Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: LW1O0Baef3wG9pjL3Qx+orxNyDU0us5jx1GxfC/pTWA=
Subject key identifier: D9:69:F8:8D:6E:67:CA:9D:1E:2E:3A:1C:BD:36:26:F2:F5:2A:48:55
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 019746674B8254D8CAE5DEADCAE003ECC470
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 0842
Signing time: Fri 06 Jun 2025 18:01:03 +0000
Manifest this update: Fri 06 Jun 2025 18:01:03 +0000
Manifest next update: Sat 07 Jun 2025 18:01:03 +0000
Files and hashes: 1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: DOfNRlHRAkbZqQ5jhvk+kQPGyB9Fp9iXK+eKKQ8w4Oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:67:4b:82:54:d8:ca:e5:de:ad:ca:e0:03:ec:c4:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Jun 6 18:01:03 2025 GMT
Not After : Jun 7 18:01:03 2025 GMT
Subject: CN=d969f88d6e67ca9d1e2e3a1cbd3626f2f52a4855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:51:33:2e:82:0a:20:2c:c9:5d:e3:bc:1f:
51:08:43:2f:13:e0:e5:fc:ec:8a:ba:ca:b9:7c:49:
82:96:2c:d1:6b:b5:83:f0:e5:5f:dd:9d:9a:5a:30:
7c:aa:23:91:9b:70:b6:3d:36:1f:e1:3f:04:d0:3f:
32:10:ee:78:89:c8:19:f5:0f:e7:52:00:9c:41:31:
e3:19:34:d4:5b:99:75:1c:cf:56:53:53:89:b6:af:
39:26:5c:1e:36:a2:d1:4a:78:56:86:16:b6:32:46:
ba:8f:88:10:9a:55:66:d6:5d:59:f0:a6:4f:43:9b:
dd:9e:2e:31:ef:e3:4c:0c:cc:b2:84:06:9d:f6:d4:
ae:81:4c:44:8e:70:f4:70:d1:45:03:e3:7b:84:bb:
b2:fc:6c:6c:18:f2:37:4e:8a:39:2b:cd:88:6d:1c:
5a:37:29:62:63:98:04:23:e5:72:23:e8:f7:a6:03:
67:c7:d3:dc:97:b9:2f:35:a2:37:9b:43:a3:0c:ba:
2c:38:b6:0b:9e:70:cc:82:d7:39:d8:b5:41:cb:17:
22:02:b2:d1:0c:4b:f2:02:c9:bc:ca:ca:68:c5:ec:
d4:6c:1d:88:69:0e:d0:16:2b:7a:a8:28:e7:b5:d8:
56:4a:f7:d2:47:59:4a:b9:03:9c:d1:78:24:ce:08:
09:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:69:F8:8D:6E:67:CA:9D:1E:2E:3A:1C:BD:36:26:F2:F5:2A:48:55
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:82:bf:67:1d:80:4c:2b:45:b5:48:76:a8:c5:ae:44:76:08:
60:e0:9a:01:71:70:49:79:a4:be:83:62:bc:b6:8b:4e:58:3e:
43:0d:32:2e:af:bf:f3:00:47:ba:b3:11:63:8c:ea:74:12:ac:
d6:fe:63:58:40:4f:96:f7:8c:14:0a:f2:c2:ad:03:7a:1f:c9:
6c:3d:5d:fc:a0:83:19:56:81:e3:a2:1f:3f:98:29:ce:99:4e:
05:96:02:5a:b2:dc:c1:da:2a:e6:20:6d:c1:6e:ea:38:bb:a2:
c1:a4:f0:85:bb:f9:ff:6a:b8:d5:3e:a4:91:1e:e8:59:8b:09:
01:bd:10:fb:77:5a:f4:fc:19:1b:38:b0:85:50:e4:d3:b2:06:
50:d2:32:e8:ed:18:56:3f:a1:15:35:87:1e:4e:ad:d8:d6:08:
91:f7:f3:56:82:6c:36:fa:4e:e2:63:6d:7e:aa:14:37:68:3c:
26:8e:dd:49:1f:c0:3e:31:11:01:8e:a0:b5:2f:80:e0:b9:79:
d8:a7:0d:e9:ab:31:4f:6b:53:69:ff:00:db:f9:62:39:24:67:
97:8c:ab:39:ea:26:be:45:d1:22:50:14:1e:b0:0c:dc:76:7e:
5b:d2:57:af:ab:43:a7:51:9c:e5:35:d6:10:cf:8f:d2:13:3f:
31:0a:dd:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:29:49 2025 by rpki-client