Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
File: 66CCF19D7B610880DB22D40EC9BAE02B12013763.mft (raw, json)
Hash identifier: r38fmH/3ncsVbTBw+F7bAFQ0itNzpGLF/vY054HF/K4=
Subject key identifier: AE:C2:F4:75:30:3E:6D:2F:0D:09:90:51:0E:EE:8C:06:40:2E:DA:34
Authority key identifier: 66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
Certificate issuer: /CN=66ccf19d7b610880db22d40ec9bae02b12013763
Certificate serial: 530269575D5DA8FAA9CA235876016BED5017D533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
Manifest number: 0250
Signing time: Fri 22 Aug 2025 22:09:28 +0000
Manifest this update: Fri 22 Aug 2025 22:04:28 +0000
Manifest next update: Sun 24 Aug 2025 00:34:28 +0000
Files and hashes: 1: 66CCF19D7B610880DB22D40EC9BAE02B12013763.crl (hash: ZS3qlCO/7wKSq9ndv/lmn1yT5APj4QammK/d9EiBR8w=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:34:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:02:69:57:5d:5d:a8:fa:a9:ca:23:58:76:01:6b:ed:50:17:d5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66ccf19d7b610880db22d40ec9bae02b12013763
Validity
Not Before: Aug 22 22:04:28 2025 GMT
Not After : Aug 24 00:34:28 2025 GMT
Subject: CN=AEC2F475303E6D2F0D0990510EEE8C06402EDA34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b7:e2:13:be:eb:71:b0:e2:fc:57:0f:5b:37:
00:2d:03:b6:e6:1e:66:cc:e1:6b:73:28:f1:02:b4:
e9:69:ff:87:2a:2a:3c:b7:ee:68:68:9c:22:63:47:
c6:b5:04:4d:9a:4d:5d:ba:2b:ac:14:0c:1c:e7:c5:
c8:64:3e:ea:39:99:34:ba:01:82:fa:e0:b6:81:3a:
ab:b5:cf:39:5f:3c:19:92:bd:5b:b8:d4:02:71:88:
39:02:fa:2f:7e:e9:8c:e8:ae:3c:cc:33:ac:ab:56:
34:88:48:86:38:d0:48:18:8f:12:3f:d8:b0:80:f5:
dd:c2:79:7e:97:52:54:1d:b8:2b:1b:fa:4c:3a:d0:
c1:0d:a5:90:66:16:13:0d:e0:cf:60:d3:11:e3:49:
e3:0c:d0:84:e5:5c:6c:b6:ea:2b:19:99:08:90:6f:
73:36:96:14:4f:4e:e6:2a:a2:6d:6e:dd:0d:6d:54:
f0:7a:9b:8c:cf:c4:3b:5e:90:02:5f:7a:48:8a:60:
4d:75:43:0f:05:23:8b:47:d8:12:7e:7d:7e:6d:4e:
e5:69:69:db:d9:e9:f8:25:20:c1:bf:aa:a4:fe:ad:
73:27:25:5c:77:d4:40:a2:84:04:e8:0b:8b:97:12:
2c:ed:88:5b:02:22:d0:fc:85:4d:57:e5:cc:72:ce:
a1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C2:F4:75:30:3E:6D:2F:0D:09:90:51:0E:EE:8C:06:40:2E:DA:34
X509v3 Authority Key Identifier:
keyid:66:CC:F1:9D:7B:61:08:80:DB:22:D4:0E:C9:BA:E0:2B:12:01:37:63
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZszxnXthCIDbItQOybrgKxIBN2M.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/acecfdc7-6db9-425b-acae-7e20fbe6e129/2/66CCF19D7B610880DB22D40EC9BAE02B12013763.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8a:f2:b3:1b:e2:83:93:84:e1:3c:48:16:64:e8:74:a6:73:
6e:e2:b5:3c:9b:64:12:eb:16:51:bd:87:95:ef:c1:86:5a:50:
88:3a:02:e5:15:4b:92:b9:04:58:30:19:d8:6f:5f:dd:d2:ea:
ce:a1:15:a1:f8:3d:1c:7a:7f:f0:14:83:50:ec:cd:eb:48:91:
71:10:44:b1:1f:5c:a3:6d:b6:43:08:95:04:f8:69:a8:10:19:
3e:5e:0c:06:01:9d:65:5b:5b:cd:f3:48:d7:8a:39:d9:b5:f6:
25:cc:3f:72:22:9c:4c:b1:2a:1c:d0:17:5a:7f:1c:24:5d:2e:
f0:87:b8:84:17:94:e0:78:d0:6f:cd:85:af:33:d1:1b:e5:55:
11:7d:3e:74:21:c9:87:54:0f:a5:8d:57:ba:99:97:cf:6a:87:
64:6e:ee:4a:fa:e1:29:27:ed:f3:c4:80:0f:d8:0b:62:88:31:
ac:31:87:09:31:cf:db:ce:23:56:67:7b:86:90:06:ff:2a:34:
61:9c:20:6c:0e:b8:3d:8f:58:46:91:d3:e2:2f:dc:09:3d:02:
93:59:d2:40:44:86:8a:05:ee:ab:4a:3d:4b:53:ba:fa:1c:29:
ff:8f:1f:a9:80:a0:a0:c0:6b:b0:a8:2e:e4:c2:b0:94:b6:39:
1a:63:0c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:03 2025 by rpki-client