Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
File: AGXxbaYGeD8wH3CKXmtP1f_UMug.mft (raw, json)
Hash identifier: HAj6aBKfmo/VZykfur6zo9Qq8oifAcldlHIHcD0al0c=
Subject key identifier: 20:C9:A8:69:DE:2F:D9:0D:2E:2F:F3:75:DB:C3:41:66:B0:4D:92:2F
Authority key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Certificate issuer: /CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Certificate serial: 0198D660CDBC88EE01235269857B50BC1589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
Manifest number: 0AE6
Signing time: Sat 23 Aug 2025 10:02:04 +0000
Manifest this update: Sat 23 Aug 2025 10:02:04 +0000
Manifest next update: Sun 24 Aug 2025 10:02:04 +0000
Files and hashes: 1: AGXxbaYGeD8wH3CKXmtP1f_UMug.crl (hash: 6XncLhbNUuy1S3Zi8UL3rzBkieupacHpciaS5K4RSYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:cd:bc:88:ee:01:23:52:69:85:7b:50:bc:15:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Validity
Not Before: Aug 23 10:02:04 2025 GMT
Not After : Aug 24 10:02:04 2025 GMT
Subject: CN=20c9a869de2fd90d2e2ff375dbc34166b04d922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f5:c8:2f:e6:a0:2b:67:ab:6b:b4:6c:72:7a:
3b:5c:a3:4d:aa:a1:53:bd:88:b7:c6:dd:84:90:f6:
66:72:e3:49:2d:70:8d:e1:3a:9e:d9:7c:89:d6:57:
f4:9f:b3:b5:40:bb:8d:14:6a:09:14:a0:c9:dc:80:
f2:62:b5:81:8a:e6:4b:c6:ba:71:cf:53:6b:0c:e1:
41:bb:4f:1b:51:48:ce:17:66:81:c9:b2:05:76:2f:
38:77:79:be:fb:47:c9:23:db:ca:ea:7a:dd:89:4e:
d8:50:1a:78:05:e2:e8:cd:86:13:6d:bc:ce:ca:e2:
5b:ab:b2:55:e4:36:73:3a:53:1d:bb:fa:18:6d:d5:
fe:89:3b:e6:72:b8:52:64:8c:d6:3f:67:c4:3a:88:
b8:bd:15:01:1c:85:57:b5:a4:11:96:64:5f:55:34:
8f:03:0c:8f:c3:17:4c:bc:46:a0:ef:ed:ee:80:9f:
d6:a8:17:31:8a:a5:e0:c6:e6:02:87:7c:b3:86:58:
52:77:2e:be:b6:68:70:c9:be:9c:01:72:9a:4b:73:
56:09:48:a0:1f:af:82:6d:8d:69:83:b0:7b:f5:8b:
b8:d1:71:b9:d2:43:80:76:4c:18:31:07:3c:b5:88:
92:6d:75:c5:79:49:0a:c2:cc:94:08:cf:af:dc:ee:
0b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C9:A8:69:DE:2F:D9:0D:2E:2F:F3:75:DB:C3:41:66:B0:4D:92:2F
X509v3 Authority Key Identifier:
keyid:00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:86:ad:59:a3:de:40:23:3d:89:04:cd:9d:c4:a4:d0:73:7c:
3e:53:a8:a1:28:4d:16:69:76:ef:12:2b:88:61:f2:e9:27:69:
8a:d0:64:1f:e0:2f:12:ca:c9:bc:a0:87:33:04:73:a3:fb:da:
c7:3d:de:21:6e:93:b1:2d:e6:73:da:ab:44:50:09:fa:ad:75:
d6:df:20:23:f3:00:c7:74:b0:07:4a:8e:e5:74:30:16:cb:08:
63:5a:53:56:15:a4:26:04:61:a9:c9:96:d2:c3:de:6b:61:4b:
67:0b:a2:9b:dc:72:b4:22:d6:aa:73:c8:6d:0a:15:3c:cb:0d:
07:8e:03:25:7c:22:6d:db:8e:cc:6a:0e:c1:06:6f:10:c8:e5:
df:67:c5:df:4b:b4:81:e8:ca:97:22:e6:c5:cc:c9:d7:e7:d9:
f4:3e:96:7b:16:a4:8a:88:e5:ff:16:e6:e0:7f:58:cb:2c:5d:
f2:44:e1:33:1b:2f:ec:c0:c1:5c:54:74:0a:83:f2:91:f8:8f:
45:d2:ae:91:5a:a5:d4:b5:c9:42:38:4c:96:4d:79:98:44:cf:
89:b6:c3:15:38:84:c1:bf:af:03:21:59:bf:d4:01:1c:b2:c7:
d4:93:9a:59:af:d9:a2:2a:38:2a:c4:77:6b:87:4b:4b:73:80:
05:99:2f:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYM28iO4BI1JphXtQvBWJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNjVmMTZkYTYwNjc4M2YzMDFmNzA4YTVlNmI0ZmQ1ZmZk
NDMyZTgwHhcNMjUwODIzMTAwMjA0WhcNMjUwODI0MTAwMjA0WjAzMTEwLwYDVQQD
EygyMGM5YTg2OWRlMmZkOTBkMmUyZmYzNzVkYmMzNDE2NmIwNGQ5MjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvXIL+agK2era7Rscno7XKNNqqFT
vYi3xt2EkPZmcuNJLXCN4Tqe2XyJ1lf0n7O1QLuNFGoJFKDJ3IDyYrWBiuZLxrpx
z1NrDOFBu08bUUjOF2aBybIFdi84d3m++0fJI9vK6nrdiU7YUBp4BeLozYYTbbzO
yuJbq7JV5DZzOlMdu/oYbdX+iTvmcrhSZIzWP2fEOoi4vRUBHIVXtaQRlmRfVTSP
AwyPwxdMvEag7+3ugJ/WqBcxiqXgxuYCh3yzhlhSdy6+tmhwyb6cAXKaS3NWCUig
H6+CbY1pg7B79Yu40XG50kOAdkwYMQc8tYiSbXXFeUkKwsyUCM+v3O4L7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCDJqGneL9kNLi/zddvDQWawTZIvMB8GA1UdIwQY
MBaAFABl8W2mBng/MB9wil5rT9X/1DLoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUdYeGJhWUdlRDh3SDNDS1htdFAxZl9VTXVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9hNDQxYzYtYWFhOC00MjUwLWE3ZWMt
YTRhMjhiZmE0ODhlLzEvQUdYeGJhWUdlRDh3SDNDS1htdFAxZl9VTXVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9hNDQxYzYtYWFhOC00MjUwLWE3ZWMtYTRhMjhiZmE0ODhl
LzEvQUdYeGJhWUdlRDh3SDNDS1htdFAxZl9VTXVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4atWaPe
QCM9iQTNncSk0HN8PlOooShNFml27xIriGHy6SdpitBkH+AvEsrJvKCHMwRzo/va
xz3eIW6TsS3mc9qrRFAJ+q111t8gI/MAx3SwB0qO5XQwFssIY1pTVhWkJgRhqcmW
0sPea2FLZwuim9xytCLWqnPIbQoVPMsNB44DJXwibduOzGoOwQZvEMjl32fF30u0
gejKlyLmxczJ1+fZ9D6Wexakiojl/xbm4H9Yyyxd8kThMxsv7MDBXFR0CoPykfiP
RdKukVql1LXJQjhMlk15mETPibbDFTiEwb+vAyFZv9QBHLLH1JOaWa/Zoio4KsR3
a4dLS3OABZkvdA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:26:48 2025 by rpki-client