Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
File: asNOSfupZAuD6rqvupxKuWyMNUQ.mft (raw, json)
Hash identifier: YuJLvnMyhh7i4DSqM8hwv6ASfv2zEEVQ0nkn9J7D+QA=
Subject key identifier: DB:34:88:54:DA:DD:E4:14:4E:F1:AB:C2:3E:D5:68:10:A8:F9:4C:F2
Authority key identifier: 6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
Certificate issuer: /CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Certificate serial: 0197711B2172F820A8595F3EF9B33C6046CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
Manifest number: 0F10
Signing time: Sun 15 Jun 2025 01:01:32 +0000
Manifest this update: Sun 15 Jun 2025 01:01:32 +0000
Manifest next update: Mon 16 Jun 2025 01:01:32 +0000
Files and hashes: 1: U87y99J1siFcY1ZoT18_zMMUqw8.roa (hash: WlkxlG9RIuCR4qy7OuSRfiHWs7ZtaSsDc6kVoZ9JKfA=)
2: asNOSfupZAuD6rqvupxKuWyMNUQ.crl (hash: lgLgItousgKcgsOkguaMxb3d3jZGGt/1xEydrWG6/ZY=)
3: t16Nt49ySAy36uwAiD0PGu1Vpfg.roa (hash: ad44+rctUZO6EQ8Ns0r6TEi9u2Ekz8ljDyuPV/oNu1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:21:72:f8:20:a8:59:5f:3e:f9:b3:3c:60:46:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ac34e49fba9640b83eabaafba9c4ab96c8c3544
Validity
Not Before: Jun 15 01:01:32 2025 GMT
Not After : Jun 16 01:01:32 2025 GMT
Subject: CN=db348854dadde4144ef1abc23ed56810a8f94cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fc:2b:09:b1:ed:aa:68:a3:82:2c:28:f5:92:
4b:87:2b:83:10:3f:43:3b:96:9f:16:82:a8:d1:9d:
fa:ea:5a:ea:60:95:9c:46:da:27:89:f0:71:49:0b:
0f:19:8b:19:d4:de:d3:6e:40:85:1d:fd:99:25:47:
31:c9:7b:97:3f:50:35:0c:cb:68:d9:c7:6b:18:a4:
d6:fa:ae:b4:58:95:4a:5f:49:13:53:00:c2:ec:ea:
dc:0a:2c:f1:3e:cf:c9:0a:3a:0d:43:6a:b6:3c:11:
8a:95:52:90:7a:60:71:6a:cf:66:4f:f3:86:94:7b:
f6:de:4d:6b:12:a7:e1:da:94:1a:25:34:50:ae:e4:
d1:e0:87:53:73:5d:16:b1:17:e0:ce:e5:a2:12:61:
60:d6:74:b8:58:fc:d8:e3:bb:74:19:3c:4b:c3:e5:
a0:bb:98:6d:8e:36:14:59:6b:23:d3:01:de:51:fe:
01:99:dc:a8:ef:fe:91:65:50:4d:6d:ee:4c:52:cb:
c2:6d:2a:ef:16:c6:41:de:24:9f:fa:00:20:14:d3:
de:db:5c:a4:13:1a:25:17:f8:3c:8a:38:85:6e:80:
5c:15:98:08:e5:92:aa:5c:56:94:5b:53:fb:1f:e0:
4f:ba:4d:38:1d:3d:ed:fe:ae:76:b4:1f:f6:49:fa:
04:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:34:88:54:DA:DD:E4:14:4E:F1:AB:C2:3E:D5:68:10:A8:F9:4C:F2
X509v3 Authority Key Identifier:
keyid:6A:C3:4E:49:FB:A9:64:0B:83:EA:BA:AF:BA:9C:4A:B9:6C:8C:35:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/asNOSfupZAuD6rqvupxKuWyMNUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/1befb9-c103-40af-8970-93c4568b103b/1/asNOSfupZAuD6rqvupxKuWyMNUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d0:eb:00:86:33:b6:eb:c5:3a:53:60:71:7b:13:01:23:e6:
2b:49:18:fc:51:c0:c3:f0:83:fc:1b:4b:a6:b9:ba:47:c2:c2:
e0:6c:82:c8:95:eb:a3:b1:b9:8f:dd:a1:65:90:66:0b:36:16:
13:87:d7:2a:c4:f0:dc:f1:47:cf:41:43:28:60:b6:dc:63:f4:
49:ea:4e:b2:ee:42:60:ef:66:91:f9:cc:4b:99:4b:71:e8:1f:
6b:95:5f:1d:80:bb:07:47:70:b5:8c:e1:53:6d:99:41:76:9f:
0a:f4:32:47:e1:04:7a:70:67:ff:61:12:b9:a0:ea:7c:99:fd:
bd:1d:e6:5c:da:11:be:92:c6:e7:8b:83:f6:6f:8f:6c:90:0c:
c2:ba:b6:e6:01:d6:8e:23:73:8a:fd:b9:76:a8:e8:fd:55:31:
de:97:4c:c6:74:03:aa:9b:ed:69:cf:69:93:11:ec:17:f0:20:
77:a6:90:24:5c:a5:20:eb:6e:68:6c:71:22:0f:2e:f5:a8:60:
b9:e6:ea:fe:8f:7f:df:7d:a0:16:c4:28:a4:f8:a8:6e:74:3e:
e7:d2:be:a0:80:d0:a0:02:1b:b1:3c:c2:b4:99:0d:34:5c:3e:
ef:03:e6:d1:96:7c:c2:99:e9:2c:bd:0f:3f:c7:22:e0:3a:ac:
47:96:35:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:13 2025 by rpki-client