Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
File: A6bcLyZo69z4a2wCWKgYfl984nA.mft (raw, json)
Hash identifier: sTfuCcN5DA3jV6CZKLyItzL8TFIYgCxDtBu87cYb8IE=
Subject key identifier: 33:B3:8C:20:A4:BF:D4:23:F4:51:25:E7:E4:9C:C9:57:CC:76:7B:DD
Authority key identifier: 03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
Certificate issuer: /CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Certificate serial: 01976FD0EEF65C29728154DEBA1B6C0B4909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
Manifest number: 067D
Signing time: Sat 14 Jun 2025 19:00:53 +0000
Manifest this update: Sat 14 Jun 2025 19:00:53 +0000
Manifest next update: Sun 15 Jun 2025 19:00:53 +0000
Files and hashes: 1: A6bcLyZo69z4a2wCWKgYfl984nA.crl (hash: 3Hts443TxPCFt7SSejOmMAs1AY4N3eljcMgxkd1E40o=)
2: dd8av2mxTwjOvzgQCyuc1wPNBmI.roa (hash: jwwVY2pCMQyTKSG87HTCJ5bltMafN2RGopv4GJtWPmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d0:ee:f6:5c:29:72:81:54:de:ba:1b:6c:0b:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a6dc2f2668ebdcf86b6c0258a8187e5f7ce270
Validity
Not Before: Jun 14 19:00:53 2025 GMT
Not After : Jun 15 19:00:53 2025 GMT
Subject: CN=33b38c20a4bfd423f45125e7e49cc957cc767bdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:34:93:c8:21:30:03:10:13:d3:64:fb:2c:
f2:c3:6d:77:4c:3a:01:0f:c9:99:28:61:0d:72:ed:
2d:dd:6d:71:dc:67:07:ad:69:c9:49:ab:b1:59:bd:
d1:5a:fc:36:17:41:d8:62:62:06:86:3f:34:36:eb:
eb:ce:1b:a1:64:d7:5a:e5:19:f2:7a:a0:09:ee:5d:
2e:a4:02:1a:7b:b3:a3:8e:cf:3c:50:58:49:6b:08:
d6:28:5f:df:0b:74:c7:14:e2:f0:48:a8:cd:da:ef:
7e:c6:32:5c:7e:33:35:16:ab:c9:e6:30:af:44:92:
dd:fa:24:e2:e5:88:fd:b0:92:e4:1e:47:6f:7f:65:
e7:29:ce:70:7c:a5:67:69:ae:36:22:99:8b:20:13:
13:a9:53:7c:13:22:a0:9e:a6:d1:28:92:d9:c7:51:
41:c3:c5:80:85:84:ec:02:30:82:7e:74:6d:c9:0a:
96:1a:08:48:b7:d8:8e:cb:9f:c3:01:ea:e2:f3:cf:
20:17:21:b8:69:32:94:b3:b1:0b:04:31:20:f4:b6:
a1:2c:4d:89:07:24:ed:29:54:cf:2f:1f:c6:a9:99:
22:0f:f3:7a:33:ab:fe:7e:99:d6:41:88:d2:cc:79:
a4:ce:46:2f:7b:bb:5a:8c:4e:ac:fc:0c:05:d4:77:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B3:8C:20:A4:BF:D4:23:F4:51:25:E7:E4:9C:C9:57:CC:76:7B:DD
X509v3 Authority Key Identifier:
keyid:03:A6:DC:2F:26:68:EB:DC:F8:6B:6C:02:58:A8:18:7E:5F:7C:E2:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6bcLyZo69z4a2wCWKgYfl984nA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/28b303-47a5-4a92-b02e-ebd0c3ee44ae/1/A6bcLyZo69z4a2wCWKgYfl984nA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:0e:2a:55:ba:49:94:1b:9e:36:89:d2:e4:e9:68:f5:68:
1f:4b:a4:50:a6:53:03:dc:63:12:17:54:d8:87:b5:22:3b:4f:
58:92:84:c5:99:19:ac:3a:15:24:f4:3e:10:58:90:ed:15:09:
98:b7:ca:f6:8b:fd:22:b8:a3:84:c8:d9:0f:28:11:bb:8e:d3:
e0:3c:f6:6c:7d:0a:93:93:0f:5b:5c:ab:6a:21:ee:21:bd:de:
19:0a:f3:61:b9:8e:3a:77:7f:15:11:c8:50:49:2a:ea:16:c9:
10:bb:b4:44:59:eb:32:a4:1a:9f:28:e3:54:43:c0:3c:eb:b0:
b9:78:23:b2:1b:e8:ad:b7:72:f2:86:dd:b5:fb:6c:f2:38:6f:
d0:c4:6e:49:21:ec:f4:14:bb:4c:24:19:cf:46:e9:83:17:f8:
2b:7e:c3:0a:33:f7:09:e4:34:c5:31:30:41:82:fd:a0:7a:5a:
bf:7b:d8:67:13:b4:4a:a9:cb:1c:a6:4d:4a:0e:92:73:b2:0d:
3e:53:88:69:ed:81:96:71:95:43:fa:81:b6:59:83:d4:6e:98:
e1:cf:61:b0:ea:ae:8e:a6:e1:21:f3:77:85:dc:ec:ed:31:2d:
f6:b8:4c:ff:c7:64:e2:fc:1c:c9:5b:be:36:ca:db:33:28:54:
f8:e0:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:55:04 2025 by rpki-client