Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
File: a4PZKBp6UIq_xJUwSumcmMBCxhE.mft (raw, json)
Hash identifier: gd9/lE/Rh/PGcwQ+e15XW9sFJLlr+bt2wvStPnjStU0=
Subject key identifier: 58:6F:BD:4A:19:26:F1:14:2E:F6:27:01:5B:60:96:CE:29:76:C6:1B
Authority key identifier: 6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
Certificate issuer: /CN=6b83d9281a7a508abfc495304ae99c98c042c611
Certificate serial: 019A725CB1D28D359F533B8C6FE8A6E6E6CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
Manifest number: 16AF
Signing time: Tue 11 Nov 2025 10:01:08 +0000
Manifest this update: Tue 11 Nov 2025 10:01:08 +0000
Manifest next update: Wed 12 Nov 2025 10:01:08 +0000
Files and hashes: 1: a4PZKBp6UIq_xJUwSumcmMBCxhE.crl (hash: IY2CjfXO/IH1Jj7P+PxmWtZx+VdgAAbn8XtkCwBg+Xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:b1:d2:8d:35:9f:53:3b:8c:6f:e8:a6:e6:e6:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b83d9281a7a508abfc495304ae99c98c042c611
Validity
Not Before: Nov 11 10:01:08 2025 GMT
Not After : Nov 12 10:01:08 2025 GMT
Subject: CN=586fbd4a1926f1142ef627015b6096ce2976c61b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:dd:7f:0b:08:ea:71:6d:b9:20:15:76:66:ef:
28:ad:be:9c:94:cb:71:2f:e4:94:77:13:20:42:2d:
4b:15:41:7c:0c:4d:3a:6a:db:91:93:ec:14:39:87:
65:ad:6a:a1:3f:ee:4c:47:98:8e:fb:b9:06:9c:15:
e3:00:fa:54:5f:df:28:3b:f7:2c:ca:8e:28:7c:50:
75:5c:ec:b7:76:ff:d7:3e:59:7e:ae:a3:ea:f9:5c:
b2:51:90:17:39:4e:67:ef:7b:66:91:a5:0d:5f:28:
93:ef:2d:e9:31:75:de:b3:ab:e3:64:8d:22:5a:3f:
55:83:a7:8a:b1:ed:da:6d:bb:33:a3:fa:1f:7b:b1:
f2:d6:d9:9f:0d:d9:33:b7:f0:d3:c8:57:ec:4b:b5:
3a:4e:57:10:e0:c2:d7:ce:62:cf:f1:4f:7e:2a:a4:
2d:5e:1f:6c:b0:3e:c7:d9:d7:93:ed:8f:57:54:74:
37:57:d6:b9:49:92:76:3c:47:e1:46:4f:83:8f:90:
e5:35:e3:c3:23:33:0c:f7:37:33:76:70:67:81:d2:
b7:98:4d:8a:05:31:85:0e:94:44:e9:1c:0c:df:44:
4d:26:65:02:e7:54:8c:d8:6e:59:b5:62:b5:79:1b:
c0:04:75:ef:72:47:70:1d:6c:00:b3:11:16:d6:9e:
92:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:6F:BD:4A:19:26:F1:14:2E:F6:27:01:5B:60:96:CE:29:76:C6:1B
X509v3 Authority Key Identifier:
keyid:6B:83:D9:28:1A:7A:50:8A:BF:C4:95:30:4A:E9:9C:98:C0:42:C6:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4PZKBp6UIq_xJUwSumcmMBCxhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/80c9e3-3b89-4e3c-aa37-03fef32af706/1/a4PZKBp6UIq_xJUwSumcmMBCxhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b4:e9:e3:c4:77:44:95:8b:5d:12:9d:0b:9b:7a:73:99:dd:
b0:17:61:14:af:1f:57:31:e5:b9:00:9f:c1:b5:b7:db:6b:f2:
8b:8a:89:67:0e:b6:1f:d1:ec:9b:aa:76:7f:f9:b2:9b:1e:43:
65:d3:09:12:28:35:80:e4:34:99:b6:3c:03:52:75:a7:ab:c8:
13:e7:ee:89:7d:6d:da:1f:3d:6a:b5:cc:e2:8d:32:6a:fa:fe:
28:9d:f3:6f:5c:7b:f2:ba:cd:79:fe:49:e0:22:69:8f:53:f0:
dd:8c:e0:52:f2:9a:56:9a:70:b2:11:8e:a4:1e:2d:df:31:0e:
42:e1:43:cd:f8:0b:80:f0:03:e0:34:2f:31:fa:ca:d3:48:86:
a4:7d:bf:21:66:f6:70:a7:88:e9:17:91:e6:cd:59:ad:d0:8e:
e3:a8:99:5f:c6:09:6a:1a:66:95:bf:1c:5d:2c:4c:31:04:8f:
62:e8:4a:f1:74:bd:4b:40:55:f6:dd:5b:87:44:54:0c:90:05:
e5:7f:85:04:95:41:2e:73:88:76:dd:5a:f2:bc:1e:1b:de:ed:
42:7f:5d:02:1c:b8:87:95:f3:8d:9f:ac:03:5b:fe:f3:4d:aa:
aa:15:1b:79:9f:8d:6b:b8:cc:de:be:6e:ad:1a:b1:28:80:8d:
72:3d:65:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 16:46:10 2025 by rpki-client