Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: VvcTXKF33cGTcKukQ5Elb20MBs+iKhuFVSlQBNnxx5w=
Subject key identifier: 47:6E:F1:63:C1:53:D8:19:8B:F6:8A:2A:8C:FD:4D:DB:C7:1A:DB:71
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01968DA6864D8F806C2BA075E997995DBF58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 0246
Signing time: Thu 01 May 2025 21:00:22 +0000
Manifest this update: Thu 01 May 2025 21:00:22 +0000
Manifest next update: Fri 02 May 2025 21:00:22 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: nIu397zuLjfThS3LC+L4sUegHxbsiKTuo2Ohm1jYH8A=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:86:4d:8f:80:6c:2b:a0:75:e9:97:99:5d:bf:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: May 1 21:00:22 2025 GMT
Not After : May 2 21:00:22 2025 GMT
Subject: CN=476ef163c153d8198bf68a2a8cfd4ddbc71adb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1f:1f:16:27:53:01:c5:79:80:c6:a6:8a:10:
46:82:5b:ca:5d:f7:f8:df:52:21:50:99:2a:58:0e:
8e:90:3e:95:89:96:3b:ac:a7:22:f3:8f:60:8d:e7:
38:76:48:9a:47:f2:a5:dc:b6:20:90:0c:fd:34:a1:
37:7d:73:be:41:6e:b1:44:e5:05:ac:cf:af:53:5f:
66:67:07:b2:9c:b8:df:68:93:9c:ca:03:53:0c:5e:
c9:a8:67:e3:2a:88:25:fa:b6:77:90:78:ec:e6:ee:
c1:6f:1e:a8:cb:28:51:6d:3f:cd:7b:9d:25:a9:7d:
39:65:f0:44:d5:49:7b:f3:28:f6:ac:12:b0:24:5e:
e5:a8:2c:3e:82:6d:a0:fc:b4:04:0d:3e:ab:e9:7d:
7e:49:aa:47:28:41:71:89:0f:0c:bc:7f:c5:6a:f0:
b9:3c:a1:2c:80:35:ad:2a:c3:55:ee:3b:6d:59:14:
b4:e9:55:c6:55:a3:79:98:a0:1d:f1:70:46:e7:15:
6f:c5:fb:cd:91:3e:0a:1c:91:1a:9e:4b:8f:2d:f1:
a8:e0:b8:91:96:25:cf:e7:3e:c6:64:43:6c:0a:b2:
d5:01:2d:b3:71:07:fe:d4:0c:fb:8c:8f:3a:62:2c:
94:48:34:57:09:70:39:33:9e:f5:42:ce:f4:d2:63:
db:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6E:F1:63:C1:53:D8:19:8B:F6:8A:2A:8C:FD:4D:DB:C7:1A:DB:71
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:b0:35:cf:fe:42:23:a2:83:ce:86:20:10:fe:7d:fc:e8:2f:
1e:e5:38:cc:7a:f4:76:dd:d2:82:36:49:c0:47:71:ea:11:77:
4c:60:ac:8f:4a:31:c3:b4:31:77:50:4a:90:b7:0f:bc:22:5e:
f7:60:81:47:e5:e8:9b:78:8d:e5:a7:9a:3f:22:c8:b3:7a:4f:
fb:20:15:5e:d8:68:4a:c4:ff:8b:e4:3d:96:65:4d:76:8a:45:
c1:15:f3:03:7e:2c:fe:6e:2f:44:05:3c:aa:61:96:c7:98:3a:
52:54:53:35:a3:13:63:71:c3:61:78:de:4f:4c:85:97:dc:35:
6a:47:ba:83:fb:8d:f1:c0:e1:f6:12:f5:8b:7b:27:72:e6:3e:
2c:4b:04:fd:a9:c0:7c:92:31:5d:61:46:b5:78:9b:ec:3f:22:
a9:e9:f8:2f:76:3c:26:41:55:a6:10:b8:68:1f:62:2d:a9:63:
33:cf:f7:b3:75:30:dc:4a:6f:92:85:c1:8e:75:9e:f5:fa:60:
f2:55:c8:e7:ec:1e:6e:df:4d:47:96:71:98:45:4b:0a:4e:e5:
5d:92:40:72:af:9c:b2:16:3e:e2:cc:cb:e0:0d:2b:9c:99:27:
4c:6d:46:f9:54:d1:c7:8b:7a:35:8d:f4:d7:5e:38:63:d0:2d:
bb:cd:c3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 01:18:04 2025 by rpki-client