Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: F/vPlYGUPLKVH9YRZ0nPvODnlRrL2cbuiO7NT33+VPo=
Subject key identifier: 12:3F:91:32:7D:A3:47:57:83:1F:C7:A7:8C:69:BE:B4:A7:80:BD:2F
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 0198D54EA979BF5C86D60DB11920981BDB02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:38 +0000
Manifest this update: Sat 23 Aug 2025 05:02:38 +0000
Manifest next update: Sun 24 Aug 2025 05:02:38 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 9JRr/xXGIb99X7w3B+hhn4GeErJs0PZZsPhni/31jhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a9:79:bf:5c:86:d6:0d:b1:19:20:98:1b:db:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Aug 23 05:02:38 2025 GMT
Not After : Aug 24 05:02:38 2025 GMT
Subject: CN=123f91327da34757831fc7a78c69beb4a780bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:53:94:e3:66:b0:65:fc:ec:1c:90:4b:e6:ee:
da:e2:b3:f5:7f:0b:00:14:4e:3a:5b:f2:aa:e2:b9:
4e:4d:c9:2f:3f:54:92:07:cf:21:c7:a1:df:e1:28:
58:ab:2b:65:22:11:99:60:70:56:f5:a9:b0:d9:63:
16:eb:36:3c:13:a2:9d:84:3b:90:d6:fd:bb:b0:f3:
e7:98:6c:58:47:86:b3:39:06:d4:0e:03:66:70:37:
f0:8b:cb:5a:08:7d:70:d6:0b:3d:c6:bf:5f:d9:74:
b1:a9:ba:7a:c5:3a:d9:78:42:cc:81:67:79:a9:3f:
6a:dc:a6:63:ce:65:9e:cc:07:f3:ce:64:c1:e5:04:
94:20:a4:e2:7e:7a:83:9c:36:97:c0:4d:45:d8:cc:
14:d8:82:f3:eb:5c:e2:3e:e9:19:31:66:f3:7d:bc:
86:6b:f4:b8:6b:6c:83:46:d9:7f:d2:cb:9e:ee:f4:
04:b8:de:51:b2:7c:5f:28:51:97:f1:59:bf:c8:f0:
10:47:80:c6:08:aa:5c:6b:f2:45:34:17:4b:92:c0:
2d:0f:52:a5:d4:50:99:57:dd:f9:dd:84:2d:91:93:
bd:ad:ad:57:25:87:d5:36:e9:34:d7:0a:4e:9f:b3:
b4:1c:4a:fb:66:69:e2:89:c0:4e:7d:36:e8:58:be:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:3F:91:32:7D:A3:47:57:83:1F:C7:A7:8C:69:BE:B4:A7:80:BD:2F
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:66:ca:ea:40:80:d9:f8:13:ac:95:8e:45:a0:2a:62:a9:3e:
34:d5:65:bc:d6:76:85:82:d1:7e:40:3f:df:02:5d:85:27:c8:
92:c4:e3:b1:ed:cf:15:fe:1d:17:0d:7d:3d:9a:b7:ff:56:95:
31:a3:60:5a:1a:c3:cd:64:92:a2:b3:68:8e:d1:f0:22:99:3d:
fe:ba:22:82:c1:eb:6e:d2:25:48:04:89:05:96:c3:50:3e:1e:
70:90:6f:e3:2b:76:a7:47:60:80:0a:e9:04:89:3f:73:d6:71:
5f:1f:c9:f1:24:da:45:42:c8:3c:3a:ce:36:40:21:dd:c6:b5:
09:b4:6a:ba:91:69:36:f3:e5:84:24:dc:82:80:fe:9b:14:10:
31:d1:49:6f:3e:fb:40:74:c4:a3:44:8c:8b:ea:88:ef:a0:6d:
1d:77:63:f1:e5:6f:27:14:46:68:ed:de:80:a2:de:f0:6c:9b:
53:20:1d:bb:5e:f3:3d:bc:e8:eb:9b:19:d0:de:c7:e5:fd:10:
ad:ef:cc:92:22:6b:55:d1:9d:4c:bc:be:3c:3f:ba:6d:8d:69:
bd:74:64:67:0c:cd:9b:74:ee:52:b9:9f:33:cc:97:fd:96:e8:
1c:1b:c1:0c:63:b4:17:16:ff:36:ff:26:c6:be:31:68:e8:a6:
2a:eb:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:59 2025 by rpki-client