Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: s9iEtNy1j1vGvyrS0xdZ43FtwQxZrjmyDjV6bvWShao=
Subject key identifier: 18:03:B6:91:D3:F0:62:55:A6:D2:1B:02:30:D5:AC:30:C0:3B:D1:65
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 0198D660F9DB5F859087BA2B466D20FA99F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:02:16 +0000
Manifest this update: Sat 23 Aug 2025 10:02:16 +0000
Manifest next update: Sun 24 Aug 2025 10:02:16 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: 5ckUoIhbJh1DUS+S7MXINfdAulhuXVZX7IfwYibbbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f9:db:5f:85:90:87:ba:2b:46:6d:20:fa:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Aug 23 10:02:16 2025 GMT
Not After : Aug 24 10:02:16 2025 GMT
Subject: CN=1803b691d3f06255a6d21b0230d5ac30c03bd165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a6:d8:25:2d:18:39:ba:d8:80:fa:9b:20:3b:
15:0f:f9:98:dd:38:4a:19:6d:f6:18:23:14:6a:04:
9c:d8:76:38:9a:90:c8:a2:d7:05:1a:98:31:ef:45:
5f:67:23:e9:7a:f7:fa:1b:ca:12:9d:55:4c:39:20:
7c:0f:d4:ad:c7:3a:80:d9:2c:3b:50:ba:cb:b7:0e:
db:51:16:7b:e5:10:15:24:fe:bb:42:e3:84:d6:4c:
2f:c2:75:15:1c:a6:5a:d1:86:2a:08:c7:be:48:2c:
25:a0:1f:98:ec:a1:ef:a2:6f:37:40:df:ab:22:22:
8e:67:bb:ee:a9:c6:50:49:93:53:f0:c1:41:e1:b7:
8c:3e:50:13:00:4f:54:be:0a:1a:72:90:c4:44:21:
4e:95:a0:8c:c9:bb:84:ea:63:e8:29:8b:da:78:64:
2b:8d:85:99:d6:32:73:be:cc:c1:6b:b3:18:5b:39:
81:b3:9d:7c:e4:78:98:15:69:08:40:be:63:1e:6a:
ac:6e:89:a8:4b:5b:69:c8:c1:06:b5:2a:77:dc:55:
5c:92:9b:6b:22:ae:89:e3:6e:2c:06:6f:ad:94:97:
d8:01:15:6a:cb:a5:f5:b4:0d:b1:56:f3:b2:58:bf:
14:81:e7:9e:aa:35:55:b2:df:61:d8:eb:6e:8d:a6:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:03:B6:91:D3:F0:62:55:A6:D2:1B:02:30:D5:AC:30:C0:3B:D1:65
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0e:8e:4e:25:b9:5e:31:ed:eb:d4:b7:8a:15:a8:c2:45:03:
a4:d6:a8:9a:e2:55:0f:50:a1:34:da:99:7f:5c:e8:a4:a4:de:
1a:65:eb:55:0d:c9:3d:06:21:2a:57:b9:b3:74:f8:21:33:4b:
1f:57:d6:25:09:08:e2:87:1f:07:05:e3:30:9b:a3:fa:f7:c9:
a7:8f:ae:7e:8a:32:6a:b2:0e:c9:2d:92:ce:45:56:07:6a:7b:
cf:d6:05:67:85:b8:bb:37:d9:9f:4b:88:78:24:49:f8:f5:64:
ea:28:2c:af:d4:47:13:20:ac:ae:80:4e:0a:48:a1:98:5e:96:
ca:d4:61:e8:38:69:9d:a5:db:fd:12:cc:8a:e0:0b:0d:96:94:
5b:04:af:b4:dc:f9:6f:aa:eb:54:98:45:26:26:45:59:03:cb:
79:00:22:17:b3:e7:b1:56:11:8b:08:87:a5:cd:fd:5b:a4:fe:
92:70:6c:d6:fd:91:25:7e:98:24:b3:0d:85:71:7d:41:7c:e2:
e2:8a:a3:89:52:7a:1f:31:95:f2:60:80:68:6c:98:8d:06:1a:
ba:5c:5a:35:99:cc:e3:26:28:c7:65:11:31:1e:13:a8:ac:5c:
a7:8c:8f:ba:73:a7:a8:3e:e8:0a:6c:2f:b1:87:17:28:30:33:
a5:cd:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:57:29 2025 by rpki-client