Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: ftNmAK/JxK5M7PXLeZqNgHK7EIZH0Y+WNKUNngZhgVw=
Subject key identifier: A2:63:4B:41:0F:02:E5:C9:29:CD:76:59:7D:F4:46:60:06:88:FB:44
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 0197B70F2950A1698BBD79E99FE15EBC13E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0D6C
Signing time: Sat 28 Jun 2025 15:01:53 +0000
Manifest this update: Sat 28 Jun 2025 15:01:53 +0000
Manifest next update: Sun 29 Jun 2025 15:01:53 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: BcBrWfe69ZCzcC1xJi0nI2mvWS6p1WmeCf76VxLagjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:29:50:a1:69:8b:bd:79:e9:9f:e1:5e:bc:13:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jun 28 15:01:53 2025 GMT
Not After : Jun 29 15:01:53 2025 GMT
Subject: CN=a2634b410f02e5c929cd76597df446600688fb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:72:5c:e1:1e:e7:57:a4:4f:3f:1a:95:bd:9a:
ad:f0:9b:87:cd:34:ed:a3:4e:f3:59:2b:a5:c7:e7:
0c:a0:dc:38:33:69:f2:0c:a8:dd:34:af:a2:67:6e:
86:5b:d1:1e:f0:25:3f:2e:5f:2b:3c:89:f9:c0:48:
6c:f0:3c:d8:8f:25:7d:54:bb:be:38:6d:81:5d:72:
3c:b6:60:9a:8e:b9:de:75:11:fa:1c:bb:52:71:0e:
5e:24:72:92:0a:99:ca:72:ce:89:f0:24:dc:d6:53:
c4:b9:4b:5f:59:6f:00:1b:70:c8:ac:6e:fc:8c:db:
74:4c:10:d0:a1:08:57:a6:a1:f3:88:20:74:6b:5c:
8d:8c:4d:28:8d:5a:52:b7:5e:bf:20:cb:30:8c:9c:
8a:7e:39:bc:dc:0b:7f:c1:51:66:9d:5f:cd:49:61:
10:da:75:06:a4:de:28:7f:13:10:bf:17:66:fa:4f:
2c:7d:a3:a6:35:5e:94:89:f8:24:df:da:ac:8f:4d:
2f:6d:b0:e2:5a:d2:e1:a0:0d:c3:62:7b:17:85:59:
4a:5e:7c:d2:6f:eb:f8:83:50:61:68:e1:1f:c3:5c:
a9:c7:cc:ad:19:60:41:c7:63:05:3a:cd:7b:c0:3f:
fc:47:70:fa:b8:d0:b0:83:40:40:ce:23:f8:cf:f5:
e3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:63:4B:41:0F:02:E5:C9:29:CD:76:59:7D:F4:46:60:06:88:FB:44
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5d:f1:b8:cd:df:22:c5:95:05:6d:06:df:0b:ce:af:d3:08:
f4:fd:29:58:9a:69:bd:bc:a5:2e:04:54:0d:a5:1d:69:f3:40:
ca:30:1f:8e:a6:d5:47:37:17:00:02:c2:fd:36:cf:44:59:f4:
46:09:d0:b2:41:9d:28:77:df:28:da:a5:d1:77:e4:f8:dd:67:
c0:34:ff:5a:f5:f7:bc:3a:97:0d:18:e1:82:af:61:18:5b:4d:
bf:6f:ec:35:08:14:0a:b3:61:49:60:ba:fe:cd:a3:62:d7:ca:
55:ca:0c:83:0b:a1:d6:a9:56:07:ea:d3:41:be:52:30:ba:e2:
8d:f9:9d:e7:39:11:c8:7d:dc:50:db:41:27:5d:85:e6:a6:69:
ea:d0:22:49:f0:d5:f2:fc:16:3e:38:d9:46:b0:96:27:67:b5:
bd:92:44:3b:ce:28:54:b8:1d:39:53:7b:08:78:28:8e:9e:c5:
b3:76:e3:52:b1:0e:4e:5d:59:83:2e:e6:4f:b3:b6:c0:1e:fb:
12:e5:ec:60:04:55:0c:2e:52:d0:f0:87:18:fa:3b:cf:89:12:
aa:e5:55:09:15:ff:5e:7b:d7:12:49:d0:9d:cb:d1:49:5d:a0:
ef:60:cb:61:03:a7:5f:b8:94:c3:97:59:db:28:75:da:a1:e2:
33:70:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:32 2025 by rpki-client