Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: kP2rP/2OWxZX2pML84FH77o8/qkwphLKiq7EYE6628s=
Subject key identifier: 52:C7:C0:C6:69:99:48:37:6D:86:98:48:4D:CB:4E:A2:A6:CE:95:55
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 0196B40F86CFD20DB92008E08D24613835A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0AB7
Signing time: Fri 09 May 2025 08:00:38 +0000
Manifest this update: Fri 09 May 2025 08:00:38 +0000
Manifest next update: Sat 10 May 2025 08:00:38 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: Z2DlVAGWjvfiOGctjCoJEvz6242XjJkR2limWInVBuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b4:0f:86:cf:d2:0d:b9:20:08:e0:8d:24:61:38:35:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: May 9 08:00:38 2025 GMT
Not After : May 10 08:00:38 2025 GMT
Subject: CN=52c7c0c6699948376d8698484dcb4ea2a6ce9555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:34:4d:d9:35:97:e0:5b:11:4c:21:47:28:04:
21:df:5c:1c:33:81:77:e5:73:1e:2b:d9:ba:81:6b:
07:5b:fd:a2:0f:71:c8:67:37:c7:66:1c:bb:d3:62:
3d:4c:38:1f:20:f4:21:36:e3:4d:7d:bd:2d:d1:7b:
f8:a0:e4:b7:63:af:b0:23:f8:1c:14:65:b8:72:fc:
bc:64:61:60:90:96:95:89:63:1e:9d:9a:6e:92:39:
47:e2:d1:5b:cb:b5:ce:5e:a4:b3:21:9a:25:20:6b:
47:2f:07:72:f8:4d:9c:7c:cb:2e:98:64:b8:32:2a:
0a:4a:21:1c:1c:d3:6a:9f:f1:ee:bd:ed:56:24:b1:
82:b0:38:3b:1d:e6:92:dc:76:73:c3:15:c5:1b:d8:
91:41:fa:4c:5d:51:f0:51:e0:2a:d7:39:a3:7f:58:
3b:29:3e:70:bb:34:32:38:1d:d4:fd:ef:2c:5f:84:
e2:c3:11:d1:fe:b7:70:0b:15:9b:fb:45:95:28:f1:
de:a8:61:49:a8:15:1e:4e:34:5d:04:a4:6b:d6:8d:
ea:01:f9:9d:6c:f1:76:61:03:28:28:ac:e1:51:97:
ef:21:9f:82:f9:ba:0d:92:b2:11:fa:53:64:a4:ed:
99:b9:69:c2:67:8f:85:7a:52:b0:0d:53:49:cd:79:
a1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:C7:C0:C6:69:99:48:37:6D:86:98:48:4D:CB:4E:A2:A6:CE:95:55
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:8b:24:ec:33:c9:fb:04:35:7c:e5:be:95:8b:18:f3:3d:93:
28:f4:04:b8:d6:1f:b7:97:97:31:85:bb:ed:74:37:e1:a2:da:
82:68:14:61:03:c2:d8:c9:95:a5:56:ba:6d:6a:bb:e4:16:b4:
12:cd:2c:a6:98:8a:df:4b:a1:1a:13:0b:07:ec:1b:31:6b:b1:
bc:56:14:e4:ed:e0:0a:aa:28:88:b7:13:69:00:e7:b0:1c:f1:
0c:90:3f:e2:da:93:ee:d1:ca:05:51:6a:a8:4c:b2:0e:50:ab:
94:eb:55:79:df:1f:82:de:ad:81:f9:09:c3:e0:37:51:44:c1:
c2:9c:cb:96:03:58:0c:c7:90:d0:4b:f9:c7:25:c6:46:3b:d9:
64:37:67:81:ed:7e:49:cd:8e:fc:e3:92:48:5e:1b:20:b2:c1:
76:04:4e:b1:2e:ea:25:43:14:b5:69:61:25:a5:d8:a4:ac:e6:
f3:10:4a:5f:2d:36:6f:da:39:58:6b:b1:bf:99:77:df:f9:91:
8e:d9:0e:2a:2a:65:b6:7f:47:8b:88:bf:d1:52:e8:3d:84:02:
c2:83:df:b0:8b:af:d2:f8:2a:f9:3e:78:c8:b9:50:e0:a1:be:
9d:be:69:51:0c:22:35:0a:70:50:65:7a:0b:11:1d:5e:fc:fd:
50:a9:9d:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:27:03 2025 by rpki-client