Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
File: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft (raw, json)
Hash identifier: OfLggCvWus2+bAIKnnPGB3hkEnG/ThTE+pD9ZGwo2OY=
Subject key identifier: A8:95:FD:FE:D0:0F:31:69:50:9B:52:17:F9:83:B6:5B:F5:39:65:88
Authority key identifier: 6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
Certificate issuer: /CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Certificate serial: 01976F2C6EB5614A9264F9AAC32031357D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
Manifest number: 06C6
Signing time: Sat 14 Jun 2025 16:01:12 +0000
Manifest this update: Sat 14 Jun 2025 16:01:12 +0000
Manifest next update: Sun 15 Jun 2025 16:01:12 +0000
Files and hashes: 1: NaKshVhSKaYmb3Sdi3LLJdyjmds.roa (hash: d86txPLHJOy87A3pf1/eOV7404HvHGLlpkkFt/51J1U=)
2: a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl (hash: 4pxXs2A613VrPowuiLB6dSLQwOHAS/0ou5enQwQYwzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:6e:b5:61:4a:92:64:f9:aa:c3:20:31:35:7d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bd19d69701f13a5977cd2296fa87a252fbf05f7
Validity
Not Before: Jun 14 16:01:12 2025 GMT
Not After : Jun 15 16:01:12 2025 GMT
Subject: CN=a895fdfed00f3169509b5217f983b65bf5396588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0f:5c:fe:60:35:de:a1:f6:10:df:a3:65:91:
29:13:8b:a8:d7:9e:0a:fd:d4:10:b3:39:6e:ae:07:
40:02:f8:50:df:09:47:02:7b:82:59:60:74:d9:db:
71:6f:50:0f:08:a9:b5:66:15:e2:91:c9:af:98:a4:
5f:b7:cb:ac:c8:35:9d:e6:e9:b1:c6:b0:e8:0b:51:
7c:70:05:74:0c:95:6e:28:a0:ab:8e:c2:ba:74:ca:
49:8a:05:cb:ca:a6:eb:a8:8f:ee:e2:af:5a:d7:6d:
ac:58:4f:7c:8b:59:a5:eb:a4:3c:d1:17:3e:25:57:
75:98:21:ce:a1:de:a5:9c:35:3e:c3:29:75:25:f4:
3b:70:7d:86:b1:11:e7:c7:c0:0b:a2:99:c6:2f:f9:
37:28:c2:73:80:48:f7:02:69:ff:ca:30:1e:c3:0c:
cf:a4:fd:87:1f:46:07:0d:3d:db:13:24:1e:e2:51:
2b:7f:32:10:92:8b:1b:1f:5b:a2:9c:2f:fc:9d:d8:
82:c6:f5:54:bc:f9:b0:30:37:37:e9:d4:2c:5a:f0:
51:1e:ef:93:34:5e:ad:a9:f8:56:1a:6b:49:c9:bb:
6b:a1:43:9d:23:94:82:60:bd:d8:15:33:a5:17:49:
b4:73:4b:b2:0b:ee:f9:84:a3:1c:0e:db:c6:5b:e8:
a6:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:95:FD:FE:D0:0F:31:69:50:9B:52:17:F9:83:B6:5B:F5:39:65:88
X509v3 Authority Key Identifier:
keyid:6B:D1:9D:69:70:1F:13:A5:97:7C:D2:29:6F:A8:7A:25:2F:BF:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/4daeba-36b4-4949-8385-8f0d4eef6ab5/1/a9GdaXAfE6WXfNIpb6h6JS-_Bfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:69:e5:8a:e2:71:34:ca:b0:31:2e:5f:f7:59:cd:5a:1e:32:
7b:66:8d:5e:5f:00:3d:b8:ee:88:6e:61:d0:9c:64:e4:c7:cd:
0a:6f:67:f5:b9:86:52:0f:e0:0d:11:d3:7b:7c:1b:5b:21:db:
38:69:ac:1c:63:c4:2f:87:e1:fc:a3:c5:d5:bc:07:8f:19:44:
2a:ba:a5:d0:4f:84:e5:d1:8b:df:31:c5:31:98:02:cf:77:f3:
0d:e5:35:de:f1:2d:c2:b9:f9:0d:ff:b3:da:83:fa:57:9f:d2:
1c:8a:c0:33:a6:7c:10:e2:69:e0:41:e7:6d:6d:46:9d:4a:a9:
c3:0b:d8:1d:76:f2:c7:0e:2b:92:4e:17:1e:f3:2e:0c:f9:be:
f2:d0:cc:f9:2d:1b:c4:ed:8e:56:7a:e0:08:f9:6b:aa:e0:cc:
45:8e:08:98:c6:28:04:4a:86:7c:a3:16:f2:bc:19:65:73:11:
18:27:d4:35:fa:e2:bd:85:eb:20:46:b5:f6:1d:fd:95:f5:af:
19:0e:ab:a7:64:11:8c:21:e6:2a:1c:a7:fd:5d:75:90:0e:c1:
3c:a6:ea:ac:a5:34:62:8b:f9:af:5a:1b:96:ce:15:0c:df:6b:
2c:6c:e6:cf:1f:99:67:b8:77:06:c2:cf:f7:5e:96:2d:25:0c:
cd:77:78:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLG61YUqSZPmqwyAxNX0XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZDE5ZDY5NzAxZjEzYTU5NzdjZDIyOTZmYTg3YTI1MmZi
ZjA1ZjcwHhcNMjUwNjE0MTYwMTEyWhcNMjUwNjE1MTYwMTEyWjAzMTEwLwYDVQQD
EyhhODk1ZmRmZWQwMGYzMTY5NTA5YjUyMTdmOTgzYjY1YmY1Mzk2NTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog9c/mA13qH2EN+jZZEpE4uo154K
/dQQszlurgdAAvhQ3wlHAnuCWWB02dtxb1APCKm1ZhXikcmvmKRft8usyDWd5umx
xrDoC1F8cAV0DJVuKKCrjsK6dMpJigXLyqbrqI/u4q9a122sWE98i1ml66Q80Rc+
JVd1mCHOod6lnDU+wyl1JfQ7cH2GsRHnx8ALopnGL/k3KMJzgEj3Amn/yjAewwzP
pP2HH0YHDT3bEyQe4lErfzIQkosbH1uinC/8ndiCxvVUvPmwMDc36dQsWvBRHu+T
NF6tqfhWGmtJybtroUOdI5SCYL3YFTOlF0m0c0uyC+75hKMcDtvGW+imsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiV/f7QDzFpUJtSF/mDtlv1OWWIMB8GA1UdIwQY
MBaAFGvRnWlwHxOll3zSKW+oeiUvvwX3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUt
OGYwZDRlZWY2YWI1LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny80ZGFlYmEtMzZiNC00OTQ5LTgzODUtOGYwZDRlZWY2YWI1
LzEvYTlHZGFYQWZFNldYZk5JcGI2aDZKUy1fQmZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApmnliuJx
NMqwMS5f91nNWh4ye2aNXl8APbjuiG5h0Jxk5MfNCm9n9bmGUg/gDRHTe3wbWyHb
OGmsHGPEL4fh/KPF1bwHjxlEKrql0E+E5dGL3zHFMZgCz3fzDeU13vEtwrn5Df+z
2oP6V5/SHIrAM6Z8EOJp4EHnbW1GnUqpwwvYHXbyxw4rkk4XHvMuDPm+8tDM+S0b
xO2OVnrgCPlrquDMRY4ImMYoBEqGfKMW8rwZZXMRGCfUNfrivYXrIEa19h39lfWv
GQ6rp2QRjCHmKhyn/V11kA7BPKbqrKU0Yov5r1obls4VDN9rLGzmzx+ZZ7h3BsLP
916WLSUMzXd4Og==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:02:29 2025 by rpki-client