Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: AGEIspGvk84mJDBPm4LluiA7H77yYsAo/bckFTfECco=
Subject key identifier: 56:A6:16:4C:4B:39:02:EE:70:AD:96:00:9A:39:98:2C:9F:4B:0D:5A
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01976C2ACA58147A503CFBA19ECE26F104F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: B2
Signing time: Sat 14 Jun 2025 02:00:32 +0000
Manifest this update: Sat 14 Jun 2025 02:00:32 +0000
Manifest next update: Sun 15 Jun 2025 02:00:32 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: mfhd5fQkL2bjShfYAEIJz/F3wA+dH0xL0hQfP05Uev4=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:ca:58:14:7a:50:3c:fb:a1:9e:ce:26:f1:04:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jun 14 02:00:32 2025 GMT
Not After : Jun 15 02:00:32 2025 GMT
Subject: CN=56a6164c4b3902ee70ad96009a39982c9f4b0d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:e5:64:cd:cc:26:08:16:6f:a4:bb:bd:2c:5b:
1d:41:28:26:1e:e6:9f:37:64:c6:b3:b1:21:ca:11:
af:74:60:39:aa:ec:83:f2:6e:5b:b9:c8:0b:f2:59:
d3:85:65:f2:be:00:b1:86:e5:e9:e1:ba:03:a3:c0:
65:1d:22:87:36:85:e0:60:35:b4:81:3f:e1:6d:f2:
ed:cc:9f:de:af:cf:aa:99:d4:46:59:32:1d:d8:f2:
77:6b:42:f3:86:72:f1:3d:3c:b8:11:60:45:bc:2e:
08:1f:6b:94:60:7a:11:53:70:0e:e2:4e:b0:3d:89:
ce:15:ad:cd:83:f5:01:a9:4d:f7:b8:84:c5:15:64:
eb:40:e9:44:e1:a7:a6:6a:7e:ff:1e:c0:7a:43:9d:
d3:f2:49:ae:4d:ff:d5:01:b4:dc:9a:28:1a:48:63:
61:3f:f5:77:ed:c1:41:52:5d:e5:02:6b:ec:6f:0e:
52:3b:1e:92:27:b3:a4:73:81:67:30:b4:3a:a4:3e:
27:49:2a:e2:25:3c:73:92:bc:2e:9f:c6:fc:7a:2b:
53:32:3b:ce:7d:6d:03:12:82:f6:3c:ce:da:2c:2c:
42:b5:76:0a:d1:d4:77:5b:a2:e8:89:24:a1:f2:df:
c6:12:29:da:20:8e:10:6a:e0:97:97:07:89:42:9e:
84:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A6:16:4C:4B:39:02:EE:70:AD:96:00:9A:39:98:2C:9F:4B:0D:5A
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:aa:78:e9:be:81:d1:3e:56:44:de:d3:54:90:72:03:94:30:
2a:be:f4:0d:d9:e6:ba:26:ae:a5:d3:3f:7f:4d:63:81:c0:ac:
72:d3:e3:1c:79:48:2b:8e:f8:5b:ad:37:69:ed:2b:7a:b1:6c:
69:b2:ee:c5:22:fd:10:bd:af:4a:b4:d6:97:ae:07:fc:c1:c8:
b7:8e:13:33:eb:87:3a:06:06:b4:46:24:fa:d9:34:a5:33:34:
7e:0d:f5:bc:e1:d8:87:93:17:4b:4d:2c:84:11:9f:cb:5f:c6:
04:08:fb:93:81:da:a2:ca:31:b7:f3:ff:87:d8:d1:2c:15:f4:
7c:5f:a6:bf:ce:7e:f6:22:c0:36:44:f5:78:79:7a:ae:87:81:
02:f9:b2:be:6f:df:12:56:0a:bc:1e:1d:65:9a:1a:83:46:98:
e3:17:93:ff:7b:40:4a:0c:84:44:c5:31:18:01:8e:f9:c7:09:
24:5b:55:bf:68:85:9b:dc:c1:ab:1d:18:28:b7:fb:62:a6:3b:
3b:a7:a4:32:41:30:f9:3d:59:13:9f:e7:5f:3b:39:fb:e0:9d:
dc:e3:86:0f:10:5b:f2:be:da:3d:05:3b:c4:18:4e:ec:f5:53:
14:dd:12:fe:83:0f:9f:f0:2d:55:21:d5:2c:5f:af:8d:9c:05:
c9:c7:b8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:48:47 2025 by rpki-client