Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: MOGCd+nn5c8xikv5ea7ooQlxb+jwZaPFzgFmXX4GN3Q=
Subject key identifier: 60:90:CA:6C:83:BA:C8:39:A9:F5:3B:9A:53:15:63:F2:DB:88:67:35
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01976403E9B201FFA9C7BCAED3F7A0FAEAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 02B5
Signing time: Thu 12 Jun 2025 12:01:07 +0000
Manifest this update: Thu 12 Jun 2025 12:01:07 +0000
Manifest next update: Fri 13 Jun 2025 12:01:07 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: cWLvItRaalnjYqM7VJFuHGAQN22qIKj8I9yHsf9ydTQ=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:e9:b2:01:ff:a9:c7:bc:ae:d3:f7:a0:fa:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jun 12 12:01:07 2025 GMT
Not After : Jun 13 12:01:07 2025 GMT
Subject: CN=6090ca6c83bac839a9f53b9a531563f2db886735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:77:ec:0f:cb:e5:93:05:35:78:d9:03:59:0f:
39:38:85:d1:bf:f8:c4:c6:89:1e:0e:eb:88:0b:35:
81:8a:1c:67:62:26:8c:cf:65:e0:13:f7:81:bf:3a:
a5:c4:71:e2:b0:eb:cf:42:70:b0:d6:bf:79:73:09:
ae:d5:f9:a5:dd:0d:71:61:6b:1e:5e:20:ed:c4:93:
f5:15:bf:62:97:65:0e:b8:6a:c9:42:6e:ce:f1:bb:
18:80:ae:f3:9d:37:1f:33:a1:08:89:a3:96:27:ad:
0c:97:92:09:36:f2:b3:b1:69:d8:b7:a4:fe:4d:c6:
84:76:53:41:ba:63:e2:08:8b:72:06:6b:87:81:3c:
21:28:cd:86:17:af:f5:2a:8f:a9:6e:89:40:3c:a0:
c3:e3:57:1b:8f:ec:63:08:0d:fa:fa:6e:05:a0:5d:
3e:da:56:ab:14:8d:6b:cc:24:c4:b6:c7:2a:0a:f9:
d9:f7:59:5e:90:de:ed:1f:1f:2e:cd:4f:65:6a:fd:
69:50:a3:a2:ce:f4:8e:8f:e6:30:c2:42:60:2d:d4:
71:8c:e4:a1:ee:99:b6:c4:81:ae:1e:4e:90:a5:27:
49:48:1d:1a:31:1a:8d:73:b4:5c:e4:44:62:af:dc:
95:f7:74:8a:fe:f1:ab:c1:3e:67:61:48:ad:b0:4f:
d7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:90:CA:6C:83:BA:C8:39:A9:F5:3B:9A:53:15:63:F2:DB:88:67:35
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:78:51:cb:df:a9:4b:ff:34:71:fb:43:05:3f:a0:14:9c:70:
da:ff:8e:b8:55:67:71:09:8e:0a:6c:18:73:4d:09:3c:e1:25:
84:c8:71:a3:0a:b7:a2:1f:59:dc:20:52:0a:51:e9:a7:39:33:
c6:bf:0c:83:92:07:a4:fe:9e:68:60:52:e1:70:17:25:8e:4f:
e7:11:d0:b0:4c:f6:3e:f5:ef:4b:52:c3:32:36:23:4e:f9:6f:
38:e3:c5:73:06:23:97:b2:46:4f:86:6a:93:04:62:4f:09:16:
9a:59:f4:c5:a3:bf:34:90:a5:1c:c3:a2:5e:ce:87:5f:6a:9f:
83:ff:e6:2d:63:f0:1b:cd:12:a1:48:c2:e1:50:0c:36:d1:f0:
56:bb:59:a0:fb:55:3d:27:98:40:d3:72:3f:45:cf:c1:dc:67:
b8:eb:a2:2b:91:e3:b2:e5:cc:89:92:1a:9f:51:a1:6b:af:28:
e1:66:89:99:4a:ac:f9:23:e8:a5:80:8e:6a:01:6f:90:93:44:
66:5a:cd:82:c0:22:69:88:66:ea:c4:95:67:2f:17:65:cf:8f:
2a:96:80:a0:89:c7:1f:52:bf:57:20:97:52:45:c0:7c:a8:ae:
e2:e6:1b:09:b0:b8:fd:4e:47:84:b0:0a:88:db:c9:f9:5f:e9:
35:24:b2:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkA+myAf+px7yu0/eg+uqvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl
N2IxNTAwHhcNMjUwNjEyMTIwMTA3WhcNMjUwNjEzMTIwMTA3WjAzMTEwLwYDVQQD
Eyg2MDkwY2E2YzgzYmFjODM5YTlmNTNiOWE1MzE1NjNmMmRiODg2NzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9nfsD8vlkwU1eNkDWQ85OIXRv/jE
xokeDuuICzWBihxnYiaMz2XgE/eBvzqlxHHisOvPQnCw1r95cwmu1fml3Q1xYWse
XiDtxJP1Fb9il2UOuGrJQm7O8bsYgK7znTcfM6EIiaOWJ60Ml5IJNvKzsWnYt6T+
TcaEdlNBumPiCItyBmuHgTwhKM2GF6/1Ko+pbolAPKDD41cbj+xjCA36+m4FoF0+
2larFI1rzCTEtscqCvnZ91lekN7tHx8uzU9lav1pUKOizvSOj+YwwkJgLdRxjOSh
7pm2xIGuHk6QpSdJSB0aMRqNc7Rc5ERir9yV93SK/vGrwT5nYUitsE/XlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGCQymyDusg5qfU7mlMVY/LbiGc1MB8GA1UdIwQY
MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt
MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy
LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXhRy9+p
S/80cftDBT+gFJxw2v+OuFVncQmOCmwYc00JPOElhMhxowq3oh9Z3CBSClHppzkz
xr8Mg5IHpP6eaGBS4XAXJY5P5xHQsEz2PvXvS1LDMjYjTvlvOOPFcwYjl7JGT4Zq
kwRiTwkWmln0xaO/NJClHMOiXs6HX2qfg//mLWPwG80SoUjC4VAMNtHwVrtZoPtV
PSeYQNNyP0XPwdxnuOuiK5HjsuXMiZIan1Gha68o4WaJmUqs+SPopYCOagFvkJNE
ZlrNgsAiaYhm6sSVZy8XZc+PKpaAoInHH1K/VyCXUkXAfKiu4uYbCbC4/U5HhLAK
iNvJ+V/pNSSyZg==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:24:48 2025 by rpki-client