Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: 4U4HtTQ9EOVmMdKiHc4WDZXYCpMQKnmhc89jVWYTrPI=
Subject key identifier: 93:8B:E7:B7:20:76:C5:F4:40:EB:9B:F4:8D:2F:6E:ED:D8:5D:3A:96
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 0197B7459816DA99F893052E2E6411EAFF01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 16:01:20 +0000
Manifest this update: Sat 28 Jun 2025 16:01:20 +0000
Manifest next update: Sun 29 Jun 2025 16:01:20 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: bEcea/DXP0rBzGNsKhSSVvzTYbqSXnQFf7qsKKRPjoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:98:16:da:99:f8:93:05:2e:2e:64:11:ea:ff:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Jun 28 16:01:20 2025 GMT
Not After : Jun 29 16:01:20 2025 GMT
Subject: CN=938be7b72076c5f440eb9bf48d2f6eedd85d3a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:80:15:7e:35:c3:eb:ee:d0:70:0d:f0:8a:
d4:fd:af:3c:28:53:68:3e:37:27:4c:f3:d9:19:bc:
73:a4:d3:7c:1d:ee:c2:f8:36:1c:da:df:e5:2b:8a:
2b:1e:41:fc:20:fd:5b:39:45:24:74:72:fd:f6:d8:
83:93:7d:6f:37:7a:3b:93:90:e6:c4:5c:0c:73:75:
5b:9e:e6:5d:4d:79:81:27:bd:3e:d1:dd:fd:69:b4:
bf:0f:b6:0a:80:a3:ee:ef:4a:3f:9a:38:cf:81:7c:
98:ce:95:0d:41:cb:1f:f5:7c:a4:81:62:f9:4f:70:
e4:f0:56:61:bc:f1:3d:35:ac:5d:5e:60:71:69:62:
24:8e:ea:8e:ae:85:76:46:bb:3d:e5:0f:92:f5:71:
37:9a:d2:8d:32:5e:c4:29:44:b9:34:7c:53:e6:a2:
6c:87:55:b7:a4:a3:8e:17:c3:2b:76:1b:7a:16:ec:
30:8f:93:95:0b:97:e1:d7:97:79:eb:54:1c:6c:9d:
c5:39:76:63:71:1d:b3:5a:76:1a:53:78:85:5a:65:
c4:a2:f7:62:11:e1:c1:df:20:cd:cb:23:e7:f4:3a:
8f:b6:4d:a0:2c:bd:90:ae:4d:87:14:50:e7:74:ad:
f0:b1:af:f3:39:55:ed:13:2a:c9:37:0b:9c:46:91:
3a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:8B:E7:B7:20:76:C5:F4:40:EB:9B:F4:8D:2F:6E:ED:D8:5D:3A:96
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:a9:94:52:50:38:30:52:3d:a1:b7:b7:17:dc:3f:0e:d5:53:
4e:9b:31:fb:e8:60:40:d9:32:7a:8b:ef:b7:3e:cc:53:87:f1:
39:d9:41:e2:ea:6a:fe:a5:25:78:20:35:4a:61:74:95:7d:63:
87:1a:ca:91:aa:86:ad:3a:e4:67:06:bb:59:18:2b:1a:07:5c:
f3:c6:4b:51:1e:e7:04:03:5e:5f:0a:b1:f8:50:5a:06:84:74:
31:96:c7:2b:09:9b:34:2d:d6:0d:ef:6d:d1:7e:e9:cf:61:07:
30:b0:5b:e2:69:81:28:e7:f4:55:d3:de:e7:24:42:5e:ea:13:
88:e5:10:3b:85:13:1f:70:90:c2:47:c7:38:5e:91:5e:c6:6b:
13:ac:aa:f1:02:ba:29:e2:17:62:b9:af:a1:17:27:49:84:da:
38:5c:00:ea:00:76:d7:d5:92:eb:e5:46:a1:0e:6e:c3:62:14:
7b:2e:a2:7c:38:46:ef:a3:24:7e:e6:2c:8e:6f:60:4f:c7:63:
2f:f1:50:97:b9:1a:9d:37:d7:dc:df:db:0c:34:19:44:ab:1e:
4b:08:83:36:41:fa:c4:d1:8d:4d:c9:41:7b:f8:36:41:d0:a4:
90:f1:2d:a2:a6:20:1e:b1:47:28:6c:07:ad:8c:27:0e:ba:f8:
64:4b:bd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:06:23 2025 by rpki-client