Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
File: aZ11B_muHIs_3kVDOu6Pz5haIfo.mft (raw, json)
Hash identifier: ocdzJrgSnE+qk69JoakNEMwvFXIctWDQsF2aD/2xgqY=
Subject key identifier: 64:76:40:20:76:B3:51:09:3A:18:17:DF:6E:B3:21:05:4F:A3:17:81
Authority key identifier: 69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
Certificate issuer: /CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Certificate serial: 0198D84FE739A2C46AA36A8AF7D26490FD6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
Manifest number: 0EE0
Signing time: Sat 23 Aug 2025 19:02:51 +0000
Manifest this update: Sat 23 Aug 2025 19:02:51 +0000
Manifest next update: Sun 24 Aug 2025 19:02:51 +0000
Files and hashes: 1: aZ11B_muHIs_3kVDOu6Pz5haIfo.crl (hash: F0XqBexjKL33Ua1yl53FwnBROFYUWi9xQPMeG+gakNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:e7:39:a2:c4:6a:a3:6a:8a:f7:d2:64:90:fd:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699d7507f9ae1c8b3fde45433aee8fcf985a21fa
Validity
Not Before: Aug 23 19:02:51 2025 GMT
Not After : Aug 24 19:02:51 2025 GMT
Subject: CN=6476402076b351093a1817df6eb321054fa31781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:6b:72:5c:f3:34:ef:d4:8a:5d:cf:a3:79:
a1:98:c4:7b:7f:13:de:29:3b:9d:02:d6:98:8e:1b:
26:ed:ae:06:31:42:51:e5:90:8a:f8:d1:2c:a5:85:
30:1b:a7:4d:99:e7:c8:35:82:02:9b:93:5a:8b:7e:
8d:5c:e3:74:b1:4c:21:b4:25:f3:d1:de:fd:81:80:
1a:36:10:f4:6b:1e:5d:a4:d8:4b:26:18:2a:2e:97:
9f:24:ef:10:37:49:b5:a5:fa:b7:23:01:21:25:63:
77:bf:08:a9:5b:48:36:49:b1:bf:76:17:eb:c1:1f:
d3:cf:6f:e9:c4:87:3f:a8:c1:e5:dc:48:b9:94:6f:
a8:15:4f:f9:07:0d:eb:58:b3:bd:20:3d:6f:d9:d5:
61:ff:20:9e:e9:a1:0d:30:79:a4:3f:7f:d2:0f:12:
be:4b:f8:85:55:e1:19:79:1a:c2:5f:b1:38:41:bd:
d1:c3:2c:97:55:6d:d5:26:ef:27:a7:27:fb:6a:5a:
79:ce:18:f2:89:4c:16:95:89:a9:3d:58:4f:8f:87:
60:3e:06:00:98:f5:89:06:1e:f7:ab:33:45:85:47:
1d:00:eb:87:2b:5b:52:2e:3d:2a:82:d6:e6:0b:00:
45:77:55:e2:97:eb:60:af:a4:13:b0:1e:a0:2c:7e:
ac:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:76:40:20:76:B3:51:09:3A:18:17:DF:6E:B3:21:05:4F:A3:17:81
X509v3 Authority Key Identifier:
keyid:69:9D:75:07:F9:AE:1C:8B:3F:DE:45:43:3A:EE:8F:CF:98:5A:21:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZ11B_muHIs_3kVDOu6Pz5haIfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/55c71b-3d06-436f-8122-224165ec180a/1/aZ11B_muHIs_3kVDOu6Pz5haIfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:98:9f:1e:26:05:13:65:05:fd:ca:6e:54:6c:2a:b0:53:09:
a0:d5:3d:a9:da:2e:54:a0:fd:1d:80:3a:46:de:43:29:b4:7f:
29:b0:64:8e:fb:05:47:2f:be:3f:90:3e:9b:4a:d7:2b:f6:c3:
28:cd:d2:e7:83:7d:c4:13:8f:60:23:dc:96:36:c5:d1:cd:ca:
05:8b:fa:c6:81:01:7d:94:a4:6b:40:10:d5:5e:e4:32:d3:eb:
01:79:b9:d6:8d:81:8f:dc:0f:bf:0c:84:50:73:dc:d7:67:c0:
6f:45:d0:52:af:4f:d5:f7:aa:2b:e8:a8:a5:34:45:d4:bd:b8:
43:f7:1e:9b:42:03:25:2b:fb:54:b5:0a:b9:96:76:bd:62:c7:
39:e4:f7:4e:92:b6:e5:93:1d:72:ba:4d:91:19:2c:95:b6:c4:
3e:7c:bd:a8:80:46:6a:31:f4:c6:41:61:52:4e:61:1d:22:2c:
04:9d:6a:64:40:34:c9:71:42:06:58:c5:45:fa:1b:e4:fe:84:
4b:09:d7:4c:12:59:53:06:d2:4e:40:65:07:3b:25:1c:eb:8c:
c9:6f:f2:fc:14:f9:28:f9:ca:ad:e6:ba:d2:2f:5e:a9:25:21:
c6:4b:b4:e0:11:5c:31:0c:6a:80:b5:7e:34:71:9d:1d:6f:8a:
f0:81:7e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:06:29 2025 by rpki-client