Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: edWwIgkQCFbQB0Ba4ttgdkebuZ5gFa8mD+Bedi7IhRA=
Subject key identifier: 09:71:D0:0D:E6:59:C8:D1:AF:35:EE:38:71:13:20:88:18:7E:FE:A0
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 0199FC8FB3F9B120179337A7425201903752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 1672
Signing time: Sun 19 Oct 2025 13:01:40 +0000
Manifest this update: Sun 19 Oct 2025 13:01:40 +0000
Manifest next update: Mon 20 Oct 2025 13:01:40 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: BNRkDhHmH0wTjBmmrYW3jnS6G0o9FGix+WWcsoI/xv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:b3:f9:b1:20:17:93:37:a7:42:52:01:90:37:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Oct 19 13:01:40 2025 GMT
Not After : Oct 20 13:01:40 2025 GMT
Subject: CN=0971d00de659c8d1af35ee3871132088187efea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ee:3a:73:ff:20:e6:0a:7f:b4:d3:59:83:30:
7e:ac:83:3b:8e:65:21:61:71:ac:39:72:9e:96:83:
12:d2:a7:94:64:dd:f7:26:f7:86:60:50:c2:64:6c:
b8:8d:07:3a:03:98:80:65:c4:b6:ec:f9:ab:23:76:
a3:95:cd:9e:a2:7d:fb:43:05:04:3c:fb:e3:ac:b1:
65:fb:00:79:46:a5:ea:8a:29:a8:ce:ee:ba:91:b2:
df:46:c3:40:24:61:be:2b:fd:93:76:b7:39:62:2f:
f3:0d:ef:3b:ff:03:43:d7:79:73:58:f2:b9:a2:74:
3c:bb:8a:d8:0d:58:a8:77:b3:2f:c9:78:a3:8b:1a:
60:eb:42:e3:e7:13:60:b6:ba:54:43:2e:da:7a:f1:
d7:4b:52:28:9d:da:95:46:44:34:21:de:70:de:a2:
d5:79:02:b3:68:c1:9a:f5:3f:80:2b:a4:11:7e:2e:
97:be:27:68:b0:d7:12:b5:3e:e4:db:cc:81:fc:d2:
61:f2:b4:fe:83:3b:3b:a2:d1:aa:b8:df:e5:e2:39:
f5:e7:7b:9f:55:83:a3:80:36:ac:6a:2b:18:61:e2:
bb:a3:41:9c:e1:30:68:00:c9:25:2f:b7:80:e8:65:
47:d5:f1:ea:01:73:7b:45:60:c6:9e:c0:f5:7b:45:
cd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:71:D0:0D:E6:59:C8:D1:AF:35:EE:38:71:13:20:88:18:7E:FE:A0
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:cd:d4:7f:21:fa:b4:fc:e6:2e:d5:44:06:29:54:e9:b7:be:
99:58:5e:63:1d:f0:9c:b4:09:00:6a:13:67:b3:a5:c2:45:ac:
2f:1c:a1:80:4e:6c:1b:e2:6a:80:f5:db:2b:c0:21:c3:c2:c4:
c8:5f:93:3f:0e:bc:81:dc:3a:8d:14:c5:4b:0f:a0:7a:7c:93:
a8:c4:f5:29:01:fd:d0:4e:01:fa:f0:ea:d1:08:ee:f7:31:55:
4d:67:2a:a4:0f:53:51:fe:36:40:66:7d:c2:79:f0:f2:9c:b5:
1f:5b:8c:53:13:8b:05:94:4d:41:30:20:d1:7f:99:c6:eb:ac:
64:e7:94:7f:ea:b6:25:e6:4d:12:35:b5:7e:63:71:8c:58:86:
43:7b:05:1c:bd:00:0b:27:d7:79:01:1e:36:3f:dd:77:e2:5f:
f6:c9:98:8f:3d:9b:e6:78:5a:ed:b0:be:ea:39:51:6a:58:91:
84:e1:97:5d:c7:2a:b1:ce:fc:5b:bb:5e:07:58:73:08:33:b8:
46:8f:e0:b8:e4:68:2e:45:3e:79:e6:f9:7f:ea:9c:3b:09:a6:
41:ea:1b:80:59:71:47:6f:a5:02:5e:a3:88:75:98:7c:b1:c8:
ff:76:94:14:e8:6a:94:3a:ec:c4:e0:69:b0:f8:e4:e4:79:97:
50:6a:48:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:07:42 2025 by rpki-client