Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
File: _aZpttXiJAUBetNZh8xXrJYjnJo.mft (raw, json)
Hash identifier: DC/ji7vkEVlPLu/DAMk1OrClSBmWtweiO9sQMaBsooU=
Subject key identifier: EF:36:AB:45:3A:D3:16:04:91:C1:8C:5E:5B:0A:31:3B:6C:54:FD:E4
Authority key identifier: FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
Certificate issuer: /CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Certificate serial: 019A4E4F4F5F6FF5C923B81E1FF3EFAB631E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
Manifest number: 170B
Signing time: Tue 04 Nov 2025 10:00:11 +0000
Manifest this update: Tue 04 Nov 2025 10:00:11 +0000
Manifest next update: Wed 05 Nov 2025 10:00:11 +0000
Files and hashes: 1: _aZpttXiJAUBetNZh8xXrJYjnJo.crl (hash: //YWkVGirZXsA72AK7z8FVRJadPlsL0v++sDCltkxqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:4f:5f:6f:f5:c9:23:b8:1e:1f:f3:ef:ab:63:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fda669b6d5e22405017ad35987cc57ac96239c9a
Validity
Not Before: Nov 4 10:00:11 2025 GMT
Not After : Nov 5 10:00:11 2025 GMT
Subject: CN=ef36ab453ad3160491c18c5e5b0a313b6c54fde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:92:81:08:ec:d2:bc:c6:ca:62:2b:ba:49:
a4:dd:5c:e8:99:a8:ed:33:ea:15:2d:be:d0:d0:31:
ed:25:d9:68:66:48:42:00:55:58:ee:ca:41:13:03:
8e:7b:aa:8e:af:f2:66:8b:da:d9:71:0b:e3:94:d0:
1d:f3:12:83:3e:e6:d2:20:9e:b2:79:76:2f:7f:b6:
2e:22:2d:1e:e4:6f:e4:46:cc:3c:97:56:ca:f0:f2:
a2:c1:db:91:32:17:09:5d:15:58:c9:e8:3e:6d:d5:
fe:3d:3c:f0:15:3a:ba:49:46:48:05:d5:25:a9:08:
6c:bd:44:f2:e8:fc:09:7e:2c:61:7c:c3:c2:91:4e:
91:03:1c:bd:1d:73:b4:b7:70:9a:ae:fa:f0:a8:08:
82:cd:e4:e0:0d:26:b5:a7:3a:e6:19:7c:d9:48:ca:
3c:c1:95:16:10:e8:72:54:d3:f6:c6:f1:a2:cf:01:
e3:f8:46:bb:e1:a3:9e:2a:de:dd:86:ad:7b:c9:75:
54:06:3c:b4:c6:01:6e:fa:99:38:be:20:08:2e:f3:
03:ee:9e:42:5f:0b:82:b5:59:23:c6:28:ef:38:ce:
53:93:ea:ee:83:33:f5:2c:04:0e:25:f2:40:d5:bf:
55:0f:bb:58:22:59:f1:34:0f:55:59:8b:0b:9b:3a:
06:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:36:AB:45:3A:D3:16:04:91:C1:8C:5E:5B:0A:31:3B:6C:54:FD:E4
X509v3 Authority Key Identifier:
keyid:FD:A6:69:B6:D5:E2:24:05:01:7A:D3:59:87:CC:57:AC:96:23:9C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_aZpttXiJAUBetNZh8xXrJYjnJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/ecce85-e61f-4820-ab36-89d3cf6c7027/1/_aZpttXiJAUBetNZh8xXrJYjnJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8c:2c:79:97:fb:2f:3e:cd:a6:eb:0e:eb:b9:b7:34:1d:a1:
5b:1f:71:39:e3:32:03:7d:f0:4a:02:9d:0f:bf:9b:ca:28:a2:
f4:a9:a3:07:3f:a8:aa:6b:a7:73:2c:4c:f8:c6:98:11:4d:d8:
03:b7:88:79:6e:0e:fe:2f:5f:62:b7:6f:7f:79:2f:e9:ed:5f:
33:56:14:c7:41:fc:75:e1:2f:be:e2:a6:0c:2b:bb:80:3e:e2:
23:57:8a:2d:51:a6:25:b9:51:0a:35:9b:c0:54:f6:18:2e:2a:
3d:37:8e:21:51:20:ed:ca:40:de:75:b5:a9:0e:b9:61:b3:9e:
69:66:48:6d:10:c6:94:a7:f8:67:99:31:10:24:43:a9:50:f8:
a6:ef:68:41:23:2a:9e:d1:cf:d6:e7:79:a7:cc:11:d8:51:d8:
c3:e6:40:9d:91:a5:88:70:a8:12:f2:1b:38:5d:bb:e4:6c:1f:
d2:81:d6:50:fa:ff:b5:c3:9b:a8:d5:57:73:3d:4a:c8:f9:9d:
49:37:2e:5c:46:0e:72:63:87:63:09:d9:b0:23:41:1c:16:3b:
48:95:11:3d:e1:15:c2:6d:1f:4d:e2:ee:20:e7:b8:76:16:d4:
5d:e1:77:26:0b:87:2c:21:1f:73:48:92:00:6c:dd:c8:cb:49:
78:58:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:15:54 2025 by rpki-client