Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: eKoCRKEXwHpiWaPttKnp81CdOiWglFn3I6aemgXNXxE=
Subject key identifier: FD:73:1C:44:D7:A6:7F:84:CF:A9:43:90:63:A3:09:F8:D2:B3:36:F3
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 0198D515B839557E5AAFAFCDBB67DEC18E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 15D9
Signing time: Sat 23 Aug 2025 04:00:27 +0000
Manifest this update: Sat 23 Aug 2025 04:00:27 +0000
Manifest next update: Sun 24 Aug 2025 04:00:27 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: gC9RRx2tVR3syxOOl5ZCZDpze1gQZ5g06UrzS+unr1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b8:39:55:7e:5a:af:af:cd:bb:67:de:c1:8e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Aug 23 04:00:27 2025 GMT
Not After : Aug 24 04:00:27 2025 GMT
Subject: CN=fd731c44d7a67f84cfa9439063a309f8d2b336f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a9:86:15:25:9f:ce:43:fc:92:cf:d1:d1:33:
91:ce:7a:2a:a3:87:4d:03:cd:3a:29:a3:c3:2d:42:
31:6b:d6:bb:f4:9b:1a:62:f5:4e:eb:1f:69:18:8a:
65:76:e5:d3:ba:24:24:65:db:52:f0:4f:c9:48:e9:
5f:48:55:21:7a:58:5a:d6:0f:ef:b5:59:a3:d6:3e:
27:32:96:5d:73:51:ab:d0:c1:03:05:8e:aa:5f:b5:
6f:c3:3e:38:f3:ed:9a:85:59:60:7c:2d:27:46:ca:
eb:43:be:ce:44:30:40:ed:14:30:83:01:07:7b:e6:
97:48:81:d1:a1:f4:cd:b2:ee:c5:a5:c1:c2:eb:54:
ec:ff:7b:95:2c:69:9e:df:86:09:13:8c:99:81:ca:
d8:57:93:fb:4c:92:bb:6d:f0:3c:68:0a:9e:ad:fc:
37:32:49:7c:85:40:e6:e9:61:10:8c:68:c0:e4:4b:
d1:16:3b:29:69:68:ff:aa:66:9a:4e:53:4f:83:de:
b3:d1:37:a4:cb:44:4d:7c:32:9e:d4:94:77:f8:0c:
00:76:f0:fe:8c:24:a4:c3:d7:39:f2:17:b9:5c:eb:
1c:e2:9f:75:d3:2f:8d:71:61:1c:93:f9:c1:24:88:
a8:ef:3f:9a:f1:26:ba:97:35:03:e2:b5:69:87:32:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:73:1C:44:D7:A6:7F:84:CF:A9:43:90:63:A3:09:F8:D2:B3:36:F3
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:aa:37:3f:93:af:dc:48:b4:5d:11:d7:69:d1:93:3e:75:06:
1e:d3:f2:b6:48:31:c1:f9:95:ca:87:40:7b:bd:16:7a:e5:43:
8c:fd:bb:26:0d:f8:44:eb:d8:a7:87:1d:1c:49:d8:d8:9f:58:
b3:11:95:c0:c4:1e:47:01:9f:51:35:36:d6:c8:d7:30:3d:8c:
e0:88:ec:86:cd:5a:8b:2d:0c:0a:7e:6e:ec:53:80:18:f6:50:
be:96:9d:88:8a:29:31:80:b3:ba:0a:5c:91:2e:eb:f4:0e:c2:
d3:30:e7:68:f6:d8:cd:05:8d:a3:86:da:05:1d:d7:b9:db:e0:
53:38:22:0f:c1:fd:d7:bb:ea:e8:dc:38:a3:26:9d:ee:8c:d2:
ac:ad:b6:54:94:9d:5d:f8:61:2f:7a:22:f8:83:5c:73:38:d4:
83:2d:2f:20:20:d8:c1:a3:b9:07:3d:d1:8c:20:d9:ba:8a:0f:
49:00:89:c6:9f:0b:4a:21:54:c9:1f:84:4d:3d:2e:2b:70:37:
44:0d:c7:16:7f:0f:9c:7b:0e:cc:2c:2f:cc:99:d4:c3:bd:47:
4d:1b:dc:62:9c:d0:43:86:e6:3a:86:cc:42:f4:0f:f0:f1:fc:
e9:b5:fa:76:20:61:ae:64:fd:8e:33:2a:82:44:9d:bf:f8:3e:
e0:2a:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:52 2025 by rpki-client