Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: 1AyGDtW+6sN90Bj/qEPKT5L2aGsdSRHLg8Lbca1D/+s=
Subject key identifier: 7D:DF:61:AD:DD:3A:AA:B5:9D:87:31:05:C6:D6:1A:2F:F2:BA:0C:E9
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 0197B70F3FB104AF126E291427CEAEB62E1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 02E0
Signing time: Sat 28 Jun 2025 15:01:59 +0000
Manifest this update: Sat 28 Jun 2025 15:01:59 +0000
Manifest next update: Sun 29 Jun 2025 15:01:59 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: bmc5C3YdfuHwfv5cVRCy81lcvuPUyJPfM6t0R6H6pm4=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:3f:b1:04:af:12:6e:29:14:27:ce:ae:b6:2e:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Jun 28 15:01:59 2025 GMT
Not After : Jun 29 15:01:59 2025 GMT
Subject: CN=7ddf61addd3aaab59d873105c6d61a2ff2ba0ce9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:e8:1a:6e:29:17:c8:4d:ae:96:6c:b2:30:
4b:d0:c6:4c:e7:eb:f4:65:f5:0f:b9:31:7f:7c:c6:
f2:8c:03:e3:5a:ce:10:3c:f1:5c:eb:82:47:24:27:
8d:02:2b:8e:26:8a:bc:ec:55:4e:5b:9e:2c:3f:60:
33:11:8b:2b:16:44:30:ed:80:32:53:79:4c:d7:67:
b5:e9:82:48:90:eb:ab:01:c4:97:e3:f3:cb:e2:a9:
63:30:3f:e3:91:0d:16:ef:24:33:da:ce:17:eb:4c:
d7:51:bd:ac:b1:a8:03:ec:bd:32:c2:a1:65:c5:3f:
f1:bd:a2:af:4c:b1:f3:10:44:5c:3b:5b:c7:b1:78:
e2:bd:f1:2a:a3:58:96:b3:fe:5f:f6:28:be:4f:0f:
ff:3f:83:27:7a:21:06:f3:da:1e:e4:b9:98:7b:be:
63:09:e6:f9:5a:c4:7f:ab:0a:71:50:e0:ec:55:ad:
aa:f6:83:5b:56:37:3c:6e:c9:39:5f:2f:ae:20:da:
75:10:cf:32:69:f8:e6:3f:37:51:52:f7:62:cc:7a:
62:98:45:21:0a:3f:f3:a6:54:1f:e9:74:2f:2a:78:
22:92:07:b8:80:ac:21:a0:81:e1:88:c3:f5:84:ca:
d7:fe:9d:3a:13:73:af:1e:ea:36:b7:bd:42:47:82:
48:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DF:61:AD:DD:3A:AA:B5:9D:87:31:05:C6:D6:1A:2F:F2:BA:0C:E9
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:22:92:3d:d0:cc:1e:fe:f1:bf:f7:16:22:2c:70:93:55:2d:
60:f2:6d:17:73:28:67:7e:7c:fb:eb:3b:27:c2:42:e0:8e:59:
f1:0e:6a:44:06:0f:b3:5b:fd:b9:5f:4c:fa:53:35:88:6e:74:
b5:ea:6d:02:c4:57:b8:82:3b:05:6a:13:99:ee:95:bd:c5:e7:
53:7d:72:5c:41:61:53:3d:82:13:b2:f8:af:11:6c:25:17:67:
f6:7f:a9:c0:fb:7c:61:7f:09:82:5a:9f:d0:01:79:81:dd:76:
1d:eb:ff:67:29:58:d6:d8:14:1c:72:e1:5b:97:84:14:2c:50:
3e:fc:ae:5b:4c:93:2a:9b:2f:35:a2:d1:60:91:35:79:bb:d6:
fb:6f:b1:93:70:4a:66:eb:1f:b6:04:0b:78:aa:81:bb:c8:24:
35:b8:0f:6c:3c:bf:97:4e:b3:bc:e2:9b:3a:67:f4:e8:fd:58:
ba:8b:c5:06:26:14:b3:d9:f5:e7:bb:57:d9:7c:f5:b0:81:60:
93:a8:d0:9b:50:09:30:4e:56:1d:d2:19:f2:65:b4:63:3f:88:
ed:0d:6d:84:34:95:35:75:57:80:ae:a3:43:20:75:31:95:5a:
1d:ed:f4:3f:c5:4e:75:65:52:74:a6:f2:4e:7a:62:d3:34:f4:
47:99:79:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dz+xBK8SbikUJ86uti4aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzYTYyYjMwOWEzNzg1NDI1OTBhMTJiMzljNWY3MGNkYjBl
N2IxNTAwHhcNMjUwNjI4MTUwMTU5WhcNMjUwNjI5MTUwMTU5WjAzMTEwLwYDVQQD
Eyg3ZGRmNjFhZGRkM2FhYWI1OWQ4NzMxMDVjNmQ2MWEyZmYyYmEwY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr/oGm4pF8hNrpZssjBL0MZM5+v0
ZfUPuTF/fMbyjAPjWs4QPPFc64JHJCeNAiuOJoq87FVOW54sP2AzEYsrFkQw7YAy
U3lM12e16YJIkOurAcSX4/PL4qljMD/jkQ0W7yQz2s4X60zXUb2ssagD7L0ywqFl
xT/xvaKvTLHzEERcO1vHsXjivfEqo1iWs/5f9ii+Tw//P4MneiEG89oe5LmYe75j
Ceb5WsR/qwpxUODsVa2q9oNbVjc8bsk5Xy+uINp1EM8yafjmPzdRUvdizHpimEUh
Cj/zplQf6XQvKngikge4gKwhoIHhiMP1hMrX/p06E3OvHuo2t71CR4JICwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH3fYa3dOqq1nYcxBcbWGi/yugzpMB8GA1UdIwQY
MBaAFAOmKzCaN4VCWQoSs5xfcM2w57FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYt
MjczM2Y2OTljYjYyLzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC82ZDJhMTktNDc0Ni00NzhmLTk5MzYtMjczM2Y2OTljYjYy
LzEvQTZZck1KbzNoVUpaQ2hLem5GOXd6YkRuc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFiKSPdDM
Hv7xv/cWIixwk1UtYPJtF3MoZ358++s7J8JC4I5Z8Q5qRAYPs1v9uV9M+lM1iG50
teptAsRXuII7BWoTme6VvcXnU31yXEFhUz2CE7L4rxFsJRdn9n+pwPt8YX8Jglqf
0AF5gd12Hev/ZylY1tgUHHLhW5eEFCxQPvyuW0yTKpsvNaLRYJE1ebvW+2+xk3BK
ZusftgQLeKqBu8gkNbgPbDy/l06zvOKbOmf06P1YuovFBiYUs9n157tX2Xz1sIFg
k6jQm1AJME5WHdIZ8mW0Yz+I7Q1thDSVNXVXgK6jQyB1MZVaHe30P8VOdWVSdKby
Tnpi0zT0R5l5Nw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:51 2025 by rpki-client