Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: ZQbnx9ZZPp7tga0k8PjkpzUMUV9vzzVPwIUV21uwBj8=
Subject key identifier: 4B:57:52:37:57:A4:87:6E:85:B3:83:3A:47:B0:6A:95:77:45:C2:1E
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 0196C01403C1BDF570212AA6ED25A1179787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 0622
Signing time: Sun 11 May 2025 16:00:59 +0000
Manifest this update: Sun 11 May 2025 16:00:59 +0000
Manifest next update: Mon 12 May 2025 16:00:59 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: myvQkI3+Mfcc6MqntlZ+dAD3tZFPDMfIC8GvShuld0A=)
2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c0:14:03:c1:bd:f5:70:21:2a:a6:ed:25:a1:17:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: May 11 16:00:59 2025 GMT
Not After : May 12 16:00:59 2025 GMT
Subject: CN=4b57523757a4876e85b3833a47b06a957745c21e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1d:4e:44:6b:ec:5d:c3:83:1d:97:dc:52:02:
de:3f:16:74:a6:ce:16:4c:9c:96:8c:6d:03:92:d6:
8c:cd:6f:4d:37:94:84:79:af:df:8e:cd:18:10:3f:
b2:7c:d7:99:f8:5c:00:ff:86:87:8c:9c:ce:3e:2e:
82:a2:fc:9c:9d:e7:a6:35:74:4a:bb:8a:e1:29:d6:
41:d8:97:6a:b8:6c:6a:fd:30:44:11:93:81:74:34:
3c:8b:25:06:1f:82:09:68:d3:21:05:d3:dc:ba:4d:
70:10:08:4b:48:df:94:09:85:4c:9c:85:59:f7:0c:
aa:a7:d8:6d:f3:29:f0:46:2d:72:e1:05:bf:92:65:
d4:2d:58:ff:b9:ad:c7:28:50:cb:53:5c:a8:59:e1:
04:4d:16:69:49:98:8a:7e:81:e3:70:d0:4c:d0:fe:
8c:62:25:d0:92:d3:c3:2c:79:4a:07:d2:f9:14:15:
bb:1f:fe:0f:e0:75:72:2d:95:83:ce:22:f8:66:12:
2c:ed:ea:ae:77:6e:ac:5f:13:34:e3:62:cf:9a:76:
05:9b:3d:64:fe:e3:ec:ad:54:9d:2b:0a:3f:87:22:
8f:fd:90:db:7e:e0:71:d1:15:72:03:d4:01:30:ac:
24:47:91:2a:f9:d3:5c:95:9d:8e:24:78:f4:0e:5a:
94:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:52:37:57:A4:87:6E:85:B3:83:3A:47:B0:6A:95:77:45:C2:1E
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7d:5e:f4:e0:58:4b:24:0b:2a:61:89:28:13:51:2a:f8:e9:
28:34:d4:b2:5a:d2:f3:bd:9b:08:f9:7a:06:95:fb:61:a7:32:
fc:e4:89:ca:f4:66:97:1c:ce:82:d2:df:5f:02:95:e2:39:10:
2b:04:a4:9d:b5:a2:de:c1:e2:1f:0a:a2:04:c8:4c:fc:be:50:
c5:9b:bd:fd:96:3c:17:b0:d8:77:e2:d2:eb:b9:69:b2:cf:4b:
e3:20:f9:8a:b9:96:58:af:32:1f:16:58:dd:1f:84:6e:08:08:
a5:de:4d:20:24:19:09:db:35:80:f3:3c:40:e4:2b:b1:cf:4a:
4d:d4:34:d8:46:9c:a3:d4:2a:93:58:89:ab:ad:92:9a:88:26:
9c:04:20:b0:28:18:0c:ac:9e:b8:72:54:ac:03:8a:84:fd:87:
15:bd:3d:73:ca:4e:e6:bf:af:5f:68:49:f0:96:cd:85:06:03:
3f:5e:d1:d1:26:5c:66:19:5e:15:35:c1:5d:e3:83:ef:f0:82:
5a:b9:5b:e2:f0:16:cb:82:4c:b6:b3:7d:e0:20:74:77:c9:38:
42:0b:11:1b:93:28:60:0c:24:79:72:10:7a:04:b0:5f:17:1a:
f0:9b:9f:35:7d:a0:c3:6d:bc:7d:f9:1b:c2:6f:45:5b:46:d5:
b7:4d:70:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:40:16 2025 by rpki-client