Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
File: agPhC26juPNiz7I671icd3cefso.mft (raw, json)
Hash identifier: 0iItd/Hmm3rJSBf0myadSi3vqZP90rp7RffencFfbTw=
Subject key identifier: E0:60:5F:FE:CB:62:A6:DD:DC:B7:35:D4:1B:EE:0A:EF:61:4D:98:55
Authority key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Certificate issuer: /CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Certificate serial: 0197B6D7ABEECE1C2A4FEA9E453EEF12C943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
Manifest number: 07AF
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: 2vSSEUGyoECcbr-T4y2ubbHraKg.roa (hash: B7WLa2ysTg94FsBb1jS1WwKUUvVr7kQqcY57g1dK/4s=)
2: agPhC26juPNiz7I671icd3cefso.crl (hash: /dzwKh3uIiF62oj6XTLZI8lrYjAOSGd65jrqqMA35Z8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ab:ee:ce:1c:2a:4f:ea:9e:45:3e:ef:12:c9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=e0605ffecb62a6dddcb735d41bee0aef614d9855
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5d:07:68:55:e8:9f:6f:70:4a:74:68:e7:f4:
bc:24:e8:11:9a:77:3a:ec:30:78:d3:b9:7f:55:2d:
37:f0:ba:fc:2e:f9:41:b8:eb:4c:f1:05:ce:4c:60:
93:2c:21:c4:37:24:a7:c4:a9:25:c3:6f:7a:8e:19:
2d:08:cb:d4:28:e2:dd:48:40:f0:58:09:92:4f:8c:
92:72:1f:11:b4:22:ed:52:83:28:d7:f2:6c:4a:ed:
2c:db:6e:6b:ac:06:d6:5e:20:28:46:3b:4a:28:9d:
9c:c7:61:70:a6:90:7b:73:6f:b5:9e:5a:a0:19:3c:
88:e8:2b:0b:8d:62:aa:aa:56:a5:55:14:48:ba:a6:
13:07:cb:ed:4a:38:9e:44:df:22:e5:ff:81:c9:62:
4d:81:77:fd:81:2c:9b:77:3e:5e:ef:5b:29:3f:79:
22:71:e5:d8:5b:a6:4b:47:df:78:62:be:fd:20:93:
a8:62:ec:4f:8f:7e:56:f0:92:95:54:89:ec:76:b1:
67:ea:56:07:18:f0:56:9c:de:a0:e1:50:79:51:36:
8b:e8:18:d5:41:e7:8c:1e:c7:04:cf:3f:81:37:2a:
07:6e:84:2e:dd:a9:91:58:b5:80:11:55:9e:20:bc:
cd:68:80:81:02:0c:d2:0c:6b:75:1f:ff:e3:02:64:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:60:5F:FE:CB:62:A6:DD:DC:B7:35:D4:1B:EE:0A:EF:61:4D:98:55
X509v3 Authority Key Identifier:
keyid:6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:53:57:ad:46:fe:45:3e:6a:d7:37:86:dd:57:69:a1:6d:dd:
87:c7:33:d1:29:5c:0c:8a:4e:2c:8d:be:a4:30:f1:9e:bb:ce:
48:f1:56:2e:1d:6b:9a:70:26:07:a7:6b:b2:25:82:59:23:7a:
45:2c:00:23:34:38:5d:62:a4:22:67:f7:21:91:aa:79:00:3a:
df:5f:eb:30:93:52:28:fd:f6:e5:cb:8b:1e:2c:54:53:49:31:
d7:2f:90:d3:87:d8:39:c5:f4:95:70:f9:11:a0:ac:54:5c:ab:
e7:e3:08:5f:b1:cf:48:80:16:0d:0c:48:6f:aa:77:ab:60:fb:
e9:18:d3:01:cc:82:87:7e:81:0a:ed:6e:64:28:88:c9:82:d5:
c8:f6:79:79:5f:fd:5a:e3:5d:e0:2b:ad:27:93:29:64:03:92:
b8:38:b0:4f:0f:43:89:d2:87:d8:7d:66:7f:39:2a:51:ca:65:
f6:0c:f9:8d:6b:df:fa:09:01:0d:00:cb:23:cf:ec:7d:23:8f:
ef:2a:db:43:df:25:c4:19:13:f9:b3:b0:8f:22:b5:64:b5:53:
0d:d3:2f:f3:5c:9d:b3:98:53:5d:be:4f:bc:62:b9:0c:c7:a4:
41:47:9e:02:96:ea:f5:1e:77:83:c1:8c:a5:77:5d:14:76:64:
04:07:03:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client