Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: 9obJH4FVLVxF/vQle8JxENwVTzqQzO7/IcJpP1yflC4=
Subject key identifier: 45:8D:FC:90:85:E7:84:BC:7B:AD:80:20:F8:CF:22:72:63:16:AA:10
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01984AE617983645280E98FBDCCFE2C1F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 07CC
Signing time: Sun 27 Jul 2025 08:00:49 +0000
Manifest this update: Sun 27 Jul 2025 08:00:49 +0000
Manifest next update: Mon 28 Jul 2025 08:00:49 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: yHR5ZYyop+0tsthgcGQJMDMHI3UsebtlnhVActLXNkU=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e6:17:98:36:45:28:0e:98:fb:dc:cf:e2:c1:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jul 27 08:00:49 2025 GMT
Not After : Jul 28 08:00:49 2025 GMT
Subject: CN=458dfc9085e784bc7bad8020f8cf22726316aa10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:b6:a1:87:8a:a5:52:4b:bc:bb:f8:d3:77:
48:33:27:27:1c:d8:49:37:8e:0d:5d:30:c0:8d:46:
14:f4:a7:75:c5:b9:a0:77:fc:20:da:ed:91:25:dc:
fd:58:9f:12:14:d9:ea:b3:32:96:e2:bb:ae:08:a4:
1d:65:4a:53:00:66:03:20:fe:d5:c6:6c:42:8b:15:
4e:fe:9c:56:e3:35:c6:a6:f1:13:9b:1c:bf:70:42:
9a:32:23:b4:8b:65:88:98:a4:12:8c:e8:19:1c:d8:
9e:4b:bc:45:73:90:5a:a3:41:48:1a:5c:f0:d2:01:
23:46:3c:b4:78:17:d4:be:7f:00:57:96:4c:0e:5a:
cb:18:c4:e8:72:09:69:ed:50:e3:2c:a2:9b:97:03:
75:e0:31:da:77:b8:61:8f:81:12:9c:8c:f8:eb:82:
0e:d7:0c:52:d4:26:f9:ef:12:6c:f3:21:7c:2b:fa:
1d:3d:d8:1a:13:6f:25:da:69:54:01:79:27:77:14:
43:4d:6d:42:49:47:1e:ff:15:6c:2c:16:a1:f3:99:
dc:72:f1:81:75:1f:6e:76:e1:85:98:94:10:a7:c6:
c6:b4:40:42:ba:13:63:44:a3:87:e7:d8:dc:16:01:
31:b0:5e:4a:6e:ec:9f:75:a3:c6:94:88:86:69:b5:
88:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8D:FC:90:85:E7:84:BC:7B:AD:80:20:F8:CF:22:72:63:16:AA:10
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:c3:df:6d:be:c0:33:54:ac:19:37:70:b6:8a:6f:62:27:06:
4e:91:dc:1d:1a:5e:04:ac:67:dd:7c:79:76:c6:3d:8f:59:8a:
f6:4c:bb:b2:04:c8:a5:17:1b:bd:f3:26:46:e2:a8:ce:3e:00:
5a:fc:bf:8b:6c:cd:d9:f0:ad:8a:da:cb:7b:31:e3:1c:16:27:
7b:7d:bc:66:7d:1b:48:0d:2c:0b:8b:a0:1a:ec:1b:2f:61:21:
3d:7d:bb:17:a4:c2:73:e1:39:35:32:14:91:b8:26:c0:ad:f1:
6b:4b:47:19:6b:d1:a3:8f:8c:f4:fd:4a:f7:e7:44:59:a5:60:
00:30:ab:7d:58:b0:87:bb:68:08:60:2d:87:eb:f0:b7:1f:7b:
59:fa:ef:1d:bb:7f:9a:b8:74:8e:a4:0d:31:a9:2d:b3:44:53:
1c:01:5b:82:19:f5:2f:07:30:f1:71:b7:c0:98:ca:97:36:ea:
ab:7b:21:3b:d2:49:26:a8:a9:f2:f7:3e:c0:9b:07:9d:86:79:
1b:59:2d:12:11:59:6b:81:b6:cb:d7:d3:5a:2b:66:a1:d4:e6:
02:1f:e7:43:2f:bf:65:aa:b2:5f:ae:24:7d:8a:85:f8:81:53:
a5:01:b5:c8:2a:6f:08:60:7e:15:2c:c3:89:fc:44:1b:ab:6b:
d8:8e:fb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:30:25 2025 by rpki-client