Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: n3ny5Y21JSBJnves5pX/1Pvky63tcqG7lgeSti6VRd8=
Subject key identifier: 1F:0F:97:4E:21:6A:CC:2F:7B:C0:A8:0C:73:0D:B5:39:38:62:76:F7
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 0199FC58B9BDEDE0F0786B47825F0E2BA2AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 040D
Signing time: Sun 19 Oct 2025 12:01:37 +0000
Manifest this update: Sun 19 Oct 2025 12:01:37 +0000
Manifest next update: Mon 20 Oct 2025 12:01:37 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: l6SikvX2X+X2wg8DksnoUIWzIcOcXCon1XPwTUWjFuc=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:b9:bd:ed:e0:f0:78:6b:47:82:5f:0e:2b:a2:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Oct 19 12:01:37 2025 GMT
Not After : Oct 20 12:01:37 2025 GMT
Subject: CN=1f0f974e216acc2f7bc0a80c730db539386276f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:95:d4:cf:00:be:60:75:69:46:73:5c:e7:6d:
79:39:d3:ce:29:b5:a5:ba:4d:b0:c6:f4:ad:fe:94:
19:90:7f:ce:5c:16:b5:38:e5:f9:70:f4:cb:0d:88:
b4:08:0e:3d:9d:0b:24:b0:8b:62:f8:86:15:2e:84:
30:da:4a:65:df:e3:f1:b7:73:34:93:88:a8:25:71:
06:f4:b4:cd:f5:87:55:46:10:db:2f:12:f4:15:7b:
2e:4f:4d:4e:e0:2c:d1:9a:96:49:c5:2f:6f:0b:af:
a3:78:0e:0e:69:04:8d:02:c5:fe:b4:fd:3d:a7:8d:
2e:08:f8:12:46:c2:26:af:df:4d:0c:25:77:06:2a:
03:a1:83:55:fa:cc:88:22:16:ac:6f:08:16:2d:50:
88:0e:8c:22:e4:9a:25:01:65:01:37:29:9e:e9:44:
68:2c:d4:0b:02:e2:43:18:2f:85:7b:58:42:c8:51:
b9:54:2d:64:e0:56:34:ab:01:c8:e4:37:fc:b0:2d:
d5:22:cf:ac:6a:9d:4a:51:3e:de:45:33:28:05:a9:
08:31:87:3a:64:ca:38:cd:bd:ae:ab:32:e9:e6:f3:
ed:fd:03:ea:de:b9:7c:f5:1b:18:86:e3:19:44:30:
8b:9f:37:e8:8b:28:6a:bb:b7:d3:1e:f6:b5:ad:54:
dd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0F:97:4E:21:6A:CC:2F:7B:C0:A8:0C:73:0D:B5:39:38:62:76:F7
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:d8:4e:0b:3f:71:30:29:d3:c4:5b:6d:4b:08:3c:db:3a:85:
2b:a0:d4:28:81:e6:08:9e:a7:6c:b8:e7:a2:6b:a1:23:32:5b:
7f:70:99:58:7e:23:4f:ba:0c:e0:b3:0a:97:a4:eb:19:c1:5c:
c5:89:de:e2:0e:77:15:f2:19:1f:1b:a4:05:b5:ab:8f:18:cb:
48:87:13:a1:a3:97:77:8f:6e:55:50:97:4a:65:2d:6e:cd:e2:
88:71:ee:61:ad:d5:d1:a1:11:c8:59:66:8e:54:4b:c6:58:d1:
1d:38:5d:8f:aa:67:d3:3f:c9:1e:d9:8d:84:3b:ea:ff:2c:84:
90:fe:23:41:f0:b4:5e:f3:b5:80:34:62:85:71:2c:d8:9d:fb:
48:2d:7d:39:11:47:9d:fb:e3:54:4a:62:3c:2f:ed:d9:87:9c:
40:1c:9c:76:8a:82:e7:83:de:8c:05:80:53:fd:b8:c8:f3:48:
ba:7d:f1:6c:dc:00:3a:25:c6:e9:2b:69:69:cc:cc:75:ea:4f:
71:02:1a:10:63:e4:f2:e1:2f:92:a8:80:e1:87:af:f8:df:c9:
08:aa:65:60:d6:8b:a6:73:8b:ee:d8:d0:1b:c5:ab:91:d2:8f:
02:f8:fe:e9:b1:81:2d:fc:7f:4f:fb:e1:f3:6e:81:b4:a7:47:
da:ce:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:18:53 2025 by rpki-client