
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: wR9D3FQZvHLOSrYJlksCcmFSRLJhXNoG8MuSuqumtts=
Subject key identifier: 2E:9B:1A:9D:AD:27:33:95:46:93:98:A1:6F:32:BE:D6:64:AF:24:DA
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 0198819DD22A3522AC340E810D871D80F2EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0BA6
Signing time: Wed 06 Aug 2025 23:01:00 +0000
Manifest this update: Wed 06 Aug 2025 23:01:00 +0000
Manifest next update: Thu 07 Aug 2025 23:01:00 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: ZlpZDMBzuAWTfn74bgHHLW/t7T75LCozqjwXWPI3PPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:d2:2a:35:22:ac:34:0e:81:0d:87:1d:80:f2:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Aug 6 23:01:00 2025 GMT
Not After : Aug 7 23:01:00 2025 GMT
Subject: CN=2e9b1a9dad273395469398a16f32bed664af24da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2a:a8:fd:a1:8c:5e:4e:94:7a:8d:fe:42:b0:
7f:4c:49:6b:a6:8c:57:05:9c:e8:1b:6a:52:58:7e:
4e:c4:99:95:4f:92:55:15:88:77:53:ce:7d:4e:fa:
8b:af:6c:ad:94:69:34:dc:c9:c3:83:df:24:d5:4a:
23:19:f4:e5:77:71:d3:b3:b3:36:75:a9:27:93:02:
76:3b:e0:41:6d:78:0a:17:4f:27:9f:46:d7:f3:a9:
67:5b:c7:74:74:f3:b2:0d:e2:38:33:c2:51:8e:34:
49:a5:c0:fd:91:3e:f6:3d:4a:22:33:a7:c5:6b:d6:
b9:68:ae:15:06:42:5a:4d:dc:11:38:23:dc:37:f1:
11:25:52:26:bd:fc:65:fd:d4:88:d7:14:46:35:8d:
d4:f2:6c:b8:4c:be:06:62:e2:38:c1:f5:e2:d6:d6:
55:04:ae:62:3a:1e:1b:76:b1:73:c6:67:a0:1a:35:
e3:87:9a:65:0f:97:7c:d1:a1:2d:8c:f5:87:36:e2:
c9:f7:b2:c8:eb:2b:cb:5b:ca:20:09:f9:0f:ab:ce:
d2:40:74:3a:59:58:af:d8:a6:19:f8:d4:50:8b:3b:
a5:d3:5b:f1:86:a8:fb:ed:45:70:dc:2e:10:1f:e6:
19:08:cf:dc:32:dc:53:32:17:f3:aa:02:b3:46:32:
76:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:9B:1A:9D:AD:27:33:95:46:93:98:A1:6F:32:BE:D6:64:AF:24:DA
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:60:4c:27:b4:ba:f8:9b:44:fa:95:6a:b2:83:fd:36:e1:4d:
ea:27:4d:ed:95:ae:b2:4d:97:1c:0c:21:12:dc:ec:6b:fd:26:
c1:db:30:cb:d9:3c:8e:8d:b9:42:37:ca:c1:04:f2:7f:82:cc:
76:ef:c6:1f:95:c8:e8:46:3f:5f:15:d2:eb:ad:e1:0b:d2:69:
0d:25:83:f6:e7:16:a8:f3:e3:47:a0:ff:69:54:12:25:8a:1c:
5c:48:c7:86:c9:64:eb:3e:7c:01:33:cd:d3:2e:b6:3a:09:ad:
4c:bb:99:08:f0:9e:5b:d6:ee:39:15:01:6b:eb:9f:76:ba:f0:
77:60:91:07:04:0b:9c:32:7c:b0:5a:43:ab:ab:fd:c2:cd:89:
9b:8c:34:82:28:b8:22:37:83:88:1c:43:67:d0:f5:88:fa:06:
78:e2:7c:78:d7:eb:8f:dc:5e:0a:86:b4:b7:12:cd:30:a6:2b:
e6:9a:01:6b:2f:5e:9b:6a:62:4f:92:7b:83:a5:de:75:0b:c2:
d8:bf:d0:0d:0b:ad:cb:cb:29:b3:1f:2e:38:30:be:95:6d:d9:
24:2b:c9:3b:10:a9:82:17:d8:1c:41:30:21:3f:48:6d:2e:a1:
e6:e0:ba:49:98:99:b1:e5:31:97:b3:16:f6:a8:17:52:70:2c:
cb:95:ec:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:04:34 2025 by rpki-client