Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: uKrjcwCRktEobTyXKQvrpNk/OMtV+KGi+TYuQtLs+Hk=
Subject key identifier: 6F:BC:DC:C0:F6:BC:B8:88:8C:E1:3E:E9:1D:34:BA:D5:E6:E7:98:B2
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 0197B6A0AE769B7F591214510468D43563AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0AFE
Signing time: Sat 28 Jun 2025 13:01:12 +0000
Manifest this update: Sat 28 Jun 2025 13:01:12 +0000
Manifest next update: Sun 29 Jun 2025 13:01:12 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: OXc8gLdCRggAHQeAzoCRgHc4qAgmckpv6P7xRMKeZtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ae:76:9b:7f:59:12:14:51:04:68:d4:35:63:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Jun 28 13:01:12 2025 GMT
Not After : Jun 29 13:01:12 2025 GMT
Subject: CN=6fbcdcc0f6bcb8888ce13ee91d34bad5e6e798b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:16:9b:bc:12:5e:76:23:32:02:d6:cf:64:
f9:c3:a6:87:69:8e:a3:ed:81:47:ed:3a:a3:c7:a2:
7d:6c:da:60:f9:c1:d1:23:ba:9b:81:40:e1:33:cc:
89:60:92:c0:5b:6d:b4:34:d0:1a:68:82:4a:ca:75:
15:b3:e3:7d:67:a8:54:ff:ee:3a:0e:20:2b:32:81:
4c:7b:f1:30:ac:89:cf:97:dd:2d:91:35:60:fc:78:
8c:3c:91:80:72:c3:70:7e:0a:06:61:55:6f:dd:3f:
c2:6a:b9:03:1e:8f:70:f4:11:7d:33:fc:fb:fe:c0:
0d:9c:7a:54:85:18:00:34:27:a2:59:a6:9a:18:d7:
75:fd:d5:36:5c:ff:cd:60:97:bf:0f:ba:b5:05:dd:
dd:81:de:49:73:24:15:fe:19:99:d8:5e:c0:57:53:
7f:9f:de:8a:47:b6:d6:c9:52:39:35:3d:3e:a2:d9:
da:c1:24:bc:70:3d:bb:c4:d9:9d:ab:03:27:13:f4:
4c:fb:1e:85:f3:55:60:24:f6:df:de:fc:63:15:b9:
6a:dc:a1:00:31:99:f4:f7:6a:25:61:8b:bf:19:65:
2b:c1:f7:9d:d0:25:56:7f:c0:93:48:fe:bd:6f:15:
9b:e2:a2:83:76:7d:99:43:11:f5:e7:1d:74:3a:50:
1a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BC:DC:C0:F6:BC:B8:88:8C:E1:3E:E9:1D:34:BA:D5:E6:E7:98:B2
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:9b:82:2c:36:0c:d8:6b:05:5a:20:eb:77:73:1b:c7:2d:27:
98:f2:5c:eb:db:d5:9e:ce:1c:13:ee:ec:32:77:87:cc:ec:34:
ac:37:c8:6d:ed:ec:3d:8a:e6:9a:c2:dc:57:19:3d:e6:6e:af:
e5:e4:c8:4e:5f:b4:ea:18:89:16:da:a5:40:08:f5:f9:0d:11:
d1:96:e4:3e:b0:dd:9d:f7:b4:3d:0d:8b:30:7d:af:06:ca:31:
52:19:a0:57:20:6d:a5:3c:87:81:4f:ab:ef:6f:48:72:95:5f:
2f:4b:a5:3b:e5:0c:c8:d5:43:c0:fd:72:2a:e8:d9:fa:f0:9d:
7c:2d:6c:54:d9:59:82:9b:d6:8b:86:8b:f1:de:8e:ad:05:7d:
56:87:50:3f:85:7c:cd:c2:f4:18:ec:b7:31:f3:68:60:e2:ed:
9b:cd:b3:6a:1b:ad:38:45:3e:a3:9e:77:14:a7:da:2d:3e:14:
c7:28:4a:75:e8:01:de:b2:13:d6:21:e7:cf:80:2d:06:b2:15:
ad:ec:47:4a:9d:2e:35:10:9f:2e:54:9b:58:e3:f6:43:43:66:
8e:15:39:76:0a:1c:b7:ea:64:d9:d1:e9:01:72:4f:50:2c:02:
68:30:88:81:06:f4:fd:ec:1f:7d:48:43:9b:99:c8:66:18:79:
a0:cc:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:28:15 2025 by rpki-client