Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: IQVSatizEe70k0l49vKLDq3LA5RGhBcSG0HFCC3/uMw=
Subject key identifier: 0B:EC:93:01:A3:AA:CF:1F:25:67:85:6C:A8:E5:88:17:B6:6A:35:4C
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01976026E565A53209B7E0425932D725DD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 02B3
Signing time: Wed 11 Jun 2025 18:00:51 +0000
Manifest this update: Wed 11 Jun 2025 18:00:51 +0000
Manifest next update: Thu 12 Jun 2025 18:00:51 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: XZFS7i+QB5jcCnhJ1sWE2hR+DiX9CWtJJLbXNSVMQwU=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:26:e5:65:a5:32:09:b7:e0:42:59:32:d7:25:dd:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jun 11 18:00:51 2025 GMT
Not After : Jun 12 18:00:51 2025 GMT
Subject: CN=0bec9301a3aacf1f2567856ca8e58817b66a354c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:47:fd:af:1d:65:9d:30:c7:12:73:f2:1c:
70:a3:2b:67:d6:5d:be:3c:21:27:38:41:e6:1e:54:
f2:f5:e2:1a:91:78:aa:b4:fc:19:e7:2f:8a:ca:c1:
9c:d5:05:d9:18:70:80:3a:0d:d0:41:59:6e:3a:13:
05:b9:3d:e4:d6:12:73:56:40:92:95:d7:dd:1c:ab:
80:07:5f:f5:fb:84:9e:e1:11:da:80:60:6d:1c:12:
f5:21:2a:c6:02:71:0d:c1:bf:c9:1e:84:1c:0b:52:
62:dc:cb:06:c2:dd:2a:7f:f8:9f:7b:f9:9e:74:b2:
86:06:50:9e:09:e2:c6:b8:44:06:5e:3e:0b:e8:fc:
2b:12:c5:ed:75:d1:bd:0e:2f:33:3f:58:3b:c1:74:
fa:9d:9a:c8:95:a9:ed:0a:14:ec:57:74:40:d9:86:
cd:a5:0c:e6:9e:3b:1a:f2:51:b1:81:79:39:02:76:
58:b1:57:8f:3e:34:28:4c:58:3d:07:30:f8:c0:fb:
92:34:c2:31:92:68:9f:20:19:56:f9:9d:0a:d3:d0:
1c:79:4c:ff:a3:18:ab:f4:96:64:3d:0b:74:b8:18:
21:a8:50:39:65:c4:e4:19:61:a9:d1:26:7b:48:d7:
63:9d:3e:3b:20:9d:bd:a9:4a:27:21:e1:89:13:4d:
87:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:EC:93:01:A3:AA:CF:1F:25:67:85:6C:A8:E5:88:17:B6:6A:35:4C
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:6e:4d:23:c9:7c:f0:53:94:d7:9c:00:2a:ec:81:9a:21:a2:
bb:28:4d:d9:6a:8f:58:04:b0:db:5d:36:47:ca:48:01:28:fb:
d8:81:80:fb:24:5c:d0:04:6e:cc:93:0a:cf:84:07:74:d7:b5:
e2:39:07:c3:a8:ff:ec:4e:07:89:b5:5c:23:eb:2b:c5:aa:0d:
ae:60:4b:04:9e:b3:d7:10:d5:ed:95:e4:02:9e:67:13:79:c8:
e8:6b:33:52:e9:50:73:c2:31:2e:61:2e:0d:ad:78:3c:5e:11:
04:34:da:e1:10:5a:71:7a:93:f0:1e:88:ab:6f:9d:35:e3:9c:
70:d8:53:c7:9b:85:28:94:2c:c5:39:09:8a:60:dc:5b:07:54:
98:47:91:1a:62:a6:31:ac:b3:e5:d5:ac:48:25:6a:6e:b8:b4:
8c:f4:79:45:e2:8d:31:d5:74:43:f7:cf:28:4a:1a:5b:c2:8d:
7e:2b:b2:5d:21:1c:e2:be:62:bf:70:20:11:01:96:fa:b8:96:
a4:8c:6d:76:94:e2:98:eb:c2:c3:68:a9:ac:33:74:35:ae:12:
af:a7:0d:46:35:17:ed:e8:81:3d:41:a1:09:69:19:cb:10:09:
fb:13:9d:51:50:66:0e:e3:95:a5:de:7e:87:34:9c:5d:1a:4b:
8f:e1:32:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 02:14:05 2025 by rpki-client