Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: rydOtcngKFJs5VzeMjHhfqN4V8N5Q4WaLvKxKV/zZ9I=
Subject key identifier: 90:AD:90:68:CB:D5:C8:35:4A:B6:7F:4F:CD:5A:D7:50:B5:08:3D:77
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019851FA5AA6930C5F47E16D64FE08556928
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1606
Signing time: Mon 28 Jul 2025 17:00:18 +0000
Manifest this update: Mon 28 Jul 2025 17:00:18 +0000
Manifest next update: Tue 29 Jul 2025 17:00:18 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: it4p5iw9VM8XzFyWmDTAAQjjCcMEJBdecG2htcKmo2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:5a:a6:93:0c:5f:47:e1:6d:64:fe:08:55:69:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jul 28 17:00:18 2025 GMT
Not After : Jul 29 17:00:18 2025 GMT
Subject: CN=90ad9068cbd5c8354ab67f4fcd5ad750b5083d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:31:fd:58:5c:50:da:92:fd:c2:92:af:90:b5:
15:85:c0:09:b3:1e:fc:01:bc:84:06:60:4b:b6:75:
35:51:5b:49:ce:45:46:85:9b:5f:c8:7e:f3:2e:1b:
f9:1a:57:00:8a:0c:da:e2:c1:83:78:80:ae:9d:91:
a8:e3:54:9e:8e:7f:ba:57:de:7c:69:8b:0b:a3:7b:
47:68:9e:00:a6:89:ea:15:8f:d8:a9:d4:a4:09:3e:
64:76:1d:bf:13:65:54:fd:60:3d:66:1f:7d:8f:86:
92:71:39:39:50:9c:49:ce:7d:64:76:11:96:fa:a9:
d7:7a:ca:1e:88:4c:20:9e:f1:95:d3:93:35:58:67:
5f:66:de:e5:30:87:86:dc:f5:ee:6d:a7:d5:3f:43:
c0:c0:38:02:f3:73:68:34:22:3d:c0:ac:0b:26:75:
86:46:c8:b4:c8:7a:d0:52:56:9d:64:f7:b8:ad:6d:
64:b7:2d:45:85:61:81:23:b8:a8:3f:42:6d:88:c3:
10:0a:47:4d:40:a1:b9:3e:37:53:89:04:32:dd:b8:
c4:ab:d5:8c:a6:30:9c:aa:5b:bb:ec:84:54:34:69:
94:34:82:3f:94:25:77:57:16:05:dd:43:d0:6c:c8:
5a:bf:27:d5:24:7f:82:4e:f3:87:4f:12:0c:3b:b1:
c3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:AD:90:68:CB:D5:C8:35:4A:B6:7F:4F:CD:5A:D7:50:B5:08:3D:77
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:01:c0:12:10:0c:e2:cb:af:97:12:34:0b:00:9e:f4:d5:
f6:f2:6d:7d:e9:42:83:83:fc:93:e9:90:87:32:96:b6:54:62:
8f:e0:5d:09:c2:42:29:4c:86:fd:fa:7b:32:06:51:bf:00:52:
88:7d:5e:7d:9f:38:7d:59:05:43:b9:30:94:15:29:71:b7:83:
55:01:14:f6:45:cf:34:93:e8:3c:4d:70:d6:49:df:30:d6:9b:
c9:39:29:96:40:af:90:2e:f3:05:cd:62:ff:91:b0:38:32:22:
1b:39:58:26:46:1c:e7:c7:4e:7a:ad:7d:5d:5d:15:74:e0:1e:
ba:7f:7b:98:61:40:42:18:39:b3:90:c5:61:a8:eb:e6:c0:26:
b1:a3:16:61:7c:27:21:95:83:7a:9f:f6:2a:71:ec:e1:af:b2:
35:5e:ef:50:a8:41:0d:32:a7:78:ce:0b:3c:6a:c6:63:ef:03:
65:99:42:0c:1d:a6:bd:9d:83:4d:2c:4b:23:de:5b:af:9e:85:
bf:99:bd:89:0d:06:26:b6:bd:41:17:10:8a:1e:50:e9:40:7d:
de:86:76:ba:eb:91:aa:5e:96:03:c2:99:07:d4:fb:96:7f:1e:
10:3d:00:53:18:d0:5b:76:20:ad:95:62:c6:3b:4b:3a:c3:a3:
a2:a6:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:33:04 2025 by rpki-client