
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
File: a0I7KaGCk2si34-YJt1YOgBZE0o.mft (raw, json)
Hash identifier: 6gh2P3m/p3Ir8WLxSFTvXAS+z9QP1c+86gZ0F5cUOu4=
Subject key identifier: 56:F3:79:E9:AD:1D:24:2F:38:D4:09:F4:84:7C:C3:02:F2:8B:D0:69
Authority key identifier: 6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
Certificate issuer: /CN=6b423b29a182936b22df8f9826dd583a0059134a
Certificate serial: 01974C32453A246860441993100215753211
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
Manifest number: 06A3
Signing time: Sat 07 Jun 2025 21:00:52 +0000
Manifest this update: Sat 07 Jun 2025 21:00:52 +0000
Manifest next update: Sun 08 Jun 2025 21:00:52 +0000
Files and hashes: 1: U_Lbl4dQRImqSP6zV_MXvnCzVro.roa (hash: k+fOfvjUjOj8hU8vOKkhlBwBO0V4NXX3JC8vdkG/viY=)
2: a0I7KaGCk2si34-YJt1YOgBZE0o.crl (hash: 7n9jFWxcdhk2/CkBOkFkvDE9+aHBnVHC8nKHJOBYkA0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:32:45:3a:24:68:60:44:19:93:10:02:15:75:32:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b423b29a182936b22df8f9826dd583a0059134a
Validity
Not Before: Jun 7 21:00:52 2025 GMT
Not After : Jun 8 21:00:52 2025 GMT
Subject: CN=56f379e9ad1d242f38d409f4847cc302f28bd069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:2f:10:b1:9a:ad:b5:6b:ef:e3:62:ae:9f:
69:80:e0:d0:b1:37:02:82:4c:20:7a:86:3e:f6:ea:
d3:94:45:92:30:25:69:e6:47:b2:7a:0f:ec:2e:5d:
a1:d5:87:2d:04:5b:13:c0:9c:90:be:ba:db:b0:17:
34:f7:e4:e9:db:3c:07:14:b2:28:fe:88:f4:d0:0a:
65:4d:22:58:f3:83:0a:c8:35:c1:8c:98:78:5e:99:
ce:7c:33:51:95:62:7f:72:10:25:5a:f8:e5:d5:99:
50:4c:d5:2f:e7:d4:6f:ec:72:85:18:8f:1a:37:90:
84:86:9a:d3:a9:93:bd:07:68:f1:de:6b:30:0e:7d:
24:00:44:dc:dc:13:9a:37:cc:86:cb:a3:4a:42:e7:
28:ad:25:07:9a:85:16:50:56:3c:ad:cc:fe:f7:34:
3e:ab:6c:d8:91:3b:16:ce:5b:a0:95:d9:5b:36:3c:
02:51:43:c2:40:7e:1f:2b:84:de:0b:f5:95:4b:f2:
8a:28:12:da:a2:5d:0d:1f:49:b2:5f:ec:e0:86:d3:
2a:74:4b:f6:45:3d:ef:47:ec:8e:14:41:85:3b:20:
9e:97:31:79:e9:c3:1d:d2:44:60:c6:d8:43:cb:77:
17:37:ea:5a:46:58:8e:69:01:4b:3b:25:2a:d1:01:
2c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:F3:79:E9:AD:1D:24:2F:38:D4:09:F4:84:7C:C3:02:F2:8B:D0:69
X509v3 Authority Key Identifier:
keyid:6B:42:3B:29:A1:82:93:6B:22:DF:8F:98:26:DD:58:3A:00:59:13:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0I7KaGCk2si34-YJt1YOgBZE0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ba0ff0-2be2-4286-a2d7-58a8a33d54a6/1/a0I7KaGCk2si34-YJt1YOgBZE0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:4f:b7:c7:1f:e5:a2:34:98:2f:b1:76:bf:29:6e:96:7b:17:
40:76:58:f2:51:4f:7e:b5:ec:4d:f0:75:85:7d:6e:55:f8:02:
e5:4c:90:50:7f:32:d2:01:d9:dd:a4:9a:c5:3a:06:97:8a:66:
58:3c:95:83:f9:ab:d6:68:99:ac:73:c9:03:16:1f:b7:6c:fa:
9a:41:84:81:06:6f:d5:e5:ae:2b:9f:4e:c1:8a:e6:e0:6a:b0:
e3:ad:4c:ba:80:2e:75:a6:25:66:51:71:f9:e6:e2:0c:2e:d2:
6c:8a:68:99:68:31:f4:0a:f4:92:c6:22:4b:29:75:a3:8a:8b:
ff:ed:86:b5:12:d8:8e:60:d2:bd:f7:66:6d:23:70:6a:e9:b7:
c4:7c:62:4a:11:fc:73:b8:cd:fc:ad:ea:02:19:61:79:10:44:
14:02:b8:b3:4c:ad:44:5f:5e:20:75:e3:62:4c:cb:ab:5f:23:
ee:27:1f:ed:24:64:06:db:c6:3c:73:b4:e3:f6:d4:fd:ec:18:
c3:b6:06:4d:0b:01:42:62:b6:0c:e6:71:24:c0:ad:16:c3:68:
1f:bd:59:4c:d0:e3:56:46:bc:22:3b:2c:9f:3e:57:4f:fd:70:
40:5b:be:97:91:38:8f:29:8d:17:9d:6b:ef:84:10:b7:c6:b5:
08:23:7e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:05:09 2025 by rpki-client