Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
File: a4QIvvwC39bmGQhUh4WgCKS3TWc.mft (raw, json)
Hash identifier: aOnueLLa2lLIZLrBYtN2x2TqKs80ZVaahwjHlkgky5c=
Subject key identifier: CA:DD:D5:6A:90:4A:F5:71:AC:04:66:B5:71:B2:74:61:26:AE:30:D8
Authority key identifier: 6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
Certificate issuer: /CN=6b8408befc02dfd6e61908548785a008a4b74d67
Certificate serial: 0198820C0E9CBD0435B8FAE1522EDC59116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
Manifest number: 0A71
Signing time: Thu 07 Aug 2025 01:01:24 +0000
Manifest this update: Thu 07 Aug 2025 01:01:24 +0000
Manifest next update: Fri 08 Aug 2025 01:01:24 +0000
Files and hashes: 1: XG_GoCIjsfzx85ZAfU48cGk_g2A.roa (hash: O4zvtPOigYM3HdyO+PNnJwZMHPFxCAa0+qt7cBa9RoM=)
2: a4QIvvwC39bmGQhUh4WgCKS3TWc.crl (hash: l1HoXIl7Hj5f8J9gblh0Y0pMdKtJ6gqjcvLdgIYSj+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:82:0c:0e:9c:bd:04:35:b8:fa:e1:52:2e:dc:59:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b8408befc02dfd6e61908548785a008a4b74d67
Validity
Not Before: Aug 7 01:01:24 2025 GMT
Not After : Aug 8 01:01:24 2025 GMT
Subject: CN=caddd56a904af571ac0466b571b2746126ae30d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:57:20:ea:4a:c1:1f:7c:51:83:f8:24:73:
f1:ff:59:4d:a5:d6:29:e7:1c:fd:45:3a:c2:e9:44:
f6:f9:7c:d0:c2:63:43:be:14:a1:43:b3:16:cc:a4:
c7:ac:8e:1b:57:a3:21:d3:ac:bc:ea:b7:37:5c:d2:
0e:c9:c6:07:0e:be:04:29:a8:91:71:f1:0c:62:c0:
a7:aa:43:d3:bc:26:8d:f1:cc:2e:b3:ea:56:c2:7c:
12:0b:0e:58:f4:00:c9:0c:fe:31:af:f3:48:7f:0b:
85:87:a4:0b:13:30:f8:9b:69:b6:64:ed:13:2a:eb:
d1:64:ce:0b:08:a0:2b:ed:9e:ac:70:68:8d:ae:87:
3b:d2:7c:6c:f6:11:b7:0d:b0:f0:ba:76:0c:91:67:
b0:8f:2e:3f:68:81:5a:58:22:ed:e8:1b:31:5c:30:
f3:26:c0:77:dc:96:e2:3c:d1:ac:ce:64:ba:ad:7c:
2c:0b:67:33:61:e2:30:38:75:bb:2d:18:53:1e:17:
89:05:44:5c:25:92:96:80:23:0d:09:86:cb:33:3d:
d9:50:7b:79:c8:7f:37:88:e5:85:06:85:05:b0:be:
82:13:79:1c:f6:33:fd:93:c8:ea:a8:04:bd:1f:5c:
ff:27:40:35:d4:f3:c1:40:bb:44:d8:d5:1c:e9:4c:
cc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DD:D5:6A:90:4A:F5:71:AC:04:66:B5:71:B2:74:61:26:AE:30:D8
X509v3 Authority Key Identifier:
keyid:6B:84:08:BE:FC:02:DF:D6:E6:19:08:54:87:85:A0:08:A4:B7:4D:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4QIvvwC39bmGQhUh4WgCKS3TWc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/9e615e-3610-4520-9484-7a8baeef5ee4/1/a4QIvvwC39bmGQhUh4WgCKS3TWc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:98:cb:3b:c4:03:44:a1:53:77:82:ee:92:e8:4b:0d:97:7a:
ae:c2:54:99:59:54:b4:b5:89:de:cc:08:49:24:8c:d2:44:2f:
1e:05:e7:fc:3b:2d:d8:97:42:71:1a:94:26:a0:3f:d6:65:b2:
ed:79:df:11:7a:a0:fb:fd:a9:5d:a1:e2:ba:42:5a:12:ac:35:
f3:39:0f:b3:bf:ff:ac:60:34:23:20:13:85:d3:8e:f8:88:79:
8f:bc:14:b7:c0:e9:bb:55:1f:4d:cf:33:d4:71:bb:54:d0:75:
75:e7:a8:d1:b0:58:5d:23:fa:d8:79:fc:25:10:a0:fc:10:3a:
7f:47:36:c9:ca:37:3d:6e:cd:aa:9d:de:eb:79:f3:8e:0c:a5:
0d:cd:9b:ef:06:02:40:02:f1:76:c2:a2:54:25:6b:c4:12:be:
11:18:80:2d:1e:2a:4c:24:80:6b:eb:49:ac:3d:3c:62:ad:11:
10:e0:c5:80:c7:a7:d5:f7:55:80:f7:42:54:ab:26:a6:50:bd:
a9:21:65:bd:4b:ce:7d:3d:b0:54:a2:fe:d5:7f:48:d7:9e:62:
ea:61:ea:c8:f2:e3:d1:f5:45:c9:86:0a:a0:6b:e9:7d:28:09:
63:4a:8d:1d:03:57:fa:c3:a0:49:3e:46:6d:4b:0b:08:b7:17:
2a:3a:4f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:56:51 2025 by rpki-client