Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: d7RN/u8BMb4GAO+YBBSTQo9W9M1paWW0sVhlOroPZuY=
Subject key identifier: 3D:40:C8:31:45:2E:5B:B3:A3:DB:3A:B6:3D:5D:1A:3E:5A:4D:BA:F1
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019826A3892B3CBD3D6668AD741D069C760B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 19
Signing time: Sun 20 Jul 2025 07:01:48 +0000
Manifest this update: Sun 20 Jul 2025 07:01:48 +0000
Manifest next update: Mon 21 Jul 2025 07:01:48 +0000
Files and hashes: 1: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: l2Vk8WJHuzTJCfJOz6MBZEdDYimQeVM/oE9fkdcXwsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 07:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:26:a3:89:2b:3c:bd:3d:66:68:ad:74:1d:06:9c:76:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Jul 20 07:01:48 2025 GMT
Not After : Jul 21 07:01:48 2025 GMT
Subject: CN=3d40c831452e5bb3a3db3ab63d5d1a3e5a4dbaf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:6d:a4:1d:60:f1:d3:ab:b2:3d:9a:0e:69:
1c:57:f5:ef:69:1d:64:02:df:2f:42:83:48:93:72:
ec:38:01:88:72:3d:92:48:20:6c:bb:34:b0:71:a1:
4a:0c:f8:a8:57:22:38:36:eb:e5:bf:ac:e1:12:9b:
e0:32:4a:56:f6:f3:e1:90:f7:af:60:ea:bf:0b:0e:
b3:79:3e:34:d4:35:9b:79:dc:53:94:f0:cf:f5:4b:
d4:33:c7:04:a5:6a:fe:89:62:08:db:a2:89:50:a4:
ac:43:da:d5:b2:67:cd:b9:19:e6:61:6f:8c:4f:a6:
73:d6:86:6a:19:c7:ca:3a:6d:63:70:75:34:73:a1:
94:d3:13:89:ab:dd:26:c3:a9:27:78:56:d1:e0:46:
5d:09:0c:77:5b:22:f2:1f:45:5f:af:09:02:b6:12:
53:a0:74:e4:aa:c5:87:72:7c:fe:82:cd:69:29:34:
ca:7f:5b:a7:b7:05:4c:25:bf:e3:aa:96:19:23:2d:
53:0a:2e:e3:36:20:b0:ea:de:a3:36:f8:46:82:e8:
2b:d5:73:70:54:18:14:37:10:f6:69:af:e0:c8:60:
69:09:0d:17:22:ca:41:af:32:28:b4:37:18:ac:a4:
88:45:e2:6d:6f:a9:5e:94:dc:20:29:b2:04:af:34:
19:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:40:C8:31:45:2E:5B:B3:A3:DB:3A:B6:3D:5D:1A:3E:5A:4D:BA:F1
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:2d:2a:54:b9:91:4c:4a:99:09:29:b0:0d:b0:a6:da:ee:a3:
15:96:c1:ca:40:47:2f:a3:87:bd:09:70:03:29:36:3a:9a:d0:
58:6b:76:18:6d:f4:ee:a9:9a:34:1b:1d:1f:90:d2:fa:97:57:
a3:56:fd:62:88:1d:f3:cf:7d:6f:00:5b:63:4d:aa:57:90:3e:
85:34:d9:dc:57:1d:42:90:fb:42:85:14:67:6e:36:a0:da:ff:
e1:7a:79:30:5f:da:49:af:60:13:16:cb:9c:05:08:0d:fb:6f:
d2:55:9f:9d:eb:7b:dc:3a:8c:45:7b:f3:b7:7d:9c:e2:03:d5:
bb:64:fe:bb:6a:ee:e9:8c:03:b5:40:66:55:ce:c3:8a:e0:d8:
f7:62:16:4b:4c:eb:05:2f:e3:74:d0:7b:df:10:8e:e8:44:f9:
0b:1d:0a:7c:2b:b5:da:14:c6:11:df:fb:68:4d:43:62:11:ce:
08:9f:e3:90:24:30:3b:94:c2:d2:b4:2a:c7:36:0a:5e:b5:c4:
35:42:96:5e:44:14:cf:bf:60:6d:4d:c1:3b:55:4e:b6:a6:0f:
16:40:7a:0c:8a:41:d9:40:b7:82:37:5b:9b:f3:1e:dd:6b:16:
a4:5a:7b:55:8f:48:79:6d:24:f7:11:d8:8c:2e:6f:e9:52:3c:
f1:04:b6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 16:22:30 2025 by rpki-client