Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: Y4p9OnQ2q4DnBuP6PRQkl9SsZ8OI/cEhecy5u1IIHqE=
Subject key identifier: 6F:2C:62:BB:33:6E:CC:61:5F:9B:E8:0B:C3:C9:29:CD:58:08:B7:FB
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019A4F997754374268429A63922CB2AF5B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 169D
Signing time: Tue 04 Nov 2025 16:00:48 +0000
Manifest this update: Tue 04 Nov 2025 16:00:48 +0000
Manifest next update: Wed 05 Nov 2025 16:00:48 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: tQglE/G8T3MQ/XXnvbFrQaf+Tghb4Xa6FHZhxVZkVys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:77:54:37:42:68:42:9a:63:92:2c:b2:af:5b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Nov 4 16:00:48 2025 GMT
Not After : Nov 5 16:00:48 2025 GMT
Subject: CN=6f2c62bb336ecc615f9be80bc3c929cd5808b7fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c7:85:a0:8f:9d:8c:91:a5:9c:8b:15:3d:f0:
ac:0c:6d:db:f7:4c:98:51:9c:56:60:5c:45:e5:b2:
ea:42:0f:ea:48:f3:33:6b:e2:59:3e:d2:68:d5:e8:
a5:f7:0e:78:95:28:fb:8e:6c:2e:70:0d:3b:ec:25:
16:0f:47:ae:f8:59:f7:00:b8:25:b3:eb:09:00:14:
46:de:03:2e:e2:12:61:5f:80:63:46:c4:42:5c:67:
1c:62:aa:9f:df:cd:62:44:53:37:14:c8:54:1b:9a:
2e:76:e1:be:17:71:fe:c3:21:1a:71:3b:2b:59:fb:
53:b2:bc:07:fe:b1:f7:93:75:4f:cd:40:a1:f8:2c:
46:f0:79:a9:45:1e:4d:90:e6:49:75:f2:51:d8:50:
ae:35:f0:42:3e:c7:e9:c7:07:4c:2e:8f:c5:67:69:
c7:c6:9c:a5:0c:93:26:75:9a:ac:b7:f2:22:99:fb:
85:fa:c9:c5:b7:29:be:7e:a6:3d:03:b7:56:92:ef:
0b:9f:04:fb:14:b6:8a:fc:3c:5c:43:5e:4f:e0:40:
91:f4:4f:b0:39:ec:2d:69:fa:84:91:61:68:ed:2c:
2f:70:95:c1:a8:e3:c7:a7:29:64:48:bd:32:e6:36:
d6:28:ea:ac:91:2b:23:89:f0:bc:9c:e1:7a:ac:33:
62:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2C:62:BB:33:6E:CC:61:5F:9B:E8:0B:C3:C9:29:CD:58:08:B7:FB
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:35:2d:55:6a:d7:87:8e:35:69:f9:d5:90:25:af:7c:22:5e:
54:69:32:2b:5b:0d:d2:8a:9a:2b:9f:c5:cc:d1:47:bd:18:35:
53:30:9c:48:cc:64:de:43:ee:20:f7:f3:cc:e6:c7:62:c4:5b:
9a:eb:77:3d:2b:5b:e0:43:79:66:b8:95:d1:5b:c4:13:3c:ab:
b9:f9:fa:4a:97:96:ef:80:be:be:9f:2f:6a:bb:56:4c:3d:4b:
31:6e:fc:43:cf:77:cf:ad:13:e0:99:c6:3a:8c:72:b5:5e:2b:
49:eb:de:bf:f9:56:bd:97:e3:fc:e3:a2:c0:18:36:90:07:d3:
91:10:ff:5f:63:97:15:0a:f8:c2:80:76:fa:82:b1:08:f1:d2:
63:ab:04:9f:9f:27:2d:01:5a:22:58:63:cd:9d:3d:a1:9a:75:
37:a8:73:48:79:bb:77:db:6d:1f:7a:2c:2d:42:b9:56:28:91:
bc:a8:dc:ea:41:86:ea:d9:e3:e9:c8:f4:fc:f4:0d:55:fb:f6:
a0:ba:e2:f4:5c:4c:bd:f8:c6:2f:91:2f:87:47:12:c4:46:6b:
0b:79:57:c0:c2:da:59:a8:9b:99:0e:5d:bf:a8:63:31:28:3a:
aa:d7:f2:93:cb:ba:57:15:af:7e:87:5b:ef:62:97:cf:e2:1a:
b0:b8:aa:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:36:32 2025 by rpki-client