Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: OLyVmuJYoCsjrPkoOC+qlfu6qy0UoAXztkdFcrwJQ/Q=
Subject key identifier: FC:78:24:E2:9B:C1:E3:D5:F6:25:58:09:CE:20:A7:3D:A1:01:4A:DD
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 0197B5FBBB668A2BEEE1348C381F62B9AD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 10:01:02 +0000
Manifest this update: Sat 28 Jun 2025 10:01:02 +0000
Manifest next update: Sun 29 Jun 2025 10:01:02 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: 7RQRPWRqDODcSSNgcOx2r2HtLvfQ9wjSyMXdoeYcpbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:bb:66:8a:2b:ee:e1:34:8c:38:1f:62:b9:ad:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Jun 28 10:01:02 2025 GMT
Not After : Jun 29 10:01:02 2025 GMT
Subject: CN=fc7824e29bc1e3d5f6255809ce20a73da1014add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:c1:e9:f0:04:1b:22:de:49:61:21:2c:a0:
45:f9:29:cf:48:ef:de:52:c0:aa:1e:85:12:29:68:
9c:14:a0:3a:32:39:c2:ad:28:33:cb:27:3b:cb:fe:
94:fd:f7:c1:18:61:99:07:94:98:0f:8c:4e:fc:61:
7c:3a:6e:d6:65:cd:e4:ee:22:ef:c6:c5:2d:b7:13:
71:12:0a:7c:a4:86:67:7f:17:6d:0e:a1:f3:25:cd:
a0:9e:51:1c:f8:2c:6b:0b:e6:ec:7c:d3:83:5c:cf:
e3:ba:a3:96:c5:4c:6f:f5:83:9f:99:36:09:95:8c:
ca:86:98:6b:d4:59:62:66:a2:a7:39:81:81:53:c3:
6e:d7:28:b8:7c:ea:b0:8a:3a:e3:78:07:9c:64:b0:
74:c1:9b:fc:68:f3:f7:bb:7d:37:36:28:8c:00:7f:
36:7a:91:02:d2:c9:e6:62:81:e9:60:62:42:18:39:
41:2c:6c:95:53:3d:e9:56:00:a5:2b:ba:18:a9:98:
e0:1d:a7:f5:a8:73:60:52:17:48:74:8d:0e:c8:fa:
1b:1a:86:31:44:87:88:d0:e8:5d:29:13:1e:1d:64:
ae:ae:cf:f0:7d:03:dc:dc:ba:5a:2b:1a:b2:3b:c1:
0c:2c:9d:1d:cd:e9:4e:6e:61:c9:e2:22:69:47:a9:
e3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:78:24:E2:9B:C1:E3:D5:F6:25:58:09:CE:20:A7:3D:A1:01:4A:DD
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e5:ad:9e:ef:4e:75:3d:74:db:b4:6f:b8:98:f8:e2:6e:56:
25:7a:0b:00:13:5d:37:db:a9:07:03:e2:a6:53:c6:d5:00:1f:
d1:02:a8:84:34:69:16:ef:ab:b3:41:0b:f1:a3:e2:16:c7:46:
8f:18:95:8b:f9:a4:cf:90:1f:2f:82:40:32:43:88:fc:b3:69:
27:7d:96:26:33:7d:9d:40:cf:a4:de:d7:3b:c1:9b:10:a6:ea:
e0:67:27:0f:76:49:f8:dd:3e:64:7c:4b:7c:f1:78:ca:ca:a7:
9c:c8:4f:36:c7:1c:06:f8:b3:17:08:c7:f0:07:51:01:ad:62:
cf:a9:11:bc:25:44:4a:de:e0:d9:5d:9c:cb:8c:d4:c6:6c:a7:
9e:dd:e3:a0:c7:10:81:5a:c5:fb:9c:23:38:4e:f3:b9:1f:26:
00:52:90:a6:08:01:cc:8e:5c:34:0c:b2:b3:c7:04:07:ee:67:
6a:8b:ec:cd:18:eb:cc:10:59:79:a0:65:5b:3a:92:07:1d:02:
e7:0d:82:03:35:9b:10:27:1a:bd:30:f6:8d:40:b8:ac:3d:5f:
d4:8e:7f:44:46:13:b7:b9:50:85:ba:5d:cd:ba:83:48:8b:cd:
25:7c:26:35:de:4d:c2:f4:b3:14:3e:9f:c4:7a:bd:ad:33:03:
42:b7:c1:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:49 2025 by rpki-client