Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: 9IDroCk0y1d/4P9OJoZMp2KKrfYURegMDBNh7tQXiC0=
Subject key identifier: 7E:02:5E:9B:D5:C7:58:AA:48:52:4A:7C:83:4E:69:61:DD:87:7F:5B
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 0198D5F1D4D29D725AECAA9D24EDEC014415
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 0814
Signing time: Sat 23 Aug 2025 08:00:52 +0000
Manifest this update: Sat 23 Aug 2025 08:00:52 +0000
Manifest next update: Sun 24 Aug 2025 08:00:52 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: dXsYyOPR4/aCgzjjNCUQrcTANcmZVxIOzkXdsNyNSnc=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d4:d2:9d:72:5a:ec:aa:9d:24:ed:ec:01:44:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Aug 23 08:00:52 2025 GMT
Not After : Aug 24 08:00:52 2025 GMT
Subject: CN=7e025e9bd5c758aa48524a7c834e6961dd877f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:3f:43:41:2c:6e:50:b8:c4:63:86:0a:21:
43:f7:fe:83:26:b2:e1:b1:f1:a5:eb:a3:a9:b2:a8:
09:45:9e:d0:96:0c:a6:bd:2c:cb:e7:2f:4c:c8:18:
f1:0c:d1:63:c8:b0:95:d2:fa:54:a9:81:dd:8b:37:
c0:ca:b7:e5:0d:a0:fd:5f:8b:02:a1:f2:23:77:b3:
ce:fc:e0:4d:fe:5a:8e:d5:ce:0b:70:a0:c4:c1:da:
7f:c5:61:f3:e0:71:3e:f6:4c:26:6f:8e:75:17:4d:
fe:9f:80:26:1c:20:33:e8:2a:0f:04:b6:9d:0f:2b:
43:a0:21:72:29:d3:1f:8c:d2:64:63:12:a9:3b:11:
2e:b4:e6:99:a6:83:4a:59:93:f5:d8:4d:0f:8f:e0:
29:ce:e2:ad:eb:a6:b3:88:40:63:27:18:c4:9b:94:
ca:36:74:97:af:4a:5f:10:66:3a:d2:49:47:f8:53:
9d:b5:7b:f0:9f:4e:bf:2f:ab:c6:c4:54:93:44:34:
5b:94:86:52:5a:3b:df:e7:29:bd:6d:f1:e1:12:80:
f2:74:1e:d4:91:63:ac:34:6a:d4:c3:17:bf:3d:6a:
88:88:53:e6:a5:3b:7a:13:99:12:d9:e6:99:ca:1d:
e1:a2:64:8e:3c:f3:b4:a1:15:3e:0d:bf:ab:0a:c9:
76:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:02:5E:9B:D5:C7:58:AA:48:52:4A:7C:83:4E:69:61:DD:87:7F:5B
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:8b:03:7c:d8:12:57:64:4c:e6:0a:21:01:6b:73:e1:ac:d9:
6f:44:cc:5d:4a:27:11:b7:83:ec:e9:42:66:45:a8:34:5b:f4:
67:1f:cd:20:af:53:87:4f:68:bb:a0:1a:78:38:f4:6b:52:9e:
87:bf:c6:f5:96:80:eb:1b:64:6e:62:42:c3:66:89:42:26:4f:
1e:8a:02:92:ce:4e:6d:68:36:7b:61:cb:ca:69:5b:25:8b:f3:
d3:62:91:d4:4e:ef:a2:52:55:f5:32:6a:89:a9:01:ef:2c:05:
fc:90:6b:e9:0c:06:f5:8e:f7:77:51:d4:f5:f7:04:00:da:a0:
e8:ef:37:55:b6:59:44:eb:ba:27:46:ca:2c:86:bb:b7:94:b9:
b7:04:9a:2d:b3:12:28:37:85:e0:e0:90:12:be:c7:99:68:c7:
c9:e3:66:e5:59:92:72:78:23:fe:c0:95:d0:84:7a:c4:46:71:
55:bb:ff:48:fb:d8:83:b4:6f:d4:ea:6c:0c:08:4b:78:0a:f9:
92:a5:64:50:3c:bb:9d:f7:90:87:ca:81:b0:1a:46:8a:ec:83:
8d:b1:d8:41:09:ba:09:e9:fd:75:4f:66:37:50:f3:f6:e5:9f:
7c:ea:ea:4c:83:20:21:24:c8:d7:80:7f:d0:7a:3e:52:89:79:
51:ae:e9:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:40:56 2025 by rpki-client