Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
File: a6TjY5dLLvkOywU0CvXa9rJBYMs.mft (raw, json)
Hash identifier: Yqzg9pmblJlPmMJaYPsHJsTLZEvKDkell3Y1ox7HNBw=
Subject key identifier: 3F:AF:19:97:81:A2:A2:B5:C9:6E:24:F0:06:8B:47:49:60:CA:40:88
Authority key identifier: 6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
Certificate issuer: /CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Certificate serial: 0197696114D7196803BB52AE3B597CD1AAB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
Manifest number: 0AD6
Signing time: Fri 13 Jun 2025 13:00:59 +0000
Manifest this update: Fri 13 Jun 2025 13:00:59 +0000
Manifest next update: Sat 14 Jun 2025 13:00:59 +0000
Files and hashes: 1: 6m7j2x5GGq7W52qf5FgsTL2uZFM.roa (hash: yw3o2fOj27y6FNYr5DEC0pNcsBL8VcXlNTgJH2EfiEg=)
2: a6TjY5dLLvkOywU0CvXa9rJBYMs.crl (hash: Os8sqsjHiAsTJL+2NrJrLewZiUQvuVC7yGubtBDaz3A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:14:d7:19:68:03:bb:52:ae:3b:59:7c:d1:aa:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ba4e363974b2ef90ecb05340af5daf6b24160cb
Validity
Not Before: Jun 13 13:00:59 2025 GMT
Not After : Jun 14 13:00:59 2025 GMT
Subject: CN=3faf199781a2a2b5c96e24f0068b474960ca4088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:cc:b3:bf:de:16:92:db:16:48:c3:14:16:a6:
87:67:cf:e1:02:61:ea:0c:9f:92:46:5a:4c:8a:91:
73:8f:c7:a8:1f:60:79:11:7f:12:15:76:d1:9c:fd:
6f:b6:f1:f3:73:ba:39:37:a3:31:df:ea:e6:2a:dc:
51:ec:af:de:ee:7b:08:5b:b0:1c:9e:47:92:de:d8:
e0:4e:f1:21:5c:88:44:84:5b:64:50:43:ad:de:88:
40:90:4c:62:82:41:2b:a6:b3:f2:da:bf:b1:41:8b:
bf:5e:d3:d5:47:01:20:b1:0e:94:6b:4b:10:e0:94:
ff:fe:c2:1b:57:1e:70:5d:c7:fc:2a:c8:48:81:28:
ad:56:d0:5e:2e:89:e0:ee:df:d1:27:0c:c8:92:68:
f7:23:79:90:3c:38:2d:8a:a6:6d:30:6b:98:5d:f9:
ac:a8:37:63:45:d4:05:cb:98:4a:b5:64:53:bf:5a:
c3:b8:e9:17:ce:dc:6e:b3:9e:b0:3e:36:79:aa:cf:
5d:98:ba:48:6b:9b:e1:13:66:91:22:d2:b9:ba:c5:
8a:1b:53:a6:70:13:04:15:7b:b5:83:d2:46:dc:60:
ae:9f:1c:bf:38:de:c5:9b:b3:c2:84:95:fe:b4:37:
17:0a:5a:26:19:5b:dc:39:92:73:fb:ea:31:a0:13:
cb:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:AF:19:97:81:A2:A2:B5:C9:6E:24:F0:06:8B:47:49:60:CA:40:88
X509v3 Authority Key Identifier:
keyid:6B:A4:E3:63:97:4B:2E:F9:0E:CB:05:34:0A:F5:DA:F6:B2:41:60:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6TjY5dLLvkOywU0CvXa9rJBYMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/8a495d-c435-42dc-9123-ecd7fee7c1b0/1/a6TjY5dLLvkOywU0CvXa9rJBYMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:dd:30:03:c1:0e:ee:d4:4e:02:17:18:4b:93:65:cc:d1:
cd:b4:23:81:e2:56:7b:47:d9:85:e5:ad:ba:77:e2:6d:63:a6:
6b:85:aa:6f:7d:4d:c7:37:2e:40:0e:fd:26:e9:22:f7:c8:d4:
21:ae:08:e9:9a:a9:13:0c:a9:1e:01:af:e6:dd:41:7c:a7:d6:
c3:e5:7b:3b:0c:07:50:f1:57:84:2e:c1:0f:73:c6:60:62:d4:
fa:be:a2:73:7d:a8:27:44:23:90:9e:ae:52:ee:64:fc:24:29:
21:27:1e:7a:82:3d:7a:f8:f5:71:ef:79:65:d2:f3:a4:6f:b6:
68:2c:5d:65:58:61:6e:0c:d3:9d:4a:54:25:38:80:e1:26:34:
42:cd:f3:d5:c7:e2:f9:49:a9:8c:f6:42:8d:a1:6b:fa:64:71:
bf:7d:6e:6f:de:55:d0:65:89:9b:a4:93:63:fa:78:7e:10:6f:
73:df:0c:ff:9d:82:7f:73:53:d1:69:a7:ec:04:73:e1:74:26:
01:66:b1:c1:ff:85:5e:1c:2f:15:c8:9c:3b:02:fa:1d:5a:c9:
68:87:eb:18:dd:4b:7a:21:de:32:11:5e:a2:a0:80:ea:ba:bc:
c1:ff:96:22:c4:07:9c:f9:4f:70:7b:7d:c2:03:4b:ef:75:cc:
14:b4:ba:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:59 2025 by rpki-client