Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: sTgPJROMMaZGezLFJEyV2uqZylDNFJ+TQfoaABBYi+w=
Subject key identifier: 57:66:BF:84:9D:27:44:DB:25:6E:54:DE:B5:BB:4A:9F:C4:04:CA:52
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 01984A0A2ED6767F4A317F5EB78129A00C41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 1591
Signing time: Sun 27 Jul 2025 04:00:37 +0000
Manifest this update: Sun 27 Jul 2025 04:00:37 +0000
Manifest next update: Mon 28 Jul 2025 04:00:37 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: Nt++BNDcoc4Fuzo+gRiTRwUdPm4/B8TrouDkw7OBNU0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:2e:d6:76:7f:4a:31:7f:5e:b7:81:29:a0:0c:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Jul 27 04:00:37 2025 GMT
Not After : Jul 28 04:00:37 2025 GMT
Subject: CN=5766bf849d2744db256e54deb5bb4a9fc404ca52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:97:60:bf:9a:78:db:15:c9:40:97:77:0a:
84:2c:ba:79:77:c2:40:63:dc:7a:cb:35:cf:50:44:
96:a8:68:6c:a3:8c:87:d4:ea:16:5f:7f:e9:6c:42:
9f:b0:9e:74:15:8f:18:d1:8c:60:0c:e8:74:0e:74:
21:79:2d:48:4d:26:52:32:7a:94:b3:ff:e5:a3:52:
84:6a:56:11:c9:55:80:f8:c9:47:e9:16:5b:d7:5f:
07:71:c0:6e:27:59:e8:0f:c9:14:39:7c:7c:88:be:
d3:e8:00:69:43:e9:26:65:48:36:26:d8:61:6a:ff:
61:00:0d:14:28:dc:12:04:4c:49:fc:13:c0:97:83:
cc:97:41:41:9f:dc:e8:33:65:28:73:e9:21:01:72:
24:64:29:6e:29:25:9e:bc:95:e4:1c:49:57:eb:0d:
e3:cf:71:e3:d5:0b:5a:8a:94:eb:df:7d:a1:3d:d9:
ab:a7:6e:a1:7c:d4:18:12:5f:76:08:65:88:1c:65:
b3:2e:b5:3f:df:6d:fc:6d:e1:2d:9b:d5:75:b7:4f:
2a:bd:40:07:54:39:d3:48:6d:c4:10:80:4f:1b:90:
11:e8:de:4b:f4:00:18:92:80:6d:51:ea:a6:4c:b2:
41:e9:ed:e9:73:29:ca:f0:a1:48:93:ec:75:8b:4f:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:66:BF:84:9D:27:44:DB:25:6E:54:DE:B5:BB:4A:9F:C4:04:CA:52
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:e2:9a:a5:36:71:aa:4f:b8:05:39:b0:14:ce:31:75:72:5a:
4a:bc:df:ed:ad:67:b5:af:2a:47:58:e5:ed:01:cc:e6:2e:1f:
32:5a:98:53:59:5d:51:bc:a7:6d:23:92:0f:6a:a9:94:0b:8d:
44:cb:90:a5:7f:7c:06:0e:b0:a9:4f:86:94:03:04:6e:ac:ad:
5b:94:0f:c0:c4:da:d9:a6:b5:aa:24:78:f2:3e:70:99:0d:d9:
cd:15:dd:0b:26:c2:25:3e:0f:6f:98:02:98:38:04:ad:88:ce:
90:39:12:b6:0c:f2:0f:15:7f:1a:bd:94:a7:d5:1c:e9:73:c5:
37:86:79:29:34:86:a4:33:b9:09:66:4c:57:96:3d:3e:d5:70:
9c:2f:44:ea:2f:95:e8:a3:f7:5a:2d:51:03:fd:7f:ea:c9:2b:
07:7b:9c:b4:1e:05:bc:2f:e1:f8:4f:32:9e:2a:c2:e3:ba:22:
0d:cc:fc:1e:97:3e:4f:cd:9f:0e:8e:74:2f:d8:7f:1c:99:42:
12:c3:39:80:e2:71:64:01:c7:f2:21:29:cb:ff:ad:b9:54:5a:
b6:ef:43:91:8f:9b:e6:ea:ae:d0:67:e9:3f:05:78:68:5d:7b:
1c:61:84:b4:80:36:cd:6e:e5:f0:9b:d6:33:0c:38:07:15:1a:
a2:9c:ca:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:34 2025 by rpki-client