Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: vuynyqJ6hNlWqn6qB1dMnH0loGsDYW5HKRzpHQj7Y44=
Subject key identifier: A9:A4:AB:B8:45:47:AB:65:9B:85:6A:E6:54:82:77:A4:E7:68:5A:51
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01965B70D7E37278E3902E664E85A30DF20F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 022C
Signing time: Tue 22 Apr 2025 03:00:43 +0000
Manifest this update: Tue 22 Apr 2025 03:00:43 +0000
Manifest next update: Wed 23 Apr 2025 03:00:43 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: hkPpqvWyc4nfkxfmjexWMKbi3txXxY2MtbgKNl5rPZ0=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5b:70:d7:e3:72:78:e3:90:2e:66:4e:85:a3:0d:f2:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Apr 22 03:00:43 2025 GMT
Not After : Apr 23 03:00:43 2025 GMT
Subject: CN=a9a4abb84547ab659b856ae6548277a4e7685a51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f9:53:09:21:8a:bb:55:66:11:58:d5:9a:21:
f2:01:14:64:2b:df:a1:b0:f5:c4:91:12:0e:ba:84:
00:d0:02:e3:81:db:86:2a:f1:4f:8f:b9:1b:05:5a:
a0:1a:73:5b:61:64:ec:75:7f:00:50:ab:74:33:9d:
3b:c4:a7:63:8a:d6:df:e1:0c:9c:33:88:38:2a:66:
cd:97:e2:5a:8a:4f:6f:00:8c:95:1a:28:28:fe:4b:
1f:d8:31:d5:f4:90:4f:10:fb:4e:f6:13:e0:e0:b1:
7b:68:de:2d:e7:bd:7b:1b:24:c5:92:16:e5:bc:e8:
f2:a5:7a:be:d3:f0:c1:a6:6e:48:8b:b7:9f:c3:da:
e2:b9:cb:da:9f:94:30:8a:98:d0:64:d0:28:36:ca:
ed:52:61:db:12:f9:62:d3:4b:77:18:c7:1b:a8:00:
49:67:8b:88:50:8c:b5:2d:03:cb:23:dc:3a:8b:43:
2c:e7:81:fd:fd:7a:31:55:3c:8d:a7:34:97:18:02:
f0:34:10:e8:cf:7d:8c:5c:5f:df:25:f4:8e:ac:d3:
78:40:06:b7:8a:20:a9:ec:c1:ac:09:40:3a:a1:ff:
0e:1e:15:7b:c9:a3:73:42:97:3d:ef:72:e1:22:a4:
7e:15:55:ed:4e:93:5b:01:7a:42:62:12:52:a6:92:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A4:AB:B8:45:47:AB:65:9B:85:6A:E6:54:82:77:A4:E7:68:5A:51
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:40:f0:29:d8:c6:3f:ed:29:83:91:1c:07:7c:1b:ed:21:7f:
8d:56:e9:c5:81:98:84:da:3b:6e:74:00:76:e2:aa:af:68:17:
9c:b3:cb:5b:8f:ce:42:c1:ee:ee:4d:5d:8f:83:40:22:fe:bf:
68:9e:b5:cf:cf:eb:d4:44:4b:1f:58:6e:50:69:73:9c:04:1e:
85:f8:f9:68:65:1d:c1:f0:28:da:9a:1b:5a:bb:e8:0c:11:70:
e6:de:57:71:7c:89:4b:fc:56:ed:fe:75:c6:ff:e1:b2:83:fa:
ae:58:39:bd:8e:29:c1:92:7f:ed:df:95:b7:c0:81:cd:f9:43:
bd:4d:61:d8:df:34:1d:a5:33:c4:bf:07:ca:86:fb:c1:01:be:
bf:43:68:b5:c9:0c:61:1b:83:57:44:70:53:b0:0f:d1:09:87:
e1:b0:08:0c:d0:b4:2c:4a:3a:ff:ce:ab:2d:7b:3e:44:cb:26:
96:eb:25:15:05:87:cd:6b:e4:ee:0a:90:79:44:85:b6:9e:8f:
ea:f8:49:93:51:89:0f:a6:5c:1d:db:28:70:65:05:af:f2:5f:
cd:70:a6:30:9d:9e:ac:5a:82:1a:da:8f:d4:d9:05:65:2f:f0:
20:52:5f:63:60:7f:cb:73:00:9a:80:b2:1c:47:0f:89:8f:9a:
0b:df:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 11:41:22 2025 by rpki-client