Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: qklNa8fr7wa5/vhpYohXykDz0BqccT6J/f0gd38DjPo=
Subject key identifier: A9:E9:D5:10:15:4A:AC:90:D0:1D:39:48:4E:70:A8:74:0C:BE:C0:DA
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 0196C5A84630F1F514F22E19E8C74596E6DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 0263
Signing time: Mon 12 May 2025 18:01:01 +0000
Manifest this update: Mon 12 May 2025 18:01:01 +0000
Manifest next update: Tue 13 May 2025 18:01:01 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: 6r3nfbmmQTlpVextyUtseZ/tz8OOVVVrt9xTYjaXTgc=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 14:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c5:a8:46:30:f1:f5:14:f2:2e:19:e8:c7:45:96:e6:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: May 12 18:01:01 2025 GMT
Not After : May 13 18:01:01 2025 GMT
Subject: CN=a9e9d510154aac90d01d39484e70a8740cbec0da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:4e:f3:f7:24:6c:d0:f3:4f:3b:bd:9a:54:
5b:59:9b:fb:e0:26:85:55:3f:0d:f5:e4:c7:a4:01:
4c:ae:9f:e5:d2:4e:4e:0c:10:0e:b4:c3:e8:df:80:
1d:59:34:c8:ad:3b:6d:af:bc:c5:4d:5e:e6:7e:4c:
1e:77:ea:d5:d4:3d:47:8e:c2:7a:e0:a9:2a:f6:29:
6a:dd:e8:c4:b8:ec:c2:c7:db:f4:62:c8:59:92:b8:
bd:88:a7:26:db:40:e1:6a:97:ad:21:0d:7c:86:cc:
73:93:cf:fa:a1:e2:da:e7:58:95:9a:ba:f8:7f:09:
cf:bf:7a:b0:cf:17:53:ce:2c:d0:38:ee:c0:2e:34:
9d:55:0f:b9:76:67:6e:c2:30:e7:88:39:d0:21:dd:
88:94:79:5f:b6:fe:68:81:c7:79:7a:43:20:a4:49:
31:f2:4d:77:51:35:27:51:bb:9a:30:b4:cd:f0:6f:
a5:56:91:55:f5:25:a7:f5:46:13:fa:1d:08:59:d6:
af:86:b0:e4:9a:83:21:85:b7:1d:c4:ab:d1:a6:ad:
88:48:55:6f:5e:2f:2f:fc:34:6f:66:af:65:75:e2:
0b:d7:77:37:33:6d:aa:74:20:1c:b4:7c:b0:3d:2d:
70:c3:e4:15:bb:3d:59:7c:f1:78:7e:63:82:fd:03:
26:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E9:D5:10:15:4A:AC:90:D0:1D:39:48:4E:70:A8:74:0C:BE:C0:DA
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:40:d9:2f:31:1f:df:61:39:0f:5f:65:6f:4e:9d:99:80:6a:
00:8f:6d:25:bb:93:ab:e2:7f:46:af:c9:cf:88:bf:29:32:ba:
15:6c:1a:ad:b4:f3:77:5c:f8:99:fd:37:7c:89:e3:50:e9:25:
b0:c9:4e:21:ce:bf:0a:ec:df:73:6d:f1:de:70:5e:2e:89:50:
fe:70:51:39:c7:ec:5d:33:e3:09:d5:a4:e6:26:de:3a:5c:4d:
58:29:6f:53:1a:9b:ff:2f:d7:ea:f3:ad:d3:bc:01:ed:94:52:
79:f1:47:73:9f:48:00:f4:7c:a2:e7:25:cf:96:00:7a:5f:5a:
06:df:b4:0b:e0:ce:9e:bf:e3:bc:5e:3e:e0:95:30:5b:17:4d:
7e:c1:52:d8:8a:da:99:d0:a3:a9:4c:9a:c8:4f:0e:19:61:38:
23:23:9d:d3:e1:18:28:58:73:b9:0e:36:cd:f3:ca:91:31:e1:
8f:4a:c0:7b:8e:7f:b6:c8:b5:06:d1:05:d6:b2:41:8e:3e:19:
3c:79:95:84:48:7f:f7:41:77:39:5e:4b:06:af:3e:6a:57:4d:
8c:d3:f8:b0:9b:cb:96:75:21:2c:bf:85:25:0e:fb:9d:af:15:
37:e4:cf:72:a7:59:62:99:44:2f:d6:03:0b:88:7a:4d:a3:3e:
a2:f3:2e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 23:14:28 2025 by rpki-client