Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: gbY37m4LwaI6snOgV+c5+iyhshodq+YlUpJXt3D7vcg=
Subject key identifier: B1:B6:E4:C5:07:C6:6C:00:7A:6A:3D:83:DF:8F:20:4C:44:F7:E0:E5
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 0196350883164FBCBB61A7FA461CCD04694E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 05DA
Signing time: Mon 14 Apr 2025 16:01:12 +0000
Manifest this update: Mon 14 Apr 2025 16:01:12 +0000
Manifest next update: Tue 15 Apr 2025 16:01:12 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: 2Lzkl/nNLep5EYjmHQ8EiuSfIoFgVgT0lxQS+3vfi7E=)
2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 15 Apr 2025 14:19:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:35:08:83:16:4f:bc:bb:61:a7:fa:46:1c:cd:04:69:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Apr 14 16:01:12 2025 GMT
Not After : Apr 15 16:01:12 2025 GMT
Subject: CN=b1b6e4c507c66c007a6a3d83df8f204c44f7e0e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:7a:0f:9e:68:94:7c:62:fb:6b:07:ff:63:
69:f6:cf:bc:36:e3:23:5f:c4:ed:4d:18:7c:02:4c:
e8:36:e9:36:23:9c:72:44:0f:b8:cb:68:fd:a3:f6:
e5:68:24:29:69:1d:b1:f9:7c:d1:59:e6:29:6a:29:
2e:e0:d1:93:ae:fd:2e:81:57:01:4d:83:04:53:d9:
7d:a3:96:02:7f:c2:9b:e2:55:07:e0:54:45:2c:6f:
9e:5b:9d:a3:5e:3e:c4:09:54:0a:d5:5a:6b:01:0e:
48:42:56:03:94:0b:39:46:1d:b4:3a:ee:6f:2c:2a:
33:a4:01:87:9e:56:e4:8d:8a:0b:21:c5:f8:e0:70:
72:5c:38:87:57:8d:7d:44:30:45:95:f8:a8:d8:20:
d9:e1:7b:d9:fc:b2:0c:bd:86:61:8f:01:aa:fc:9e:
94:94:90:12:46:5f:9e:a7:05:b9:6b:f7:4d:a6:2b:
cd:5a:b7:d7:00:04:cf:63:d9:a0:4d:db:f4:ef:a7:
b0:5a:66:5b:4c:7c:ef:7c:ed:fa:a3:1a:9e:ad:ad:
04:c0:52:9b:b2:69:90:48:45:d0:a1:9f:f4:2a:e9:
4e:62:99:f8:21:e0:76:28:b3:0b:d0:f7:4f:5b:54:
68:16:f9:87:37:ea:a9:26:62:b4:29:f6:5f:d8:bb:
a4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:E4:C5:07:C6:6C:00:7A:6A:3D:83:DF:8F:20:4C:44:F7:E0:E5
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:25:c6:19:c9:a0:b3:df:0e:0b:a0:ee:c2:8c:7d:58:4e:9b:
6f:57:fd:5e:45:12:78:a1:42:27:e4:d4:12:4a:a1:e2:52:18:
c1:c8:ec:19:a6:fc:0b:70:41:b9:e4:7f:09:a4:96:1c:00:4f:
1f:e4:3c:be:92:b7:5d:3f:4c:f0:a5:93:11:9e:23:8d:34:9f:
77:df:e6:55:73:c5:e0:91:2d:f2:79:fe:f5:b5:40:85:09:8f:
41:36:04:58:6d:d6:78:f0:d2:0a:97:ea:1e:94:2c:39:37:aa:
f7:79:93:87:42:5e:09:33:b7:9e:30:11:02:da:92:52:21:84:
03:b9:13:89:11:e6:2c:49:c8:06:cd:ed:96:00:d4:5f:82:6a:
48:cd:34:3e:28:93:1e:3c:64:6c:8f:e0:de:9e:d6:26:ea:d7:
5a:34:0d:7e:c3:5d:e0:b6:0b:1c:3b:60:09:05:75:22:f2:8f:
18:9a:d1:b5:f8:7b:da:ef:37:b8:92:a9:86:63:0c:4d:83:73:
91:fb:93:04:ab:b3:8a:ff:d0:76:b9:7e:3c:1d:29:ed:16:67:
f6:08:4f:ae:11:24:fc:d6:b0:03:6a:f9:35:22:63:84:16:0e:
30:6e:c6:72:5b:f0:03:0f:cc:71:87:e7:5a:ee:12:95:f9:79:
4f:24:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 18:07:30 2025 by rpki-client