Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: OHtJsOCgCktr2XsjDcmIaooB/0UBMTGPBve7+cJC2iw=
Subject key identifier: EA:5D:FF:09:BC:66:83:0B:96:56:93:20:F2:28:85:E9:0B:40:8F:16
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 0198D4E06182B981F1730597E571ACAA68FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0E00
Signing time: Sat 23 Aug 2025 03:02:11 +0000
Manifest this update: Sat 23 Aug 2025 03:02:11 +0000
Manifest next update: Sun 24 Aug 2025 03:02:11 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: +HkNeXy2/b0MZiv6PUG/qgIqrpU4ImH6wO0BOF9Jd94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:61:82:b9:81:f1:73:05:97:e5:71:ac:aa:68:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Aug 23 03:02:11 2025 GMT
Not After : Aug 24 03:02:11 2025 GMT
Subject: CN=ea5dff09bc66830b96569320f22885e90b408f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:18:2f:e2:79:87:94:f3:db:b0:f1:ef:c8:10:
0c:29:bf:4b:9e:d7:7a:57:5d:ca:9a:a1:79:fc:3d:
56:25:e4:bb:b0:5d:9a:5f:7a:4c:75:f3:71:41:31:
7f:72:97:8f:2e:2d:4f:bb:47:39:5e:d9:18:8e:9b:
79:17:50:f6:e1:68:c5:42:e1:f0:c2:e2:71:da:ce:
f3:12:06:df:28:a0:53:df:a7:d5:2e:3b:f7:4b:7b:
63:ca:20:c4:96:81:70:f2:73:c9:59:9d:15:37:71:
25:b0:48:cd:76:20:3f:54:78:f6:81:15:a9:6c:5b:
80:10:b9:bb:48:5e:c8:ca:21:4f:03:05:87:1a:e4:
57:8b:08:30:0d:d5:c3:72:8b:3c:80:a7:c8:18:a0:
ed:b1:75:13:ca:a2:23:b0:51:4b:7f:ab:10:5e:e4:
30:3a:42:d3:8e:17:67:69:a5:33:72:ed:6f:ab:6b:
99:13:19:31:00:92:00:0b:90:96:a7:5f:47:76:2c:
77:45:0a:0d:f4:af:b0:f6:9c:12:3d:b4:57:c2:cf:
af:8a:66:76:69:13:b6:76:89:84:cc:13:8e:19:e4:
08:e9:ba:3a:49:95:8d:e1:85:bc:d1:ba:9c:95:13:
86:14:26:25:ff:52:08:fb:43:14:6b:e8:d4:bc:45:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5D:FF:09:BC:66:83:0B:96:56:93:20:F2:28:85:E9:0B:40:8F:16
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8a:50:ad:23:d8:1e:d3:87:13:44:f5:c7:6d:93:87:8e:61:
a3:6f:48:64:b6:03:34:ee:c7:f4:7b:86:cf:fe:84:40:4a:9c:
c7:99:8f:f9:1c:42:bb:0e:4f:64:e8:28:cd:40:cd:6d:6f:0e:
58:56:7d:cc:c1:5c:18:1e:08:0c:46:d2:d8:a5:52:43:db:2e:
b4:e1:ff:a8:fc:4e:52:d4:c3:71:a0:11:85:46:ee:09:ab:f3:
3c:38:04:9d:11:98:54:1d:43:3b:94:ee:10:f5:cc:7d:24:a0:
4b:18:e3:b3:4c:3e:3d:b4:3f:3f:9d:fe:b8:27:be:ec:43:9a:
98:1d:ac:5b:48:57:0e:09:3a:32:21:3b:a5:fc:be:5b:f0:4c:
52:a8:f8:cb:56:ec:39:e6:be:87:10:30:7f:d1:23:02:35:0a:
ad:b3:13:92:f3:5f:2a:ed:16:0f:76:0b:9d:97:34:23:a2:c2:
d7:0d:a5:19:96:f9:06:89:46:f5:d4:69:21:cf:e2:d6:3b:56:
75:ed:82:14:68:27:75:74:77:9d:97:85:69:59:80:16:2c:96:
a4:2e:8b:9c:e2:3f:2a:37:99:e5:ce:ea:5b:c4:d3:c3:07:75:
7e:8f:4b:6d:f8:c5:99:ae:6c:50:d3:a9:d1:36:e2:81:3d:6e:
f0:78:85:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:23 2025 by rpki-client