Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
File: a3GzSTijGjS_WGag8914w4qsYRk.mft (raw, json)
Hash identifier: 6wz4NpaO2kLMSFmAARLcm9J9X5DL3e7rZK7xiJcZrOs=
Subject key identifier: 80:16:D9:88:48:B5:9D:7C:75:A5:68:2E:46:64:29:45:30:10:8D:9A
Authority key identifier: 6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
Certificate issuer: /CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Certificate serial: 0197470B9B5DFA18DE6533908AD321EBC378
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
Manifest number: 09BE
Signing time: Fri 06 Jun 2025 21:00:32 +0000
Manifest this update: Fri 06 Jun 2025 21:00:32 +0000
Manifest next update: Sat 07 Jun 2025 21:00:32 +0000
Files and hashes: 1: 2K0uKSMybLcdA8jtmNxG5Ki84QY.roa (hash: 5mE2Q4t19bkfyumGCGmg6dxDWvIkT1fJkVfrU9nbK78=)
2: 6FGsGLFn7A73WCT0SPiFHEX5nI8.roa (hash: 7Hh/w12WqCnZ+Rx2BO6W7oVN9o4uT5fOf8UbGGxI1Zw=)
3: a3GzSTijGjS_WGag8914w4qsYRk.crl (hash: WeH0Im+4nGjyDdAonP/EyF8dwPkiCWA2ppPPF4y20Ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:9b:5d:fa:18:de:65:33:90:8a:d3:21:eb:c3:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b71b34938a31a34bf5866a0f3dd78c38aac6119
Validity
Not Before: Jun 6 21:00:32 2025 GMT
Not After : Jun 7 21:00:32 2025 GMT
Subject: CN=8016d98848b59d7c75a5682e4664294530108d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4e:4f:f5:84:32:1a:a4:d8:0f:3d:6f:91:48:
a1:9a:9f:6e:11:92:f6:14:cd:0a:ba:90:27:32:3c:
74:95:7f:48:f9:d2:04:bc:bb:49:78:f4:55:33:84:
b5:77:dc:6d:7f:fe:1a:72:e8:68:48:86:51:1b:ba:
6a:f6:f6:ba:93:ce:c3:ec:a7:89:7b:eb:36:5c:d3:
ef:02:33:e7:7b:f9:40:54:04:27:a1:3c:4d:c3:62:
ff:b9:e3:5c:96:e5:4a:2d:aa:b4:40:68:02:a5:c9:
4b:73:c2:1a:23:45:21:f3:a8:6e:65:50:d8:b4:a9:
75:e3:95:95:dd:6b:a8:d2:0e:f0:83:89:d0:9a:4c:
04:87:ac:8e:bd:3a:5f:e5:57:56:36:1d:17:49:18:
ef:19:33:4b:b8:93:a9:b0:11:24:5f:77:53:93:72:
a2:77:b8:6f:f6:ce:50:c9:48:f1:c2:63:3b:aa:39:
2f:a4:da:7a:af:7e:75:97:84:c5:5e:a7:df:4a:9d:
57:ce:1b:c7:f6:cb:7a:eb:c3:53:0e:9e:32:d3:cd:
8f:a4:56:45:6f:21:7f:00:a5:54:59:25:3b:e4:de:
81:c7:c8:bb:8c:5f:80:f5:22:c7:5c:6d:d8:b9:5b:
07:42:25:c3:af:ef:85:51:50:67:63:8d:57:fa:0e:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:16:D9:88:48:B5:9D:7C:75:A5:68:2E:46:64:29:45:30:10:8D:9A
X509v3 Authority Key Identifier:
keyid:6B:71:B3:49:38:A3:1A:34:BF:58:66:A0:F3:DD:78:C3:8A:AC:61:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3GzSTijGjS_WGag8914w4qsYRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/731034-5fd5-492b-9daf-6f56e1fa0230/1/a3GzSTijGjS_WGag8914w4qsYRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:79:97:08:07:26:0e:d3:e9:44:2b:57:4c:40:c4:02:0f:c0:
d5:b2:32:84:b3:23:7a:f0:7f:dd:39:6e:aa:49:b6:f7:e7:94:
9f:d3:61:d1:e1:f0:56:3c:76:55:84:a5:a4:7a:71:30:a9:53:
69:f8:bf:37:0e:bc:6e:cf:30:56:a8:41:66:7c:01:e8:7a:c7:
6d:df:fb:1c:2e:58:2b:18:7a:e0:d7:de:3d:9c:aa:1c:73:aa:
fb:cb:ca:23:ab:6d:7c:57:a2:21:41:7a:9e:ae:51:78:e1:6a:
2d:98:da:69:a6:98:7f:51:a8:19:94:71:03:2c:29:e0:8e:88:
f2:b7:b1:dc:cd:96:ba:9d:1c:d8:09:d9:ca:83:24:02:f7:f5:
10:72:ac:de:a1:3a:4b:e9:66:20:1a:45:7e:96:55:8e:94:5e:
7f:9e:8c:b4:93:79:d4:f3:ad:69:96:7c:38:08:e2:2c:33:ff:
d2:b4:05:95:37:5c:80:1b:75:9b:86:5b:46:a9:4e:33:13:e6:
bd:94:50:10:5b:3e:9f:43:6c:bc:59:cf:1b:7d:95:86:51:23:
d1:82:1e:6c:5c:7d:30:1d:21:f7:18:60:28:8d:3d:5d:c3:02:
18:d6:5b:a8:0d:9d:4b:95:60:a3:17:a2:4a:62:44:d7:61:ae:
a1:cc:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:46 2025 by rpki-client