Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: 2YTqt0bgn9+8yEqcVYacveGxP16P2EnNbuei+mg2Wnk=
Subject key identifier: EB:2E:AB:A0:CF:8B:F1:39:A1:D0:D4:57:C7:B9:42:7C:25:B5:AE:C7
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 01987298D26746324F91ADEA896F7AA71725
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 15A6
Signing time: Mon 04 Aug 2025 01:01:14 +0000
Manifest this update: Mon 04 Aug 2025 01:01:14 +0000
Manifest next update: Tue 05 Aug 2025 01:01:14 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: yiU4MxsxHAY8QTiliwVIdc3130KwRKl3RYGxjwbaTWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:d2:67:46:32:4f:91:ad:ea:89:6f:7a:a7:17:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Aug 4 01:01:14 2025 GMT
Not After : Aug 5 01:01:14 2025 GMT
Subject: CN=eb2eaba0cf8bf139a1d0d457c7b9427c25b5aec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f0:16:25:35:6e:a6:0c:75:6e:e8:22:5c:98:
8e:ed:61:31:79:d0:28:16:27:2f:3a:b9:73:35:e1:
97:4d:d6:55:76:a6:fc:4d:dd:e2:4f:72:a5:e1:ac:
4f:84:6a:88:0e:10:48:6d:24:b4:63:48:47:bc:72:
53:cd:57:0b:1e:ba:77:43:12:00:7a:51:55:33:1a:
91:b1:1a:f0:c9:60:bd:54:3d:95:1b:fd:65:98:e4:
b6:c2:b3:b2:27:d4:6c:91:66:29:b7:3c:91:be:ba:
0b:68:d4:69:59:12:9a:ef:aa:fa:2b:24:9f:ef:62:
49:13:fe:b9:a6:34:ea:83:f9:ff:9b:01:41:5c:3b:
69:c3:d6:73:37:ce:4c:a1:ca:98:c4:fa:84:e4:15:
12:c7:bb:2e:89:a4:ea:d7:91:c4:d3:63:4f:51:0e:
1e:fc:f3:9f:90:75:09:e6:f3:8a:2a:5e:57:32:76:
42:93:8b:b2:1d:fc:77:70:51:b6:32:38:67:12:a8:
08:1d:14:db:f9:f2:11:3c:4a:ab:ff:17:9a:84:73:
92:2b:db:b5:c6:4a:a6:42:f9:4c:70:4b:c1:5f:6e:
60:a0:81:ed:8a:8a:9d:1b:f2:44:72:91:6d:f7:41:
1f:37:f6:04:62:41:87:ae:d3:cc:4a:cb:95:d2:ae:
a9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:2E:AB:A0:CF:8B:F1:39:A1:D0:D4:57:C7:B9:42:7C:25:B5:AE:C7
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f2:eb:77:0d:b1:94:a8:11:ad:6e:82:9e:a5:ca:e0:1f:f1:
f7:d1:76:df:0e:9b:35:7a:84:39:04:19:b2:81:35:94:38:71:
9e:23:26:ca:9e:85:d3:5c:06:cd:d6:ce:f5:57:e6:a3:ea:c7:
af:07:68:38:01:e7:19:b3:47:1b:73:e7:0e:6e:db:a0:6d:41:
7b:44:8f:dd:d6:06:28:d2:a8:de:f1:a3:a8:b0:01:c7:92:9b:
9c:1a:c3:2b:28:38:ae:75:ba:3f:25:66:53:9b:e5:57:89:e3:
ed:ba:a1:4c:95:d6:f8:1c:af:eb:02:e6:9f:50:c4:35:c1:44:
88:41:d0:ec:58:f2:32:2c:86:87:d0:ea:38:d7:dd:1f:47:28:
08:2a:9f:50:66:46:7b:c7:94:e8:20:e9:75:b3:90:ca:8e:db:
c1:93:67:ad:f7:f3:6c:fb:65:86:5f:7b:14:83:41:f3:44:f5:
d5:c6:a0:6d:86:00:12:55:64:72:6e:54:6b:61:12:5a:49:93:
04:7f:4d:74:f4:5d:e9:79:14:ec:98:1d:74:d1:20:3b:26:21:
a1:7a:ed:ec:35:ad:68:71:c7:43:ac:55:a6:6f:74:05:76:4f:
1a:e3:3e:ab:e3:29:30:58:d2:cb:c6:25:2a:51:0a:40:e9:f9:
52:3c:78:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:45 2025 by rpki-client