Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File: a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier: 4XsSP22aN5V+w/+eZa03jnbvtpNedlviA7SEP6dnqZA=
Subject key identifier: FE:E5:91:AF:F7:36:22:C0:6F:49:8E:5E:AC:35:50:E3:99:04:E8:70
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 01976A05BE996D595D6CEC1F2929F0590517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number: 09E0
Signing time: Fri 13 Jun 2025 16:00:50 +0000
Manifest this update: Fri 13 Jun 2025 16:00:50 +0000
Manifest next update: Sat 14 Jun 2025 16:00:50 +0000
Files and hashes: 1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: QkqQrGidxK7TBsrWbWWX3rD2C360RFBO40GqL9OaL6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:be:99:6d:59:5d:6c:ec:1f:29:29:f0:59:05:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Jun 13 16:00:50 2025 GMT
Not After : Jun 14 16:00:50 2025 GMT
Subject: CN=fee591aff73622c06f498e5eac3550e39904e870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:95:b8:08:4e:78:84:ff:ab:fe:d8:36:b1:ff:
39:c3:e7:4d:44:65:7e:5f:1c:b8:89:68:0e:0a:03:
f5:81:88:f2:12:74:2b:b4:fe:8d:f1:de:44:f8:66:
88:9d:2c:7b:7c:40:e3:55:5a:14:5e:ee:29:e3:dc:
1c:06:fd:26:3a:7e:be:fa:c8:50:63:6e:ab:c1:48:
6c:d2:fa:91:12:b4:8f:0a:09:c8:43:39:42:fa:d9:
fd:17:b7:57:01:24:fa:5f:ae:01:70:f1:65:25:9d:
2a:b5:f1:50:20:71:10:d8:c8:88:e9:a8:08:af:27:
14:e5:57:90:2c:d7:d4:78:1a:7e:8e:e2:e0:6a:54:
37:b8:82:cc:80:2f:28:2b:43:e0:94:dc:fa:ff:f2:
cc:28:10:86:06:82:56:6e:60:c2:9e:47:5d:82:56:
87:f7:d6:56:d1:68:8f:eb:84:c7:6a:bc:5b:8c:6c:
11:de:41:14:e0:db:00:c7:97:18:49:42:fe:ea:79:
67:8b:e0:af:3a:54:64:8f:25:67:53:7b:57:a3:2f:
c7:b6:bc:5b:2a:01:ed:2b:51:7b:02:e5:58:a5:11:
32:7d:56:aa:7b:1e:5d:0a:21:8f:d7:65:52:9d:1d:
e2:c3:49:73:cc:d2:7d:15:d7:e5:cc:3e:72:65:83:
b9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E5:91:AF:F7:36:22:C0:6F:49:8E:5E:AC:35:50:E3:99:04:E8:70
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:60:5c:48:63:bd:4c:de:46:bd:13:fe:a3:36:d8:8f:4d:c1:
95:7b:38:95:cd:30:aa:bc:00:a6:47:93:4a:79:dc:29:a7:2a:
1a:df:bc:1f:96:84:b4:b3:a7:db:8a:74:ca:90:8f:a9:4a:5f:
a3:eb:17:38:57:20:d0:3a:62:d8:08:40:39:c4:f6:02:70:2c:
ce:4f:ba:d9:27:eb:a5:8a:76:bd:04:a1:b8:c5:a0:f0:21:54:
05:9f:3c:2e:13:06:c2:6b:cd:5f:8e:1e:4a:27:8c:72:83:38:
d3:ae:db:69:1a:f8:c6:32:b4:6d:30:66:90:ab:4b:94:05:7b:
b1:9c:ba:38:92:71:8a:c2:df:8c:74:e5:54:4c:d8:fd:39:70:
12:cf:76:1f:80:ab:28:8f:9f:dc:59:ed:5f:7c:58:57:8d:08:
d9:1b:e5:da:dd:c9:90:53:5e:a0:dc:28:e9:d5:d5:42:16:0b:
2a:3b:6e:d9:a8:96:48:54:0f:57:31:30:f3:6e:d9:ae:82:d8:
4c:68:04:8f:e4:4e:84:c2:61:9c:a1:00:b2:73:45:4a:c7:36:
11:a7:53:83:5a:f9:db:3f:cd:2d:6a:b5:e6:e3:ce:a3:95:cf:
e7:ab:34:4e:e0:ae:18:be:9a:81:84:38:df:9d:8d:fc:1a:48:
c1:a2:f4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:40:17 2025 by rpki-client