Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
File: A8vbBZX8SJApOKePQsHq8KFZv0Y.mft (raw, json)
Hash identifier: jicE6WiNATxfod7kJYsGINGStd3OgvpdVxj0ecTN0Dw=
Subject key identifier: A1:36:51:9D:4B:10:C5:08:39:6A:29:2E:BC:0A:80:BC:FD:71:8A:A1
Authority key identifier: 03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
Certificate issuer: /CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Certificate serial: 01974A43703EFED69730B51C2F255BF7ADAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
Manifest number: 0A68
Signing time: Sat 07 Jun 2025 12:00:23 +0000
Manifest this update: Sat 07 Jun 2025 12:00:23 +0000
Manifest next update: Sun 08 Jun 2025 12:00:23 +0000
Files and hashes: 1: A8vbBZX8SJApOKePQsHq8KFZv0Y.crl (hash: 7hxOGZutSSDo/wrFtk71tMLDUAIu08ZC/eYwNxF/S4U=)
2: CkMelDZYJ8wLYR1cBeOcNR-SbG4.roa (hash: 6DRW9xC/bgUNN/0DP+fJRep1JSUrKnuaZJm7l+ZDw18=)
3: GK_repQ6rwK9wKBexoj_8KHn0ps.roa (hash: BVRGH6L3m9qE1hNSh0udH+0Cqw8KHPDP3+FP2Bc+9Fo=)
4: PwFex15w_vGu9rMsC-NGPYybEsw.roa (hash: oh3ulFFupTLJCwmoHULEmcM0EU2doUd+YoDkAtl9zLo=)
5: Se_t6NLKu8IA2sTkrVOBiKVsQwY.roa (hash: phtV0BDD2FsHScjhDeHLatllFRKkRPV0UJtMe0PEg8c=)
6: cWH5PPaYfZWUJba_G0n_uzh_rsc.roa (hash: C8oVSKijBzzlBacVotbOoAmP0eM+u3jK9TaM8PG08eI=)
7: eK7sZ1D_OT19uO-hHprpcrVXcWU.roa (hash: bVKg53TVS+OiFbk3Bkeg0BfOZQFTwlQ5IxwlXslILAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:70:3e:fe:d6:97:30:b5:1c:2f:25:5b:f7:ad:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03cbdb0595fc48902938a78f42c1eaf0a159bf46
Validity
Not Before: Jun 7 12:00:23 2025 GMT
Not After : Jun 8 12:00:23 2025 GMT
Subject: CN=a136519d4b10c508396a292ebc0a80bcfd718aa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e4:74:7f:11:de:71:d5:e3:e9:b8:11:05:22:
3a:65:6f:f2:c4:10:69:e0:3b:b4:cd:6d:83:33:e8:
60:6f:90:d9:ba:89:ce:e1:e4:c5:80:6b:9b:a3:c6:
ac:8d:2b:75:27:2f:42:82:0e:c9:13:5b:b1:8f:06:
fc:33:52:2c:a7:9f:56:cb:20:2c:08:16:81:36:54:
ea:a8:d7:30:d4:5a:6f:bb:e9:3f:9b:ac:f4:e3:ce:
da:34:b8:a9:e8:10:4e:fb:aa:46:99:42:a5:73:9f:
15:10:8e:98:b1:f6:6a:9b:9d:49:1f:92:da:a7:56:
cd:87:3a:92:9d:c5:0e:d7:bf:92:fa:95:14:01:0c:
49:fd:f8:46:4b:90:f5:50:ac:c0:39:94:af:ad:e0:
72:ee:0a:39:1d:a8:ec:23:51:1b:0d:a3:32:6f:71:
f4:00:20:de:e9:95:c8:7b:5e:95:47:23:cc:d4:ff:
8f:a8:cd:93:40:24:75:ee:99:bf:fb:51:47:a9:fc:
23:d4:0e:9b:97:a6:73:35:b2:c8:08:2b:4a:08:31:
23:ba:e5:3c:9c:ef:8a:ca:12:34:55:7a:53:5e:79:
0f:e6:40:19:ab:7a:61:1c:1b:2c:fb:78:36:04:68:
0e:13:b4:19:86:59:fb:92:10:ea:2a:4e:e5:79:af:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:36:51:9D:4B:10:C5:08:39:6A:29:2E:BC:0A:80:BC:FD:71:8A:A1
X509v3 Authority Key Identifier:
keyid:03:CB:DB:05:95:FC:48:90:29:38:A7:8F:42:C1:EA:F0:A1:59:BF:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8vbBZX8SJApOKePQsHq8KFZv0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/4a7d7f-886d-4bdf-83d6-f66138066358/1/A8vbBZX8SJApOKePQsHq8KFZv0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5e:80:aa:64:5f:26:22:b4:db:44:40:8c:46:04:0f:f0:06:
52:65:e9:5e:b3:b1:06:41:30:25:45:4f:75:ba:14:b1:1e:6f:
b6:51:73:40:b3:21:6a:b7:dc:d1:2d:10:1d:1d:e1:5a:09:63:
ad:ef:c9:89:b2:4f:a9:13:47:81:5d:0e:cd:21:23:75:c6:ab:
57:ac:cf:11:d2:7a:41:09:50:56:37:ca:bf:b2:0a:bc:87:79:
df:32:56:c1:b2:93:bb:44:6a:c0:91:67:0e:ea:80:be:f1:46:
41:d9:c3:eb:0a:68:bf:40:5c:61:63:34:7e:56:c3:61:23:4d:
6e:7f:b9:73:75:16:6b:07:8e:1b:7d:1e:ed:bf:35:77:74:9d:
3c:bd:87:6f:85:8a:8f:38:3f:1e:2a:1c:6e:f7:0d:fa:f1:a1:
3a:82:d6:c5:33:84:6f:62:a1:15:9e:98:1d:e9:73:90:ee:e5:
86:50:0a:f3:45:e6:9c:bd:d8:1c:7b:55:30:35:34:83:75:ea:
e2:f5:11:6f:55:75:18:0a:55:26:9a:19:e2:eb:73:cf:68:2c:
8f:5c:f2:83:f9:ab:58:97:a4:21:77:77:58:dd:52:6a:5d:37:
66:44:09:bf:ed:a9:e5:d6:bf:b8:0a:53:56:46:67:26:40:e8:
fa:4d:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:26 2025 by rpki-client