
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: dMySLfbNu8b/i13JJwpstrD3PAPL3Faecea0yfbcmxg=
Subject key identifier: 69:41:31:E9:E3:98:75:EB:84:0A:A9:33:CF:B9:E8:9F:4D:4A:CA:39
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 0198D7A8E54147CA08DE2F6217D70C19A852
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 147F
Signing time: Sat 23 Aug 2025 16:00:26 +0000
Manifest this update: Sat 23 Aug 2025 16:00:26 +0000
Manifest next update: Sun 24 Aug 2025 16:00:26 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: kCl+H7QqEBD/CIEJIBrVJS19LYOSIeVEGklzFXwFhF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:e5:41:47:ca:08:de:2f:62:17:d7:0c:19:a8:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Aug 23 16:00:26 2025 GMT
Not After : Aug 24 16:00:26 2025 GMT
Subject: CN=694131e9e39875eb840aa933cfb9e89f4d4aca39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:28:d0:0a:97:b4:43:b7:7b:f4:d5:07:89:ce:
5b:d7:04:94:f5:cb:3b:8c:be:7c:43:f9:75:fe:21:
ee:29:85:58:3a:9d:7b:fd:ab:3e:cb:a8:81:69:ec:
7f:41:f3:d8:5f:42:a4:d5:e9:bf:3b:9a:25:67:e5:
df:fb:33:67:87:b4:7c:20:f5:c4:8d:fc:b6:02:81:
04:7f:40:77:2d:dc:66:63:aa:cc:9a:f3:07:76:86:
87:e8:5a:57:4f:6a:20:81:e6:24:c3:d9:4c:c2:ca:
36:2f:f7:e8:76:ed:4b:8e:9b:e7:6d:9f:1b:71:4f:
c8:35:15:4d:8a:66:04:b5:6e:c9:5a:25:c4:2f:79:
02:1d:15:51:61:b6:4b:8a:4d:03:45:45:cd:2d:04:
64:3a:7c:69:88:ad:d9:42:4f:1b:bf:cd:1f:5a:25:
e7:86:63:50:bf:31:ce:dd:94:8e:7d:48:7c:06:1f:
a8:9e:24:30:d7:9e:5e:ac:91:ed:fb:94:3d:e7:ff:
ba:1b:43:5c:77:7c:3e:e6:14:13:cc:19:be:ae:7a:
99:1f:68:24:bf:9a:ca:a0:d2:21:f0:61:a4:6e:83:
aa:1a:f6:c6:d8:e8:68:3c:9e:80:6d:00:41:48:ae:
8e:41:35:a6:21:a2:35:53:d5:aa:db:d6:09:0c:d0:
bc:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:31:E9:E3:98:75:EB:84:0A:A9:33:CF:B9:E8:9F:4D:4A:CA:39
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:db:63:a4:d8:0f:c7:65:00:0c:35:d4:07:62:bd:0e:54:bd:
99:c9:17:a5:8d:9b:ad:08:c6:dd:72:ca:c9:d4:10:fc:01:3b:
00:57:6a:9d:21:99:b6:d1:5d:96:3f:74:9e:22:de:c2:19:97:
9c:9a:fd:a0:f9:4f:85:8d:9f:d2:62:dd:13:3a:5c:6a:9d:4c:
c7:bb:ac:b7:bc:32:5b:a2:b8:1e:d2:cb:44:ca:90:3f:d8:8b:
f2:a6:1a:c6:08:0a:aa:62:b4:70:d2:f6:c2:57:7a:66:05:63:
bf:aa:88:18:39:b9:b5:8a:73:67:e6:9f:57:dc:05:a7:5a:1a:
98:39:65:e4:50:bd:44:9c:e3:80:9c:e2:15:ac:87:a1:b4:1f:
45:bb:f6:d4:17:2d:a5:15:ff:90:bb:d5:19:54:cc:87:05:30:
97:b4:f4:7d:83:8b:45:62:ab:ae:1e:3a:d2:39:5b:d1:5a:ab:
03:fc:30:eb:1f:fa:1b:a1:9e:b2:a9:04:44:a5:9a:28:95:9f:
9b:1c:13:ff:30:bc:d1:aa:1c:5e:a3:ef:3d:fb:bf:af:02:8e:
41:be:dd:e7:80:d0:e9:18:42:14:7b:a8:78:54:01:8a:65:47:
dc:13:05:49:0a:e1:de:3f:e5:e9:07:ca:18:ff:54:c3:00:97:
5c:9f:e2:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:33:11 2025 by rpki-client