Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File: a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier: lxBEYjBfsGniIAI9RVhtT7D4pJMovNlWQXvDPSi2gc0=
Subject key identifier: D5:98:3A:D9:90:7F:EB:B5:3C:A4:C2:F8:97:D2:A5:3D:B5:BE:98:D4
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 0197B745235C518F523336F7E767F83C6818
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number: 0A08
Signing time: Sat 28 Jun 2025 16:00:50 +0000
Manifest this update: Sat 28 Jun 2025 16:00:50 +0000
Manifest next update: Sun 29 Jun 2025 16:00:50 +0000
Files and hashes: 1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: SUlVYvPoJ32xMwkDcudywKQBbg8AhcogNfrH3fbx/ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:23:5c:51:8f:52:33:36:f7:e7:67:f8:3c:68:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Jun 28 16:00:50 2025 GMT
Not After : Jun 29 16:00:50 2025 GMT
Subject: CN=d5983ad9907febb53ca4c2f897d2a53db5be98d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:57:a7:11:1a:50:f3:fb:09:44:7e:67:c5:
ed:93:23:bf:e8:41:2c:47:87:90:67:40:29:8e:98:
54:fd:db:28:9f:f3:a5:38:16:84:1b:c4:f3:8c:2e:
9d:79:2a:66:30:ef:17:f3:59:88:7c:38:61:30:24:
e9:85:64:d0:11:98:26:54:a9:0d:86:ac:dd:58:ed:
58:60:d5:3f:36:cd:be:9d:a5:8e:0b:8b:d8:52:af:
1a:0d:93:ec:c4:0f:8b:fb:d3:50:55:55:bf:f4:1c:
4e:38:61:f9:2e:6f:f6:20:0a:38:9c:c4:88:0b:31:
08:6b:ab:a0:e7:6e:d1:1a:a9:78:29:b3:91:07:39:
e0:bd:d4:e4:55:af:7a:3d:a4:44:1c:c7:fc:e5:d9:
97:18:e7:cc:91:ca:e8:93:a3:0e:3f:55:d9:07:9e:
08:ef:6f:9d:7a:b4:32:1d:c1:2f:87:b3:47:b1:72:
56:1b:c4:40:c2:c3:d8:f8:92:c8:12:75:23:a5:e9:
25:41:fe:33:d5:77:2d:ac:5f:8f:98:1f:71:a8:25:
59:b1:12:22:d4:47:1c:37:46:15:a8:2b:8a:76:15:
08:20:97:32:1d:0a:4d:c7:73:54:25:70:95:81:c1:
9c:15:b6:21:14:84:6a:a0:d8:c3:f3:f3:f5:d7:54:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:98:3A:D9:90:7F:EB:B5:3C:A4:C2:F8:97:D2:A5:3D:B5:BE:98:D4
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:5c:eb:b3:c3:95:05:0d:e0:5b:2a:af:a7:ed:0f:d1:d5:7c:
a8:46:1d:be:f6:f3:42:16:aa:d4:dc:64:6d:7f:48:56:c7:b1:
65:80:87:ef:49:5b:6b:c3:c6:46:dd:66:d7:43:3c:7f:1d:40:
d7:1d:5d:42:24:90:3c:5f:b3:c8:e4:a7:4e:94:a9:11:49:97:
5b:9e:e4:72:3b:3b:d0:9a:42:e3:61:b3:17:b9:6e:8d:99:bd:
87:8b:f6:e3:c1:48:a6:ca:ea:fd:a3:97:ab:d8:1c:39:28:f9:
de:7a:a1:6b:c3:1d:fa:6a:55:ab:38:10:14:f4:98:46:2b:38:
20:a6:c4:92:91:a1:bc:09:ad:af:ba:e6:db:ca:e9:b8:90:97:
59:08:11:56:50:15:6d:85:45:28:44:7c:6d:6b:6a:f2:35:f1:
1e:51:1f:99:08:d1:52:5c:97:21:1f:d0:32:38:46:cf:ca:a1:
8d:f9:db:46:e8:c7:1f:27:bd:86:96:1c:c8:57:f4:40:9c:97:
ab:bc:de:e2:d8:66:e7:f4:e0:c8:f5:17:a6:7d:71:75:c4:34:
20:d5:9d:c7:b6:30:9b:62:47:4b:65:27:4f:7f:68:85:52:9d:
5b:f3:ff:82:00:1d:72:58:70:96:c5:69:2b:9a:69:85:1b:40:
f6:1e:cf:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:40 2025 by rpki-client