Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: 1tyV/hiSZroi9ilD9qCa1CqVU+mxJW3GlRyNp74DMxE=
Subject key identifier: 36:D1:15:2C:21:FC:D2:CA:10:D9:86:FE:C4:1F:9B:D1:48:25:62:1E
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01975C4A60D5F5DD457D00BD137B0F4DC554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 02B1
Signing time: Wed 11 Jun 2025 00:01:07 +0000
Manifest this update: Wed 11 Jun 2025 00:01:07 +0000
Manifest next update: Thu 12 Jun 2025 00:01:07 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: ZrX1TJjDogvzlz9ke7968X0L1Lp4jtFLAJilOTbVuaM=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:60:d5:f5:dd:45:7d:00:bd:13:7b:0f:4d:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jun 11 00:01:07 2025 GMT
Not After : Jun 12 00:01:07 2025 GMT
Subject: CN=36d1152c21fcd2ca10d986fec41f9bd14825621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:75:8f:ba:a4:65:7f:81:03:f2:d4:b6:6d:e0:
b4:86:70:4d:52:04:32:cb:1c:27:24:84:10:59:96:
96:d9:2b:a4:7c:0d:9c:2f:e2:df:a0:72:66:87:d7:
a4:0b:d9:08:47:26:e1:e7:d3:74:cc:f3:fd:ce:66:
a2:0b:69:f9:ab:c9:82:46:1d:cb:4a:36:57:45:b2:
58:5b:13:c5:e8:a5:d4:2c:5d:ac:98:ba:25:64:b7:
99:26:7f:25:0b:3e:bc:53:55:09:83:fb:96:04:15:
c7:f2:4f:d4:6f:99:20:7e:2f:5c:ef:e5:60:29:ba:
3e:19:ad:3c:d2:dc:da:1d:72:0c:0b:16:67:2c:aa:
84:43:68:e0:e5:54:7d:81:b8:ca:34:82:ae:41:03:
a5:19:8f:68:25:a9:b8:30:a7:b9:18:d0:b2:03:54:
cc:e4:74:58:c6:91:ea:8a:29:32:56:e3:92:3d:77:
fe:7f:0f:01:e5:3c:2c:3f:d4:4b:b9:2d:4a:e2:b4:
d3:e5:90:90:b8:fa:07:78:e7:ba:92:9a:6f:3f:65:
a5:6a:4f:5b:02:d8:c0:50:6e:5b:29:07:59:bf:72:
d4:4c:98:4d:b8:ed:29:51:3d:3a:79:08:a8:b5:ef:
dd:59:f7:a5:79:29:17:60:06:d1:04:b0:9d:dc:4e:
8a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D1:15:2C:21:FC:D2:CA:10:D9:86:FE:C4:1F:9B:D1:48:25:62:1E
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:dc:06:5e:75:df:4f:ca:30:1c:4c:28:03:93:1a:48:91:3e:
1c:84:bc:06:6b:e2:61:1d:7a:30:0f:c2:aa:98:cc:8f:0c:1f:
0d:eb:4f:1c:d2:92:a8:d6:1a:70:d3:39:c0:71:44:7f:6e:1e:
4b:02:59:7d:3e:d8:a8:52:50:10:30:78:02:5f:3d:d1:db:da:
f1:c9:35:f1:ec:ec:2f:11:e8:7a:3d:da:34:43:ad:b3:ed:64:
8e:7e:7d:95:1f:d4:9e:83:a1:1e:2d:47:ce:a9:eb:42:4b:91:
43:9d:ab:00:3b:49:37:98:ce:01:18:b7:15:89:22:18:96:aa:
ab:85:5c:82:51:da:6b:78:e0:fe:aa:fe:06:cd:12:53:e8:6e:
77:58:51:51:89:ce:10:8c:c0:07:d3:1a:05:71:ff:8b:ba:8e:
77:70:61:be:64:f1:c4:97:c8:a4:df:5d:0c:38:cb:3f:a2:3b:
16:fb:a9:da:0e:60:3f:ad:a3:d7:99:ae:a1:d9:b9:77:9c:c1:
06:68:65:4d:8b:54:e3:37:66:3e:16:61:6d:50:c9:a5:67:7a:
04:12:b7:15:b9:92:56:68:9a:6d:4f:82:40:16:11:2b:d8:38:
7f:1b:db:e1:4a:bc:ce:ff:23:71:14:ab:0e:7f:7e:43:e6:2f:
31:1c:85:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:06:31 2025 by rpki-client