Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: iM3bW+54pOmLVZf2EC5e0naida8F9xjE6E8Z4aSPyH4=
Subject key identifier: F6:00:53:1F:56:A4:6F:DB:39:5A:82:E6:D4:AA:37:42:42:29:B5:4A
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 0197B6D784FC9466FCA752ABEDD8146DA704
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0B3D
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: n/Ngmwa9pBhVpvjJ4YVBqbZvBdcb7WBMTnPbs1lThcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:84:fc:94:66:fc:a7:52:ab:ed:d8:14:6d:a7:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=f600531f56a46fdb395a82e6d4aa37424229b54a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:11:c5:9b:93:94:b9:0c:d4:d7:31:c7:0b:4f:
95:de:9b:fb:0c:d3:fc:85:a9:77:71:a5:e4:99:ab:
fc:0e:e8:af:3c:c9:4a:a4:8b:de:11:b8:20:41:06:
9c:79:be:19:3d:ec:e3:4e:76:5a:18:60:08:58:41:
b4:6c:b0:05:c2:1a:9b:21:67:83:3c:02:8d:23:52:
4d:2f:99:5b:68:3e:2c:bf:ea:1e:b5:bd:38:eb:b0:
d2:8a:01:ac:ff:cc:af:f5:29:4f:c9:96:d5:52:75:
d0:51:e9:cd:fb:da:d2:95:c4:a2:1a:62:0a:57:78:
2e:77:dd:44:60:51:9f:cc:2d:a7:89:b4:9c:14:91:
de:bf:ec:28:65:78:f2:d7:2a:94:ae:d6:1b:b8:3a:
7e:f7:ec:ef:3d:85:4a:24:db:66:4f:19:dd:90:25:
fe:f3:5f:4d:6c:63:1b:a0:9e:4c:d7:2a:7f:4b:7d:
76:88:26:2c:eb:84:75:e2:91:60:b9:ce:8d:aa:d9:
a9:10:ee:20:53:80:03:fd:6d:40:96:30:a1:a4:1b:
a4:55:28:02:50:8b:aa:41:ed:74:df:a5:ab:0d:a2:
c5:5a:b4:b4:07:f0:ee:e9:54:85:44:77:af:81:3d:
a3:3b:63:b5:96:7d:09:f6:0d:87:8f:cf:83:8a:18:
c2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:00:53:1F:56:A4:6F:DB:39:5A:82:E6:D4:AA:37:42:42:29:B5:4A
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:bb:4b:88:2d:4f:ae:79:45:da:14:78:bc:86:2b:74:e4:f6:
55:d5:cb:14:cb:5b:10:03:b9:9e:ca:3d:8d:8f:26:72:74:35:
c5:4a:02:d4:ab:c6:bb:f5:3e:58:0e:10:81:d1:76:a2:fd:dc:
5d:23:25:05:c2:b2:90:8b:3d:64:eb:a9:00:90:32:6e:e3:37:
52:74:96:29:29:d6:95:ee:54:33:fc:be:85:c5:dc:80:11:23:
1f:58:26:53:f3:30:80:45:8b:db:f2:40:33:cd:db:00:98:d4:
56:eb:cc:38:19:fb:d6:d8:11:d4:54:ea:6a:77:ba:de:87:bc:
47:75:6f:91:5e:f5:b1:1c:f6:fb:9b:4f:fe:89:78:dd:85:ae:
9b:a0:75:b9:dc:ba:b1:f5:18:1c:d7:34:d2:a1:6e:32:a5:4d:
7e:3f:37:e5:d7:60:0a:1e:25:ad:27:28:6f:2e:90:e2:2b:4b:
5e:ef:09:fa:bd:5d:77:7d:05:b9:71:6d:42:6e:86:92:76:71:
be:75:db:0f:f1:27:a3:08:95:b1:be:a0:d9:6a:5c:38:30:cd:
07:7c:76:b8:00:17:4f:27:3f:7f:cf:55:89:8b:d0:52:02:94:
1d:21:30:98:33:94:61:21:56:4d:e9:fa:40:cc:db:bf:2f:70:
8c:e1:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:29 2025 by rpki-client