Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
File: aZlc4YW2DnhgSd9V8VydLsBdT2s.mft (raw, json)
Hash identifier: GSE2zyQ12LMEhkfIVYKg4yVF/o9isI5FMfJ7RiQBfc4=
Subject key identifier: 60:DA:30:E1:86:7A:39:34:9F:81:94:AA:BA:AE:EF:6A:BE:DA:E7:E6
Authority key identifier: 69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
Certificate issuer: /CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Certificate serial: 01976F2C32714D7EA24CA536492AADDE3F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
Manifest number: 158C
Signing time: Sat 14 Jun 2025 16:00:56 +0000
Manifest this update: Sat 14 Jun 2025 16:00:56 +0000
Manifest next update: Sun 15 Jun 2025 16:00:56 +0000
Files and hashes: 1: aZlc4YW2DnhgSd9V8VydLsBdT2s.crl (hash: sLeWKWFiVmRuSZaxCyEl5L5qkW+R/60N02FepDXtPPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:32:71:4d:7e:a2:4c:a5:36:49:2a:ad:de:3f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69995ce185b60e786049df55f15c9d2ec05d4f6b
Validity
Not Before: Jun 14 16:00:56 2025 GMT
Not After : Jun 15 16:00:56 2025 GMT
Subject: CN=60da30e1867a39349f8194aabaaeef6abedae7e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:7a:45:b8:c7:c8:b2:f3:df:08:88:f0:ad:f0:
6a:c0:d9:e1:bf:f3:00:ff:6e:5f:39:61:38:76:43:
c2:7e:6b:e2:ce:95:02:e1:2e:20:ce:25:58:92:78:
b1:a5:92:f4:fc:3f:9e:67:80:94:e3:86:77:44:af:
6c:e7:de:b5:53:7b:a6:fc:16:99:03:26:c9:80:9d:
62:68:0f:25:62:0e:e4:3d:d7:48:a4:ba:f3:12:3e:
98:52:3b:60:90:62:75:dc:f9:1c:a8:ea:5e:98:c8:
06:a2:af:6d:8a:2d:96:8d:ac:aa:3e:36:63:77:63:
44:48:ca:a9:42:a9:4d:20:1f:d4:a1:56:32:e8:23:
7f:5c:db:bc:9d:0c:df:a9:95:e6:87:2f:fe:ba:a2:
60:1f:7c:ea:71:3f:64:fd:f4:73:0e:20:66:e6:59:
ac:d3:07:10:ab:ef:41:a6:18:ef:85:54:fe:21:54:
31:75:b3:a3:ba:ea:93:80:b5:c8:92:b8:17:1e:2b:
52:15:28:ee:66:2e:d9:36:74:b8:cc:7d:9a:ea:6d:
3e:17:0c:a3:0c:97:a1:8e:12:39:b2:d6:2b:37:81:
83:ad:7b:db:f6:b1:e7:ad:72:4e:56:cd:42:a8:13:
23:ab:ae:11:6f:91:3e:d0:fa:4b:89:4a:e4:51:5b:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:DA:30:E1:86:7A:39:34:9F:81:94:AA:BA:AE:EF:6A:BE:DA:E7:E6
X509v3 Authority Key Identifier:
keyid:69:99:5C:E1:85:B6:0E:78:60:49:DF:55:F1:5C:9D:2E:C0:5D:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZlc4YW2DnhgSd9V8VydLsBdT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/dfdb65-c45d-4de6-bfb1-b7c99eb18834/1/aZlc4YW2DnhgSd9V8VydLsBdT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:04:a8:6e:68:36:93:46:e3:3d:54:c2:51:e6:3f:2a:9d:b0:
23:18:1a:26:91:fb:98:28:b0:e5:f6:24:d9:99:e4:4c:e2:8d:
96:bc:a6:3d:7c:f1:ff:20:48:fa:a9:ed:c8:f2:97:57:0f:33:
8c:dd:89:17:10:62:4c:ad:dc:87:b9:22:73:92:03:d3:0b:51:
01:b9:46:b1:c4:ea:b3:d8:0c:15:cd:16:fd:2f:80:bf:6d:a2:
8f:5b:83:63:81:b0:1b:62:ba:8c:46:58:f3:7c:e0:ba:8d:72:
dc:06:9b:bc:c3:b0:07:1c:69:72:90:a9:32:1d:a3:96:df:4c:
3a:06:4e:93:4a:78:4f:bd:98:49:e6:01:43:d3:18:65:bc:df:
e1:09:9b:4c:be:75:16:e8:ed:10:05:ff:b2:c7:da:11:c1:d3:
c4:22:99:96:1b:08:3d:03:6a:08:f2:df:67:cb:8a:be:d4:3c:
88:aa:27:40:eb:6b:c3:37:a4:79:81:19:3a:1a:ec:b2:b4:f2:
af:68:23:69:0d:6f:44:97:16:56:04:15:7a:ea:14:a8:b7:3b:
52:d0:9d:e9:a4:b1:24:a2:9f:19:2b:38:ee:7c:82:3d:30:52:
87:a5:e3:37:56:1a:7e:ef:c2:a9:ec:84:20:f4:8e:83:5c:83:
57:83:46:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:21 2025 by rpki-client