Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: oIWXuw2HHuSuRR+pyJMFnYvSx5nnWYs9jyyUVj8kxsY=
Subject key identifier: 9B:50:33:55:8E:23:2A:C8:5D:9F:E6:ED:BB:38:BF:30:C7:89:10:32
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 0197B89047088082B98FC91DB6A1E3D244CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0E4B
Signing time: Sat 28 Jun 2025 22:02:32 +0000
Manifest this update: Sat 28 Jun 2025 22:02:32 +0000
Manifest next update: Sun 29 Jun 2025 22:02:32 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: c5N7+CyQUO3mzWKkTmGeL6Sy4pICT6mdbDlaOQL/Ygo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:47:08:80:82:b9:8f:c9:1d:b6:a1:e3:d2:44:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Jun 28 22:02:32 2025 GMT
Not After : Jun 29 22:02:32 2025 GMT
Subject: CN=9b5033558e232ac85d9fe6edbb38bf30c7891032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0c:3b:91:18:a5:22:a8:3b:b1:03:8a:64:db:
65:4f:ee:ef:59:6a:09:0a:57:e1:5f:c2:18:aa:a9:
99:83:b4:2a:ed:53:f9:ba:94:04:a9:67:76:59:64:
9e:97:c0:ec:94:d0:04:4c:ae:07:61:3c:11:4c:95:
55:a3:1f:2d:17:d5:5e:eb:3f:34:e0:25:9a:b3:fc:
75:6c:46:73:35:d3:43:77:36:d0:1d:11:c6:36:0a:
a5:1b:9c:33:c4:8d:bb:3f:e8:7f:12:89:93:69:1d:
ac:08:8b:94:7f:f4:47:f2:b0:6d:b6:4b:6e:2e:f2:
a6:f5:45:96:48:c7:48:bf:4b:70:49:1d:5e:1b:91:
b4:29:bc:b7:85:ca:36:65:de:6a:56:54:25:9c:ce:
a7:2a:06:bf:40:4d:c6:42:ba:f8:69:dd:47:b1:46:
8d:29:6d:24:b4:a7:3e:4d:5c:6b:25:b8:67:24:bc:
f5:16:7f:ba:d1:2f:d6:59:d6:d9:e7:bc:1e:1b:86:
87:17:e5:8f:8d:86:c0:e4:5b:78:ff:f6:c1:ff:6d:
f8:84:b2:73:0c:89:6b:f2:5d:46:c5:7e:67:ef:24:
81:af:82:f2:df:21:54:ef:08:fb:82:f2:e3:0f:03:
c1:1d:72:d6:4d:40:44:83:4f:ab:28:4c:50:20:92:
7e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:50:33:55:8E:23:2A:C8:5D:9F:E6:ED:BB:38:BF:30:C7:89:10:32
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e6:4a:c0:16:0b:ce:6f:be:ba:c2:15:21:96:ba:a6:51:2f:
27:9c:8d:26:02:d7:e9:03:79:ff:06:72:65:5b:25:34:d0:b4:
cd:de:61:bd:9a:ef:ce:03:dc:b0:65:bf:93:39:46:93:1d:dd:
09:06:81:63:dd:3b:e1:45:03:a0:7f:c2:48:aa:19:50:cb:99:
7c:d0:02:8c:63:2c:8f:9c:35:2e:4f:cc:74:87:b4:7c:4f:80:
cc:21:b2:36:b8:70:3a:43:05:4c:64:85:da:1a:cb:af:a2:0a:
2f:dc:bd:6b:f7:f2:81:ce:d6:6a:f2:f1:55:2f:b2:bc:91:f7:
c4:77:68:55:88:67:6d:a3:48:44:5f:43:0c:5d:c2:b1:d7:d3:
2c:b0:08:e6:27:bd:69:d2:9c:1a:83:cc:bf:7e:2a:d4:fa:53:
4c:77:df:94:46:6b:42:91:07:ac:1d:a0:97:63:cb:ae:3b:ca:
ba:7e:86:89:e4:05:d8:9d:45:11:09:f5:0b:0e:92:b5:b3:6c:
d8:b2:58:70:0c:82:32:30:d0:ae:9b:8d:10:cd:a1:1d:33:7a:
0e:e4:10:ba:9e:92:fd:7d:3a:b3:2b:27:56:30:bf:06:cb:37:
a3:e6:02:2c:cc:bf:bb:9a:5f:50:7d:6d:c3:2d:2f:12:e4:80:
72:fa:f0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:02 2025 by rpki-client