Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
File: A6YrMJo3hUJZChKznF9wzbDnsVA.mft (raw, json)
Hash identifier: HahihT2vUAHNWyXLf2SzqPYx1VcDIm7F4KqdJ0l6bT4=
Subject key identifier: C2:1D:4E:9D:6E:C9:39:3F:FA:01:96:E7:63:4A:D0:BD:91:27:66:58
Authority key identifier: 03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
Certificate issuer: /CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Certificate serial: 01988D6AE038349DE5732E1485484244D7E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
Manifest number: 034F
Signing time: Sat 09 Aug 2025 06:00:48 +0000
Manifest this update: Sat 09 Aug 2025 06:00:48 +0000
Manifest next update: Sun 10 Aug 2025 06:00:48 +0000
Files and hashes: 1: A6YrMJo3hUJZChKznF9wzbDnsVA.crl (hash: hKY3csuQcI6kcGs0ZsrqN+aebzuyCVIw0A+6eGBWZ9s=)
2: BDHKukDv4jqfvg5mUVq9SOfKkHk.roa (hash: r69AyZ5q//j/yv/BwLLu5AvuWEdbokVUHIhkdE53vJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6a:e0:38:34:9d:e5:73:2e:14:85:48:42:44:d7:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03a62b309a378542590a12b39c5f70cdb0e7b150
Validity
Not Before: Aug 9 06:00:48 2025 GMT
Not After : Aug 10 06:00:48 2025 GMT
Subject: CN=c21d4e9d6ec9393ffa0196e7634ad0bd91276658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:3c:fa:7b:00:84:b1:7b:88:a8:87:25:b3:
83:f5:7a:58:13:3c:13:c1:22:29:c8:5e:65:66:7d:
c5:31:0d:63:a6:8a:73:a2:2a:a0:29:8d:c0:9b:3c:
a4:c6:96:fa:cb:59:d3:9e:f4:f8:c7:7a:d2:0f:69:
b3:5a:db:3d:d9:96:3b:40:17:40:d3:e7:00:1d:44:
bd:1c:8f:9d:32:be:27:2a:27:a3:1c:d2:3e:1a:de:
4d:c9:25:e0:83:c2:d4:d9:07:e2:cc:b8:22:1a:d3:
a0:4c:77:d0:b6:c6:85:10:d8:58:a6:3e:8b:8d:74:
5b:91:0b:e0:44:c8:b8:ad:44:6c:a4:fb:ed:eb:67:
08:53:21:11:f2:28:62:6d:14:36:f0:31:ec:cb:d5:
cb:6c:7e:ba:6b:3a:9e:bb:d7:42:9c:7b:67:35:64:
b9:e2:2a:21:47:34:01:fc:20:0d:f3:b3:ac:e7:b7:
af:7c:be:43:20:fc:66:be:5b:99:11:d6:e7:b7:07:
de:a2:59:0f:4e:18:05:32:06:d1:54:9b:b6:f6:44:
09:28:5a:97:f9:b4:a2:0c:66:c9:3f:c0:bf:08:eb:
fa:e8:a7:01:8c:5b:11:51:a3:93:00:b3:10:fe:3a:
78:ca:d0:4a:ee:6a:77:c1:56:0a:47:8b:a9:de:80:
aa:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:1D:4E:9D:6E:C9:39:3F:FA:01:96:E7:63:4A:D0:BD:91:27:66:58
X509v3 Authority Key Identifier:
keyid:03:A6:2B:30:9A:37:85:42:59:0A:12:B3:9C:5F:70:CD:B0:E7:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A6YrMJo3hUJZChKznF9wzbDnsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/6d2a19-4746-478f-9936-2733f699cb62/1/A6YrMJo3hUJZChKznF9wzbDnsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:da:d8:a8:e2:bf:40:6d:92:8a:2f:69:06:87:50:34:13:66:
95:51:0c:f6:39:6a:21:a0:e6:5e:7b:1f:fd:90:4b:7c:9e:20:
ba:e7:19:e6:d2:f8:00:70:cc:b0:38:0a:6d:d4:32:67:49:2c:
a8:50:43:54:2c:a3:bf:71:ba:e0:8b:2f:cb:61:f7:51:a3:39:
55:1c:08:a3:77:b4:bf:14:30:2a:ee:18:67:b1:e2:d4:67:cc:
20:ee:39:b3:47:80:78:be:27:5f:f1:62:90:af:e1:31:96:48:
bb:81:b3:55:94:bd:fa:56:6f:3d:d1:3f:b8:fb:c4:23:26:f4:
47:5f:ec:51:ad:e5:d1:4f:33:07:85:9c:d1:6b:87:9c:9f:bb:
de:28:f0:dd:49:a5:77:98:54:15:2e:a9:48:b1:cb:cc:00:05:
77:5b:a0:ce:2b:09:7d:d9:8c:4e:93:fb:c6:bf:d8:15:95:b5:
cf:ad:88:af:86:ab:4b:b8:38:15:98:ba:96:af:23:64:06:e1:
1a:d8:b6:e5:69:c7:ca:33:e8:39:2e:62:25:68:32:95:eb:24:
01:73:d1:66:a1:d1:6f:1d:7d:36:42:bb:51:33:2e:1f:e9:fd:
bd:5e:54:77:de:ef:3f:54:f9:e8:d5:d2:38:e9:45:2d:cf:d9:
77:0f:0a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:31 2025 by rpki-client