Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
File: a-pT2WLWegFI5je0tGib5NCEqeU.mft (raw, json)
Hash identifier: elQy/D2X1vUMyH+jY4eeI00YaCwU0c1TkIMq3huU7dg=
Subject key identifier: 40:E9:A6:4C:DF:57:97:02:9C:2E:7F:62:76:B6:F2:2D:23:84:25:79
Authority key identifier: 6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
Certificate issuer: /CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Certificate serial: 0198D6CCEFC94F1571C6EA774C1072D761E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
Manifest number: 0628
Signing time: Sat 23 Aug 2025 12:00:11 +0000
Manifest this update: Sat 23 Aug 2025 12:00:11 +0000
Manifest next update: Sun 24 Aug 2025 12:00:11 +0000
Files and hashes: 1: a-pT2WLWegFI5je0tGib5NCEqeU.crl (hash: zKp04aaPY5QWXLPcxtfGHyXRUz5vJF9hwTtMHpKBX0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cc:ef:c9:4f:15:71:c6:ea:77:4c:10:72:d7:61:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bea53d962d67a0148e637b4b4689be4d084a9e5
Validity
Not Before: Aug 23 12:00:11 2025 GMT
Not After : Aug 24 12:00:11 2025 GMT
Subject: CN=40e9a64cdf5797029c2e7f6276b6f22d23842579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:7b:60:ae:53:f0:d6:ca:28:3a:f2:2a:bd:
b0:e8:e2:87:87:f0:cf:f0:da:83:2a:1e:18:9c:35:
12:d9:97:90:e6:80:6b:ef:d1:8e:ef:9d:ea:c5:43:
c3:c1:f2:88:ee:df:e7:c9:72:56:a4:de:ba:90:87:
90:b2:68:67:c4:d9:02:c4:ce:db:77:9d:28:5b:cc:
34:5a:b7:3f:5b:46:3e:62:17:8b:e8:58:7c:32:1b:
f4:a4:03:cd:73:b4:06:16:6e:bd:99:9c:b4:e2:dc:
c5:67:e0:94:e3:8c:ba:53:1f:58:c4:53:b0:ce:69:
6b:7a:58:5e:e8:1e:e3:a1:31:df:07:fe:d8:cd:0b:
38:b0:96:c0:6e:dd:40:90:95:aa:3d:c5:04:4a:d7:
86:b0:b8:45:86:09:a3:b6:f0:e5:57:9b:17:c4:68:
4e:a6:fe:81:e5:69:4d:e1:44:59:9a:82:43:d5:62:
f9:5c:70:b4:9c:b3:8d:a9:3d:97:1d:85:21:54:53:
2e:c4:5c:1a:34:d4:2c:d1:e6:eb:f2:cf:7d:e6:72:
9c:8a:4b:d3:ec:0f:a8:5b:ec:04:9b:ae:ba:55:ae:
4d:4e:e5:f0:7f:8a:c4:91:10:c7:b5:d0:9f:08:99:
05:8a:c1:8d:28:76:c3:01:9e:16:ba:86:e0:d4:e9:
c2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E9:A6:4C:DF:57:97:02:9C:2E:7F:62:76:B6:F2:2D:23:84:25:79
X509v3 Authority Key Identifier:
keyid:6B:EA:53:D9:62:D6:7A:01:48:E6:37:B4:B4:68:9B:E4:D0:84:A9:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-pT2WLWegFI5je0tGib5NCEqeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/9c8571-c9d7-4550-8841-e20b7e679622/1/a-pT2WLWegFI5je0tGib5NCEqeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:c9:a1:33:9a:87:00:14:88:f1:de:c2:e2:c6:00:b6:da:69:
4e:f7:ce:e7:16:17:b8:33:24:2e:02:7e:7c:0b:29:14:01:0b:
57:9b:a0:85:6d:f0:c7:ba:7a:1f:75:c9:41:5d:31:c2:ae:90:
04:90:bd:f5:37:12:0e:e6:b1:7e:a1:e4:07:5e:8e:21:20:d9:
d5:65:d5:43:8a:81:6a:9c:fc:37:4e:27:66:d4:8f:87:68:d1:
45:74:10:6e:b6:41:6f:dc:e1:0a:33:f3:dd:9c:5a:56:7c:a4:
c4:62:18:5b:83:0c:af:03:c3:e8:de:0c:1a:5f:c8:4b:e3:93:
5e:70:7e:8c:c1:59:c5:67:3a:3d:bb:83:0c:4d:db:1e:44:9b:
a3:40:6d:8d:b3:dc:b0:72:4e:75:86:80:a8:4b:6b:eb:ed:ed:
b5:97:06:1b:2c:af:80:90:fd:6f:44:5c:bf:c0:a9:35:6e:a4:
73:b3:46:7d:88:6f:06:63:12:dd:64:b6:15:f1:62:5d:6d:20:
9f:f2:ab:d7:d7:17:9b:63:53:f2:7e:42:88:22:3e:30:f1:a1:
1e:35:97:d4:d3:8e:bc:6c:da:c6:33:73:ab:bd:af:6b:22:ef:
cd:c0:55:9a:3d:e2:a8:30:85:d2:93:1d:8f:58:96:41:2a:66:
93:d6:d8:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:21 2025 by rpki-client