Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: ekwKa1YXmvzth/C7N4XUI7x2w3WM0VOqVqZohlb32+I=
Subject key identifier: C5:53:50:EE:38:7F:EA:1B:19:9A:F3:10:CB:46:E2:79:53:A5:82:27
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 0196C53A1CD04494170340C38ABBF91469D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0DCD
Signing time: Mon 12 May 2025 16:00:42 +0000
Manifest this update: Mon 12 May 2025 16:00:42 +0000
Manifest next update: Tue 13 May 2025 16:00:42 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: FOGlrM0jYWrAj1Yr8/AOoTRl8dB5NsGa0fDdHBQZ29Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:3a:1c:d0:44:94:17:03:40:c3:8a:bb:f9:14:69:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: May 12 16:00:42 2025 GMT
Not After : May 13 16:00:42 2025 GMT
Subject: CN=c55350ee387fea1b199af310cb46e27953a58227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:99:58:11:c1:b8:e6:85:0f:e8:86:09:aa:80:
47:49:7e:7a:37:0c:3b:af:dc:1f:e7:97:b2:54:ed:
63:af:3d:ef:13:c7:30:1d:a9:77:cd:5d:d1:fe:98:
86:63:e4:28:88:2f:18:40:7d:10:cf:2b:17:1f:45:
20:49:b1:2a:77:5a:7c:bb:7e:d1:d7:cc:b7:96:d3:
d9:d1:28:48:a2:fe:9f:86:d0:70:a1:e3:b9:da:d9:
23:ea:ef:5f:cb:ce:8d:48:55:38:0d:b8:c9:32:b3:
02:34:3b:ff:7c:7c:44:e7:b3:1f:12:e1:cb:2c:46:
d6:2d:08:ec:62:ed:1b:0c:c4:cb:12:3b:e9:d7:d6:
aa:4a:ea:25:b2:89:50:2d:c8:47:c7:8c:ec:42:3e:
92:49:91:b0:0a:6a:1e:d7:9c:f4:90:e2:4d:4b:94:
67:38:6d:c1:18:c5:1a:0d:98:de:62:dd:74:2a:d8:
4b:c8:50:9e:ec:b2:f7:f1:3a:21:23:30:44:c8:37:
6c:82:33:ca:d1:4c:b2:7c:24:de:19:35:49:12:90:
af:0c:4f:49:6b:a9:4e:04:f0:32:6c:cc:8d:08:1c:
f7:2a:a2:24:74:53:b0:47:a9:d5:b7:54:a1:92:b7:
c4:c4:d6:8a:84:31:4c:ba:3e:55:0c:46:9a:a9:b4:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:53:50:EE:38:7F:EA:1B:19:9A:F3:10:CB:46:E2:79:53:A5:82:27
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:39:e6:ba:2d:f8:5c:ef:85:7f:39:3f:b8:77:22:68:dc:
95:4d:0d:af:54:c5:ab:d7:5f:03:d5:a2:95:7c:da:df:ef:28:
83:76:81:63:b1:1e:e9:a0:fe:83:12:25:bd:82:19:6c:4b:8c:
a1:79:98:b5:76:74:81:9b:ec:0f:ff:1f:94:ae:b6:1b:39:07:
da:1b:64:2f:70:e0:19:61:86:e3:ff:55:a0:54:86:78:e8:61:
cc:d8:73:9d:01:c4:87:0c:d3:49:66:87:59:22:59:f1:1d:92:
29:1d:94:ad:57:74:ec:77:f9:58:d5:06:d2:4e:ff:87:5c:33:
f6:a6:58:5e:8d:70:74:90:43:b9:41:7b:a3:e8:0a:cb:7f:89:
12:db:8b:78:f7:a4:14:38:60:1e:48:82:8c:df:ac:a1:ea:50:
74:bd:60:7f:b8:08:ed:47:88:2f:a3:33:fa:33:a3:66:61:88:
8b:2a:30:f1:b2:5f:a2:5e:2b:d7:6f:af:87:af:1f:af:30:c9:
6a:6e:9b:48:ae:50:11:e7:58:0e:25:71:ef:08:b3:ea:66:d1:
f2:8f:6a:c1:14:fc:de:fe:ea:d4:91:ac:d0:e8:63:44:79:c3:
e0:b2:70:4a:8f:46:af:15:a4:52:d9:87:f8:82:07:c5:d7:bd:
49:55:07:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:20:51 2025 by rpki-client