Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: qHdKbuka4GxfEvhjQMM/q6UPBCQmySBrDxDkcaYL9nY=
Subject key identifier: ED:0A:21:6B:52:6F:31:F0:DC:8C:C5:D0:B1:F3:24:C8:86:9B:5E:42
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 0198D4E0878FC9243A39FF9CB5DE95D046F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 0374
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: LCRq1i2BIEw7K9xUkrykbO/oNp6hZ15YGZ+rv3HGbsg=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:8f:c9:24:3a:39:ff:9c:b5:de:95:d0:46:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=ed0a216b526f31f0dc8cc5d0b1f324c8869b5e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:12:47:b6:e7:bd:f1:8f:39:7a:47:b2:33:c5:
87:48:76:45:48:16:2c:48:29:eb:43:f1:f2:db:3d:
9d:ff:af:08:e6:f9:79:ff:28:d3:75:a1:48:d9:44:
40:5a:cb:36:87:a2:13:fa:83:01:c0:50:dd:3e:72:
e5:93:13:22:af:48:af:83:23:2a:33:40:c3:c7:f1:
78:6a:11:fe:d7:75:a3:65:93:f9:60:db:e4:9d:89:
2c:ad:e2:a8:bd:de:4d:69:df:1e:0b:82:6e:ee:26:
7b:ab:60:11:57:81:78:bf:b8:44:7a:57:13:13:2a:
9f:28:f9:3f:b9:4b:be:61:88:da:71:7f:21:03:3c:
aa:84:36:09:cf:7f:ce:01:9f:b3:8c:0c:88:ba:4b:
9a:3a:84:39:22:35:0b:be:a3:d0:a2:d6:f6:15:88:
f7:04:ba:5f:ec:30:12:88:68:94:86:ad:57:42:ea:
73:9c:08:ff:1d:0e:ea:ed:db:86:77:2b:9e:bf:da:
ac:b2:70:43:6b:29:d2:74:2c:a2:28:af:4f:a8:9f:
2d:cd:ff:13:4b:81:98:b9:f7:ee:0b:20:e1:aa:0f:
a8:95:dd:17:80:2a:e4:ab:44:92:f1:f7:14:bd:25:
57:2d:37:3c:f7:15:7e:3d:1b:b2:43:17:6f:c9:4a:
bc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:0A:21:6B:52:6F:31:F0:DC:8C:C5:D0:B1:F3:24:C8:86:9B:5E:42
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:71:0d:88:10:df:94:a6:4f:6a:dd:e2:a9:3a:b8:57:dd:7a:
92:cf:42:91:f9:6e:61:cf:be:98:55:7f:56:f5:2e:db:b7:0a:
73:69:9f:e5:af:af:ff:ee:15:d6:67:d7:1d:73:66:b9:ff:2e:
be:d7:28:4a:17:4f:7a:1f:aa:07:6c:37:f5:a8:9d:bc:fc:fa:
d1:e7:a3:bd:af:18:3f:29:2f:32:cb:63:ec:8f:54:6a:ef:4b:
b1:fa:ce:1c:92:3a:ec:fd:63:e6:59:88:ce:1b:b8:34:cb:dd:
e3:62:ca:04:51:60:6d:dc:68:00:72:1c:d1:78:f3:8f:6d:3b:
29:3e:98:8b:78:d4:38:d7:a6:c9:75:ce:07:a4:8f:12:3d:24:
b3:b3:6f:91:35:36:49:da:c4:78:29:dd:7a:5d:32:a3:9c:e2:
49:7a:e0:b0:58:22:3e:22:50:be:83:fe:a6:f1:a6:4a:16:09:
1f:6d:14:2c:19:45:f6:39:93:61:a7:c8:91:d6:84:03:99:29:
3f:39:d9:35:6c:c3:33:0b:39:2d:a1:d6:75:de:dc:51:ba:68:
1b:cd:7f:0b:0f:52:c5:b2:32:ec:b2:32:ce:c4:26:93:36:ca:
37:66:35:5d:83:ad:ca:2c:ed:0b:6f:44:5c:33:32:cf:b5:e7:
a0:77:81:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:07 2025 by rpki-client