Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: U78F56ly1lTIv2PECbCsalq7/nLuCrqvZIeheOBHSsk=
Subject key identifier: 86:1C:B1:63:0F:26:D3:F0:EA:3C:A1:B5:3B:79:1A:45:E0:4B:92:84
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 0197B7EA4E7680AA62B595325CF18F8E8324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 0A22
Signing time: Sat 28 Jun 2025 19:01:15 +0000
Manifest this update: Sat 28 Jun 2025 19:01:15 +0000
Manifest next update: Sun 29 Jun 2025 19:01:15 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: F9tOnLaU6X+PjFaAYw5SuVOz3Ub1a6YVZxqWm+RhnTE=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:4e:76:80:aa:62:b5:95:32:5c:f1:8f:8e:83:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jun 28 19:01:15 2025 GMT
Not After : Jun 29 19:01:15 2025 GMT
Subject: CN=861cb1630f26d3f0ea3ca1b53b791a45e04b9284
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d0:4a:00:dd:0f:45:ef:5d:68:e2:7f:07:e8:
12:c7:81:72:cf:e0:1a:03:e3:fc:3b:ae:b0:aa:63:
45:7e:e8:cd:5a:c6:18:78:5a:bf:f3:79:98:c5:73:
d5:3a:3e:ae:03:34:cf:21:d1:5e:90:ad:0c:99:ce:
d3:6a:07:34:50:86:d9:db:8b:ce:38:90:33:b4:30:
84:bf:f3:7b:ba:07:b0:91:d5:dc:fb:d1:fb:d3:ef:
04:68:a3:df:01:19:a4:3e:b0:53:48:ad:db:4b:26:
67:59:0c:be:db:e2:f6:fa:e0:9a:c5:48:b8:6f:8a:
88:a3:7f:43:09:12:55:86:ef:92:f0:05:e8:3c:5c:
5e:0f:b9:82:a3:9e:b0:04:39:39:39:4d:4e:43:74:
9f:03:88:b9:27:11:a1:6d:59:70:26:34:c6:3c:26:
79:c3:e4:39:d0:9c:e4:58:b2:ee:a4:b0:fa:26:d5:
7a:d9:1b:c0:f9:35:5b:48:3b:96:3d:72:5b:dc:d8:
21:97:aa:3b:29:7d:67:df:08:8b:05:87:d2:59:ba:
eb:0f:d0:e4:72:65:3b:4a:ba:07:e2:8d:93:54:8f:
37:f8:81:7c:31:4c:0c:c4:2e:c7:a3:84:a5:73:cb:
0e:5e:f8:d0:2a:71:49:79:45:b8:89:94:a0:59:73:
84:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:B1:63:0F:26:D3:F0:EA:3C:A1:B5:3B:79:1A:45:E0:4B:92:84
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:e1:f7:4e:bf:e8:cf:b4:60:81:f7:82:97:8f:23:08:13:c8:
f8:e2:65:b5:0b:fb:c7:c8:06:69:f9:1d:e3:41:65:a4:f3:b3:
c8:90:51:52:c2:b7:ef:75:2d:30:5f:ca:e4:32:9a:67:f5:09:
4b:a1:75:ee:c4:af:38:32:1a:dc:52:d9:18:8f:66:87:ae:e9:
a4:2f:38:51:d7:4d:ec:21:4a:3d:45:a4:bd:e4:bc:48:ec:89:
69:89:99:8d:e2:13:0f:b5:be:0c:7a:a0:80:88:6d:3f:ba:b9:
55:74:66:91:d1:53:e5:0e:a3:4c:3b:65:70:d1:4f:34:b3:b9:
4c:c3:4a:98:09:df:d4:f2:b7:22:c8:b9:53:ce:a2:3f:2b:7d:
85:ea:66:f0:ec:cd:36:2b:cd:24:59:9f:61:89:0a:8f:c8:c0:
22:49:ff:f0:cc:f8:14:ff:9b:0f:3a:1c:20:44:70:5e:b2:40:
77:6d:33:2e:14:12:26:4e:f3:c3:a8:4e:81:d8:17:c9:5a:78:
79:a7:bc:71:25:c1:27:0e:e0:1a:1e:9a:92:5b:89:b7:b2:f3:
72:88:67:5a:59:14:26:0e:a1:ab:95:92:72:9e:55:d9:aa:f0:
96:62:ee:8e:b6:9d:70:18:c7:11:d5:02:1f:74:3a:89:ab:72:
76:fa:76:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:09:34 2025 by rpki-client