Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: vWvgWvr41ndq1UuCcprZnCPwIJ78VxiwEw4dCHLg0qI=
Subject key identifier: DE:FD:70:29:6A:03:73:AC:FD:7C:0F:AF:2B:A6:47:CE:8C:E6:8C:B2
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 019769CE6BC88D63F27D1DC7115BF17F06CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 02B8
Signing time: Fri 13 Jun 2025 15:00:25 +0000
Manifest this update: Fri 13 Jun 2025 15:00:25 +0000
Manifest next update: Sat 14 Jun 2025 15:00:25 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: Vw8tfEudDppaapBClJl68EalTKdIQNq/nGFk7DdKAvg=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:6b:c8:8d:63:f2:7d:1d:c7:11:5b:f1:7f:06:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jun 13 15:00:25 2025 GMT
Not After : Jun 14 15:00:25 2025 GMT
Subject: CN=defd70296a0373acfd7c0faf2ba647ce8ce68cb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1e:ab:70:c4:2f:07:0c:5a:c2:d1:27:ab:03:
da:2b:06:f1:f4:3c:65:20:fa:dd:12:be:25:8c:06:
3f:fd:e2:11:85:3a:57:4d:a6:f4:ee:70:92:92:e6:
63:24:78:31:cd:31:98:89:32:14:6a:69:fa:63:e9:
c9:26:5c:07:1b:e7:d2:f6:4b:0f:e3:d1:3e:cd:05:
60:4b:4a:21:d2:c3:08:ae:e0:d6:61:fa:d1:20:57:
8c:90:04:57:44:78:f8:7e:2d:ff:67:84:9a:fa:d0:
b8:ac:2b:07:46:fa:a4:d5:c7:fa:b4:e4:22:16:2f:
de:79:a9:13:41:e2:eb:09:67:69:db:fe:bc:5a:b4:
3d:f0:2c:4e:d4:fb:fd:a4:99:38:1d:b6:9c:0e:3f:
9b:48:37:c8:2d:43:71:cb:a2:ed:56:a4:93:f7:b7:
e3:d0:ab:85:bd:5e:42:dc:09:60:fe:4e:95:b8:28:
ae:db:88:06:2c:0f:0b:2e:eb:99:9a:00:8b:b6:71:
98:12:96:fd:c1:c7:37:d6:49:77:2c:bf:65:98:b5:
5d:2d:62:88:9a:32:9e:cd:a5:3d:02:1c:c9:4b:60:
59:95:76:32:66:0d:09:b3:25:f1:36:59:e0:db:ca:
92:5c:de:87:8d:0f:76:57:23:eb:0d:2a:bd:ac:7b:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FD:70:29:6A:03:73:AC:FD:7C:0F:AF:2B:A6:47:CE:8C:E6:8C:B2
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f2:d2:8e:87:6a:86:0f:76:05:30:d7:c5:1c:b0:36:3d:38:
7c:ea:e0:f3:ff:44:07:d4:34:58:e1:c9:83:91:2e:35:0f:0e:
58:8c:67:49:b9:bb:23:da:19:71:78:cd:3f:9a:8d:99:da:bf:
9b:33:5b:25:08:6f:38:44:1e:60:56:8a:a8:e6:9b:d6:cb:06:
d2:15:3c:a3:65:c3:10:81:f6:64:4e:74:25:e7:d3:da:40:ba:
55:f5:aa:d9:1e:8b:e6:35:72:38:ee:8f:00:02:6c:da:57:ae:
ad:b9:bb:bc:4e:1d:6e:87:54:5d:89:15:b0:2d:a0:cd:bf:a8:
50:d6:b6:f9:7e:8d:09:2c:82:87:e0:d5:90:9b:c2:33:11:32:
96:64:b7:83:f5:1a:ae:b2:92:9e:a1:d6:fb:fe:90:9c:e1:77:
9a:86:4a:4f:06:b9:80:46:a3:24:8f:2d:4c:75:1e:93:af:f8:
4c:c0:3d:02:76:1b:bb:db:8f:77:fb:02:e4:81:c4:34:b6:ac:
87:fe:75:64:0e:54:68:7b:c8:2b:39:2c:b8:6c:da:1f:bc:3d:
65:95:38:01:ac:a1:19:7f:ad:ac:ad:6a:99:63:df:03:39:37:
32:f4:7d:1b:35:16:dc:53:f0:d4:cc:2e:b3:c1:a2:67:32:dd:
b2:7f:4b:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:07:23 2025 by rpki-client