Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: YfPacy18F7WcV91b7RODGLVOYlitjh2FkoeoFQ8T2RY=
Subject key identifier: B1:67:94:EE:CA:8C:B4:15:18:EB:1B:92:49:76:E8:68:22:93:BB:CB
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 0197488D80C899E18DD813D9865FEEF0DB65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0EFB
Signing time: Sat 07 Jun 2025 04:02:02 +0000
Manifest this update: Sat 07 Jun 2025 04:02:02 +0000
Manifest next update: Sun 08 Jun 2025 04:02:02 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: MvyZNXYutIjxjJO4Wh7U4QkctsvFM9yz06UZtJddUvs=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:80:c8:99:e1:8d:d8:13:d9:86:5f:ee:f0:db:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jun 7 04:02:02 2025 GMT
Not After : Jun 8 04:02:02 2025 GMT
Subject: CN=b16794eeca8cb41518eb1b924976e8682293bbcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:52:07:99:a8:37:d6:87:89:88:8e:1e:a6:a9:
b2:22:cb:9c:9f:b7:75:76:55:99:90:40:2a:63:68:
3b:79:f0:44:b3:d4:64:d9:5a:d1:ee:49:3d:a8:4d:
fd:68:32:64:9f:eb:25:a9:c3:77:e0:01:63:ea:b7:
f5:c2:f7:a1:34:b9:db:e4:fb:8f:c4:05:9f:a0:3e:
8e:82:e4:85:24:2d:9a:d4:9c:43:33:96:d1:77:91:
a2:57:a9:c8:93:1e:72:2c:01:14:ce:34:7a:fc:36:
75:4e:cc:1b:32:83:0f:95:b0:48:a8:1a:c6:85:0a:
b9:75:7a:c7:49:6a:fa:04:ba:50:e4:85:94:2e:fa:
33:ce:a0:76:57:4b:f2:8d:15:42:b0:2c:11:9a:0d:
a5:50:9f:1c:66:7d:5b:96:19:60:42:b9:b0:a5:4b:
04:6f:0b:9b:9a:1b:ee:a2:0e:e0:61:3c:2c:65:c6:
8c:78:ad:c6:10:a8:61:62:c0:9c:e1:a2:e6:f6:44:
c1:54:ed:fa:1c:58:d9:0c:6f:e7:28:c3:6d:d5:3f:
92:79:df:74:0e:d1:42:fe:c3:e4:16:5f:e0:5f:1b:
a6:24:50:d1:e6:88:19:a8:7d:e0:ca:48:6e:25:ff:
d1:18:9d:7c:c5:4e:17:25:7d:b5:c8:44:b0:34:ce:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:67:94:EE:CA:8C:B4:15:18:EB:1B:92:49:76:E8:68:22:93:BB:CB
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:bc:8a:61:b1:d1:46:42:17:a3:37:e4:60:7c:c0:50:5b:13:
d3:56:64:59:e5:95:24:29:bc:36:21:fa:36:a6:ef:25:08:b0:
6b:f4:17:bb:55:2e:29:83:be:1a:3f:00:53:ea:7c:bf:2a:f2:
ca:be:25:f3:54:45:07:77:16:c4:31:a0:1f:24:31:7b:56:bf:
a7:22:1e:25:e1:ef:c5:1e:d8:df:39:a3:aa:69:c6:8b:85:7e:
6d:81:3b:e8:d6:66:f6:18:4d:ea:e9:15:b0:2d:d2:a5:98:bc:
56:a9:4d:62:e6:28:b0:59:ca:62:6b:30:de:a2:01:5f:42:ba:
6d:7b:76:be:e9:0a:1f:51:ab:67:f9:22:61:6a:6e:5b:97:56:
95:4d:72:45:d5:23:db:bc:82:79:f4:de:6d:89:a7:de:36:f4:
7e:7f:df:3a:5c:0b:15:50:7c:86:2a:66:90:27:1b:f9:c6:ef:
c0:32:72:ae:c6:79:79:21:32:e0:e8:88:03:bc:1c:2d:79:9c:
18:b3:f5:8f:7b:e3:86:0e:fe:e4:9b:8f:c4:38:f9:13:45:57:
90:24:7a:ab:fb:46:fc:ee:f1:57:7d:92:12:4b:0e:ed:ab:8c:
a2:43:e4:33:34:d4:48:a8:54:55:49:f4:3a:d0:4b:70:87:22:
a6:ca:9d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:21:13 2025 by rpki-client