Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: DZma0VLRZ/rtj1v816UxH3TYduX4NcySCIV7be54sKc=
Subject key identifier: 15:EE:6E:51:26:B0:59:13:AA:C7:53:90:C7:40:DF:0A:AB:86:A5:B6
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 0199C533070F9957F61E43C6FF146D2A859F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 09F8
Signing time: Wed 08 Oct 2025 19:01:19 +0000
Manifest this update: Wed 08 Oct 2025 19:01:19 +0000
Manifest next update: Thu 09 Oct 2025 19:01:19 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: qYbb48HlQw12h4VnsjCtvgxCDPPkfMa6Y0MxV/ncRL8=)
2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:33:07:0f:99:57:f6:1e:43:c6:ff:14:6d:2a:85:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Oct 8 19:01:19 2025 GMT
Not After : Oct 9 19:01:19 2025 GMT
Subject: CN=15ee6e5126b05913aac75390c740df0aab86a5b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:98:32:b5:63:e1:a3:8c:81:cc:6a:cd:a4:
d1:b0:e3:e0:ed:ba:41:76:b2:20:34:7c:c5:87:c7:
43:a2:b0:fa:c0:c5:8a:88:8e:db:42:cd:83:cd:6e:
53:32:6c:c4:99:6b:13:a2:8e:ba:67:e8:9c:9f:34:
80:9d:58:27:28:3e:48:fe:00:89:30:ac:3c:94:f9:
41:66:a3:e4:b0:b7:6a:2d:15:09:3a:ab:e0:23:5e:
83:6e:66:ea:a7:a7:d4:3f:c3:e1:9f:bb:21:29:bb:
3c:b3:ee:20:eb:3a:73:a7:41:1e:06:5d:66:57:1b:
d3:31:b6:cc:e7:7e:0c:b0:ad:fe:bb:49:6f:47:55:
ef:21:a7:7e:31:3c:41:cc:49:97:26:ff:06:65:1c:
01:16:a8:b7:a5:fc:7e:93:9b:df:2e:ed:01:2b:0a:
71:41:fe:c4:51:03:0c:c9:64:3a:9f:1f:53:c6:07:
cf:9e:ae:b0:7b:0a:8d:b0:51:2d:52:8a:6f:94:1a:
44:f3:15:6d:a1:e8:39:66:be:c9:6a:13:42:5e:6d:
e8:57:15:f1:e0:18:f9:fd:b0:d4:1f:8e:a7:58:2d:
c4:49:72:99:9d:c9:df:56:9d:4a:4e:9b:df:3b:4f:
28:ee:c4:83:24:6b:33:8f:68:1e:b5:23:4f:a1:66:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:6E:51:26:B0:59:13:AA:C7:53:90:C7:40:DF:0A:AB:86:A5:B6
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:77:1f:c9:e7:42:e3:83:78:91:6f:69:36:4e:95:45:a4:d5:
1a:bb:17:8f:0f:42:80:86:e8:eb:9c:0b:26:26:1d:f4:d6:99:
7e:de:32:0d:b9:2e:b4:e4:73:a5:16:c1:35:ef:54:f2:51:bc:
b4:6c:f2:4f:3f:8f:15:d0:d5:3b:8e:e5:89:3b:19:d9:72:d9:
bc:02:5e:0f:6f:c4:75:00:10:a3:73:ad:ed:79:24:5f:fd:92:
5a:20:d3:c3:6e:f9:48:7d:c6:41:33:df:44:22:2f:ea:6a:39:
df:79:26:11:0e:0c:80:2e:4b:6d:af:de:4a:4e:54:83:40:93:
8e:e3:f8:3e:63:b1:89:db:e6:9b:7d:6a:1f:c7:3c:c4:20:11:
64:de:9c:d6:29:a6:6b:ef:ba:f4:5b:64:20:e8:f1:5d:77:dd:
a4:83:44:48:aa:b4:20:7a:c1:d8:40:02:6f:33:e2:f6:23:fb:
87:41:88:0e:d2:13:ec:58:e0:71:64:b8:e3:0a:f0:fa:6a:8c:
e0:1b:14:49:e4:b9:a4:84:4c:96:f0:d6:3b:6e:36:4e:50:d2:
4c:c1:42:15:21:39:77:1c:15:5d:15:00:75:5c:08:47:2b:23:
74:7b:01:99:35:da:e6:3e:f1:74:8a:e6:1c:02:67:0a:ba:a4:
39:81:b9:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:21:53 2025 by rpki-client