f2:67:e8:c2:e5:0c:e8:a9:
92:db:64:65:bf:55:0f:a1:e9:b8:4a:4b:8c:2d:69:fe:b8:6c:
db:b5:be:60:0b:52:62:58:f1:29:c5:44:70:27:55:df:b6:24:
ad:89:23:7d:39:44:55:d7:01:02:78:15:bb:09:a1:33:3c:b9:
aa:4f:cd:f6:c6:ea:8b:e5:78:42:6d:22:e7:0b:a6:7e:86:f7:
07:d2:42:1c:5d:81:4a:bd:28:ea:30:27:04:48:71:f7:8b:4a:
19:45:22:3f:11:be:7d:83:d9:87:96:8d:31:ee:d1:3e:d5:21:
e9:a1:7b:ae:11:92:d5:be:08:1e:d6:84:71:80:ec:ba:e3:85:
79:14:d0:ec:c0:7f:62:3d:ed:a8:65:12:44:a4:f2:75:0b:4a:
06:4e:07:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:50:07 2025 by rpki-client