Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
File: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft (raw, json)
Hash identifier: xw9Iojl/Nzr6DOzpI0ht+ZYLCY+fpySlld/R4ZUXaEc=
Subject key identifier: ED:42:23:37:AC:B4:11:DA:D4:9C:FD:B0:99:6E:4B:0B:75:24:47:C8
Authority key identifier: 6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
Certificate issuer: /CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Certificate serial: 01976D067B90D6C2506921569E22F6BA9674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
Manifest number: 0856
Signing time: Sat 14 Jun 2025 06:00:30 +0000
Manifest this update: Sat 14 Jun 2025 06:00:30 +0000
Manifest next update: Sun 15 Jun 2025 06:00:30 +0000
Files and hashes: 1: NBepUJO_wJpnxRX9pJTgcXP4eoA.roa (hash: s4sVSw+QsBgi1se1V8v61lF7jwGyJQc1wtJojCUHwDE=)
2: a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl (hash: 3TbAT6FH+TMC/b3LwWJN9hix0KgMjXKh0sqaDux7sv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:7b:90:d6:c2:50:69:21:56:9e:22:f6:ba:96:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b6199e55c353ef7f3d2bf4a4fe38dd1a0ad8565
Validity
Not Before: Jun 14 06:00:30 2025 GMT
Not After : Jun 15 06:00:30 2025 GMT
Subject: CN=ed422337acb411dad49cfdb0996e4b0b752447c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:24:37:a0:46:ba:f1:26:07:9d:27:7c:a5:a5:
b6:10:e8:01:85:33:37:d4:c2:6d:45:fe:d6:70:30:
af:60:90:4a:7a:37:ce:7f:03:21:1f:7d:de:fc:b3:
b0:45:1c:70:78:68:05:ed:9b:b2:9e:ef:c8:31:f7:
d0:30:a8:6f:f2:9a:f9:91:4d:c1:98:67:82:4f:dd:
b0:52:03:af:63:02:97:65:6e:e4:fb:1d:da:be:03:
d6:ee:14:d7:2b:09:d2:ee:b7:0a:89:de:51:97:af:
59:5a:91:f0:aa:ef:54:9b:c1:56:9a:3c:ac:bf:b1:
cb:89:96:18:22:30:47:b7:99:5e:3c:c7:fc:73:de:
e3:1d:c9:2e:7b:b6:72:ed:b2:81:b7:67:14:c0:a7:
e0:aa:12:11:7f:b6:18:63:6d:6b:48:d7:77:e6:29:
07:66:c0:ee:2d:ca:0b:4d:5e:1c:61:24:c6:f7:d1:
e1:ed:5f:84:fd:3c:ce:fe:06:49:f4:e2:4b:76:cc:
0b:b4:ac:10:0b:68:2b:03:92:db:f0:81:2a:e2:d0:
77:b9:f5:a7:8a:b1:86:a1:73:a1:5b:65:4a:82:96:
37:ca:76:56:6c:3f:4a:53:b7:a4:3f:b1:b4:5a:fb:
55:bf:b6:e5:c0:cd:91:0f:30:1d:5e:74:20:92:a3:
a4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:42:23:37:AC:B4:11:DA:D4:9C:FD:B0:99:6E:4B:0B:75:24:47:C8
X509v3 Authority Key Identifier:
keyid:6B:61:99:E5:5C:35:3E:F7:F3:D2:BF:4A:4F:E3:8D:D1:A0:AD:85:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/ff2ceb-e9a8-478c-88c1-3de4ece3ab2a/1/a2GZ5Vw1Pvfz0r9KT-ON0aCthWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:81:68:ec:28:3e:d4:01:14:e6:ba:60:8a:aa:f7:d8:c3:e4:
b8:dd:d7:6f:4c:3f:56:93:44:e6:3e:14:55:3e:d2:af:d1:c3:
74:c5:21:13:27:52:2b:dc:1f:8a:d2:e9:65:51:01:eb:34:96:
1d:9c:c6:fe:ed:11:e8:fb:93:16:05:b3:63:8c:5a:44:11:aa:
01:e3:5e:f5:f8:ed:0e:b1:38:2d:0b:83:8f:d8:ce:c8:fb:e9:
b0:f3:30:91:f7:fb:89:ef:13:9c:35:6a:f1:45:72:cc:39:3d:
8a:7f:e2:d7:c4:7a:d6:a1:cb:79:8f:f9:92:e0:68:78:cc:26:
57:83:36:47:13:cc:08:37:a3:da:f3:31:f4:aa:85:b2:7d:ed:
48:55:00:f1:88:60:27:f5:dc:66:e9:78:1a:db:08:b4:91:2c:
ea:a7:b6:80:47:7d:c0:ea:79:17:6a:4a:7c:02:7d:44:14:91:
2b:de:03:ef:d9:98:55:ed:e7:c3:cd:a3:6b:6d:fd:07:7c:81:
9c:70:14:a6:6e:e9:f1:43:45:6a:43:26:7f:0b:e9:92:68:7c:
40:6c:88:aa:b4:50:47:ba:e1:15:01:18:78:ef:cd:ee:8e:1b:
90:2b:8e:08:64:00:f6:56:6a:60:10:45:80:f9:e4:ff:b6:53:
fb:00:ed:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:16:47 2025 by rpki-client