Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: C0t9uwSPAKzis+4oXzzCi3Pxe/fFshJfXOmmr7frIkk=
Subject key identifier: EA:8C:A0:1D:DB:CF:1A:B2:95:D8:0A:D8:C3:24:9F:BC:41:2B:0C:A7
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 019846D1FDF241909B90DC551A9D4392AE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0AD0
Signing time: Sat 26 Jul 2025 13:00:23 +0000
Manifest this update: Sat 26 Jul 2025 13:00:23 +0000
Manifest next update: Sun 27 Jul 2025 13:00:23 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: qKgo5q6D/mnYkt6o4sRUwS7TTFiZsknHP4FS4uy7bOc=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:d1:fd:f2:41:90:9b:90:dc:55:1a:9d:43:92:ae:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jul 26 13:00:23 2025 GMT
Not After : Jul 27 13:00:23 2025 GMT
Subject: CN=ea8ca01ddbcf1ab295d80ad8c3249fbc412b0ca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:71:9a:9c:a8:d9:3b:d3:09:80:0d:66:f9:83:
6b:df:4b:6c:4f:70:cc:13:0a:ee:3d:a6:92:f9:4b:
bc:6f:bf:2a:77:7e:ca:bf:41:5e:a6:95:94:63:cb:
65:c3:7a:ad:9d:a0:77:a2:ad:4c:81:87:e0:35:81:
dd:21:b3:00:61:64:8f:75:ae:69:af:a8:58:98:f5:
f0:be:99:d8:06:ed:d0:33:13:c3:80:4f:af:eb:18:
02:99:73:b9:89:fe:c3:82:fa:86:22:ee:56:8b:e3:
68:79:10:64:da:6f:8e:33:fb:29:db:32:3b:91:61:
63:02:71:88:e3:be:d1:5b:28:d9:ab:89:7d:d8:42:
ec:33:f3:f7:0b:f1:1f:54:a8:e8:ef:d8:fc:bd:40:
aa:11:c1:36:04:b8:80:59:b7:36:4e:b3:27:78:3c:
08:9e:9f:49:7f:3e:f1:8d:a6:67:27:c1:c3:a2:06:
59:38:20:20:bd:c5:d1:56:7b:c1:ce:bd:ee:39:1f:
d9:02:6c:eb:30:4b:1d:6e:14:c3:87:d9:9b:de:32:
5c:90:00:5e:8e:e2:be:d6:60:91:34:d1:30:44:0f:
68:dd:33:34:80:2b:f3:41:5f:65:4e:51:57:36:de:
39:c0:6d:5d:c0:4b:13:bd:85:68:b6:b3:94:48:3e:
c1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8C:A0:1D:DB:CF:1A:B2:95:D8:0A:D8:C3:24:9F:BC:41:2B:0C:A7
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d6:33:4b:57:3d:af:f9:6a:be:06:98:01:e2:e2:d4:79:7c:
de:c6:cc:9a:00:8b:4d:de:5b:08:96:2a:ae:9e:00:01:0a:bf:
2d:c4:80:fc:49:b9:e3:8d:0a:e3:f5:aa:6b:75:31:70:dd:8b:
e9:36:38:dc:3a:86:63:b6:5d:22:cc:67:8d:a3:44:69:93:7c:
5c:a3:ee:76:a9:8a:73:21:57:b6:ed:65:c3:c4:ff:af:bf:61:
ba:51:28:af:b2:93:62:21:1f:ce:85:c5:e7:59:1a:5f:85:b6:
b0:83:6d:70:79:d1:41:6b:15:df:fa:c0:40:f1:fd:79:01:b2:
d6:a6:90:b4:6c:fc:28:0a:76:4f:95:88:17:88:3f:52:7c:6d:
dd:9b:4a:97:c5:55:4b:66:c7:ff:1a:64:87:4d:8e:0a:30:b6:
ef:fd:54:01:61:87:88:33:c0:30:7a:1b:46:58:0d:b5:9e:87:
e0:4c:f5:2f:39:36:87:2c:68:03:98:a9:fb:a6:db:2a:2b:94:
d3:f6:54:63:ff:60:6d:aa:2d:22:8a:54:d9:3f:84:8a:b3:92:
45:d1:73:bb:72:8e:f3:33:85:82:27:09:af:e6:dd:c4:65:27:
bf:8b:69:a2:96:b0:fc:68:de:d0:36:64:11:01:25:0a:13:a8:
40:a5:7b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 18:46:22 2025 by rpki-client