Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
File: AGXxbaYGeD8wH3CKXmtP1f_UMug.mft (raw, json)
Hash identifier: g5nl+9OTLHcTV2n5vtiUnyrbCz4bFXWt/AWdvhMrSwc=
Subject key identifier: D5:66:A0:FF:20:B3:A6:A5:B5:B8:3E:7D:B0:05:24:64:3F:5F:1D:19
Authority key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Certificate issuer: /CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Certificate serial: 0197B6A065ACB707CA5DBDE571C45F937D60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
Manifest number: 0A51
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: AGXxbaYGeD8wH3CKXmtP1f_UMug.crl (hash: Iv73eITLPwb0ea7OdGJH9+LrMG0BL+Tet6QkKmZdUx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:65:ac:b7:07:ca:5d:bd:e5:71:c4:5f:93:7d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=d566a0ff20b3a6a5b5b83e7db00524643f5f1d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a2:32:d6:cf:1e:79:a3:91:14:1f:a0:a0:21:
e3:69:03:2c:a3:7c:3c:3b:be:05:91:12:12:df:ff:
ac:cf:ae:61:8a:67:d8:16:4a:f9:1b:52:46:ea:b1:
77:04:14:37:53:1c:93:ae:e9:52:9d:13:2a:a8:09:
39:74:2c:b3:d3:02:08:c9:c6:96:56:c4:b3:ea:3b:
bb:07:bf:c7:a5:2f:2b:67:5e:fa:d3:b3:e8:46:de:
9c:4d:79:4f:ed:53:41:e5:71:c0:77:61:e7:aa:32:
fa:37:97:4e:32:9d:25:2e:b4:e3:aa:2f:d6:88:1c:
22:6e:c5:39:27:0e:a7:ca:36:cc:22:25:b9:e3:bf:
e6:cd:ef:dd:ed:fb:df:ab:d1:ea:3f:0f:81:03:12:
fc:71:54:98:cc:d5:b3:b7:2a:42:29:85:3d:c0:58:
ff:c8:6d:ca:c7:d9:9c:d3:41:58:69:71:3f:71:2b:
1b:ca:ea:0b:4b:4d:f7:5e:c3:6d:31:34:51:c6:23:
2c:b7:b1:d1:20:83:56:d0:bf:d0:2e:b3:ef:0d:28:
59:6c:6e:a1:63:e0:b0:6d:5e:81:9b:3a:32:c4:71:
da:d0:cd:f0:f8:0f:ee:f6:1f:af:a3:cc:a4:af:ec:
9d:ce:4d:c6:c6:17:46:00:8f:d7:ae:44:45:5a:0a:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:66:A0:FF:20:B3:A6:A5:B5:B8:3E:7D:B0:05:24:64:3F:5F:1D:19
X509v3 Authority Key Identifier:
keyid:00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:75:27:8a:86:03:1e:d8:36:98:eb:a4:04:b3:9d:eb:af:80:
7c:1a:94:3b:65:19:11:37:e4:c4:bd:14:25:bb:ee:08:78:6c:
a0:74:23:88:32:2e:08:ee:cf:a6:eb:51:ef:8c:5c:4b:cd:b0:
2a:62:3b:77:e1:52:69:74:a5:f6:b5:9a:08:8f:ad:fe:05:f7:
6d:67:f7:0b:b4:1e:93:f2:7b:35:54:19:bd:83:76:8a:ae:b8:
c4:77:9c:9f:da:05:56:00:97:62:74:49:6f:22:eb:6f:ae:04:
49:99:ba:c8:23:56:95:12:4e:ed:44:97:89:72:7a:25:70:0f:
dd:1d:d1:4c:d6:85:df:5d:e2:2d:4f:f3:59:e6:88:7a:bd:52:
c4:b6:9b:15:07:ed:9d:3c:fc:58:b9:8e:dd:bf:aa:81:94:c0:
cd:bd:4a:bd:a6:21:15:2d:0f:ed:a5:68:00:20:07:fd:dd:d9:
de:08:2c:05:b3:31:0d:19:d2:73:85:d1:18:6e:6b:0e:55:22:
5b:e2:ce:71:92:bc:10:a6:c8:1d:2f:33:3c:b9:b1:3c:2b:98:
f7:11:e2:d6:01:a0:5e:f2:5f:4c:2d:9c:4c:0b:fd:d8:21:50:
54:10:c0:9b:be:12:55:6a:1b:c3:ef:74:8f:21:2c:63:30:91:
3c:29:e5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:20 2025 by rpki-client