Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
File: a4T-xJBquJAgoRa2hEbM6vbMUA8.mft (raw, json)
Hash identifier: ZGuP6n4PGfMyiPTla00O30DLJsppLxQSLeB1n6MlmzU=
Subject key identifier: CE:99:77:5B:C8:9F:57:CB:EE:BA:37:CB:C2:B6:B1:75:91:83:FD:53
Authority key identifier: 6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
Certificate issuer: /CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Certificate serial: 01964FA35EDC17F679A31C01710C1C74C110
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
Manifest number: 0A83
Signing time: Sat 19 Apr 2025 20:00:28 +0000
Manifest this update: Sat 19 Apr 2025 20:00:28 +0000
Manifest next update: Sun 20 Apr 2025 20:00:28 +0000
Files and hashes: 1: a4T-xJBquJAgoRa2hEbM6vbMUA8.crl (hash: qDSD1Go7JPsSag045YQRSNrq0xx0NMLmER/Lg2SWfd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:4f:a3:5e:dc:17:f6:79:a3:1c:01:71:0c:1c:74:c1:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b84fec4906ab89020a116b68446cceaf6cc500f
Validity
Not Before: Apr 19 20:00:28 2025 GMT
Not After : Apr 20 20:00:28 2025 GMT
Subject: CN=ce99775bc89f57cbeeba37cbc2b6b1759183fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:26:de:55:f6:68:04:75:a7:93:d3:83:74:a7:
ac:fe:8e:10:27:ec:06:8c:18:d4:09:ae:fd:0b:ba:
83:43:ae:78:13:d9:70:fe:14:ec:e5:fd:be:a6:13:
6e:9d:e2:4d:63:38:4a:d9:27:81:6e:6c:c8:04:79:
d8:de:80:d3:83:7e:d2:36:df:75:92:7d:91:44:25:
04:4c:81:17:55:34:b0:f0:9f:75:40:9c:b6:ea:fd:
71:40:70:d2:f3:a2:00:cd:0f:64:fd:3f:82:8a:fd:
65:56:7c:c0:1f:cb:28:c7:e8:58:95:4c:81:1b:7f:
19:59:30:af:81:65:29:61:21:7a:64:8e:b9:50:05:
e3:39:79:12:70:f6:f3:f0:cb:9e:be:ee:da:37:0e:
84:53:1b:e7:86:41:8b:40:be:ec:e7:10:ad:2e:45:
8e:a1:f5:92:56:ba:9e:80:73:65:4a:ba:33:61:dd:
05:cc:6e:96:0e:c5:7a:22:3a:27:4d:bb:44:bb:59:
be:19:39:d3:91:9e:cb:05:b8:73:6b:c1:aa:df:9b:
82:9c:0c:62:26:bc:26:99:a2:f8:30:21:04:20:e5:
78:f7:af:f6:ac:db:03:55:12:ef:af:43:20:f4:f8:
6c:51:38:31:3e:c1:c0:4c:4c:fd:6d:dd:09:9e:1d:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:99:77:5B:C8:9F:57:CB:EE:BA:37:CB:C2:B6:B1:75:91:83:FD:53
X509v3 Authority Key Identifier:
keyid:6B:84:FE:C4:90:6A:B8:90:20:A1:16:B6:84:46:CC:EA:F6:CC:50:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4T-xJBquJAgoRa2hEbM6vbMUA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/0263fa-3aff-47dc-82b8-d1d947e73309/1/a4T-xJBquJAgoRa2hEbM6vbMUA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:62:9f:cf:9c:8d:e4:a7:8d:b9:b9:7e:28:57:91:d6:87:e7:
44:fc:74:ca:10:e4:2c:b1:d9:0f:71:7c:0a:3f:d2:4f:a0:3d:
a9:a6:77:d5:a6:c3:b2:84:91:9a:02:27:9a:d9:b4:a3:1d:b6:
f4:52:c5:58:99:e7:45:76:08:6a:2c:ab:7a:8d:e4:90:3d:17:
bb:b6:8d:ed:f3:34:d8:ba:ae:ce:9e:51:f4:10:da:e3:35:9e:
06:68:60:8d:46:ec:63:33:86:a3:b4:40:16:7e:9c:f4:6f:55:
67:81:2e:2f:ee:43:17:e2:14:86:18:4a:30:05:10:02:d0:58:
c8:09:4a:34:89:b5:d3:6d:62:72:f9:eb:6b:8b:17:5c:dc:e6:
ac:6b:4e:c7:b8:e3:a9:5a:ed:cc:76:65:a5:ef:10:0b:c4:ee:
f6:08:e8:ce:3a:5b:87:d3:f1:00:db:08:c7:2e:63:c1:b0:16:
2e:fc:ad:bb:08:f0:7c:e3:83:70:b4:84:8a:78:d7:15:6a:e0:
fa:b9:23:92:ca:34:bf:d2:e6:4a:ce:ab:bc:3c:9f:08:6e:8d:
0a:f3:ca:86:37:79:4f:35:2b:ba:aa:70:e5:19:c7:b7:08:44:
b5:59:f3:88:e7:dc:64:4b:10:2a:63:5b:f3:f3:c2:14:50:c7:
8e:f8:d6:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:57 2025 by rpki-client