Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: bZIi9wdP1+54tVKC7DbqFEjQxswq9cOGPy7Hi9VjNwA=
Subject key identifier: 0F:60:FE:47:3C:55:6D:E7:62:A5:A6:91:AC:05:2D:2B:BA:E9:09:FB
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019749D5E49D7062BB9F8D27237DA3E5E747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 10:00:43 +0000
Manifest this update: Sat 07 Jun 2025 10:00:43 +0000
Manifest next update: Sun 08 Jun 2025 10:00:43 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: ULtWIX9emv77d2hb3rXlpJrmsz8+tH+GnkhNsOoT52U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:e4:9d:70:62:bb:9f:8d:27:23:7d:a3:e5:e7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Jun 7 10:00:43 2025 GMT
Not After : Jun 8 10:00:43 2025 GMT
Subject: CN=0f60fe473c556de762a5a691ac052d2bbae909fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:81:f3:6c:10:28:ec:04:64:82:23:a1:62:
c1:b9:fb:34:2f:39:cb:e1:2a:c7:ae:88:99:fe:07:
ef:d3:ac:9f:d9:2c:58:59:12:e4:44:99:b1:84:2d:
07:00:4f:36:b7:30:77:54:0e:ee:26:eb:27:6d:06:
60:34:e1:49:a3:f7:b4:d0:23:24:23:0a:25:1f:d2:
ea:40:07:13:af:d3:36:e6:f2:0f:1a:9d:6e:2f:dc:
a4:5a:39:87:98:1b:7e:89:e6:dd:53:ce:51:d8:e6:
a4:92:58:48:4a:02:67:d4:f2:c5:3f:c5:cf:55:c6:
40:a1:0d:e5:8a:ce:02:94:d9:74:c5:df:ef:8b:ed:
3b:e0:75:f5:92:2b:a0:f3:0b:a7:a7:c2:7a:2d:00:
ea:1f:5d:f9:fe:ec:b6:42:07:82:7b:96:6a:23:e6:
88:38:b0:82:f7:7d:b4:eb:fb:df:48:e3:32:70:eb:
52:91:e0:3d:40:88:8d:e0:71:56:64:f0:12:ee:30:
d4:f9:97:55:c5:e2:dd:fc:65:26:44:84:36:f1:d3:
3c:fe:0b:81:62:0e:1f:16:ac:57:45:50:b8:9d:b9:
90:88:1c:53:0d:74:a7:66:da:31:49:98:ee:d5:be:
98:b9:64:56:c5:c0:bb:9a:7f:fe:45:57:06:63:b7:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:60:FE:47:3C:55:6D:E7:62:A5:A6:91:AC:05:2D:2B:BA:E9:09:FB
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:be:87:39:6b:a2:e2:2d:23:3e:c5:09:e2:3a:51:50:cf:25:
8d:2e:5f:ef:d1:d7:98:a5:0c:f5:b3:3a:09:9e:bf:81:5c:95:
b7:4e:cd:50:0b:f8:18:f6:d1:93:46:18:f6:cc:95:3d:72:96:
cf:05:0f:d0:84:4b:58:fb:42:fb:fe:c2:99:f5:37:38:4a:e5:
a1:da:46:69:bd:65:44:1e:6d:72:3f:b8:c6:ae:9e:62:b9:8c:
ac:de:1e:ab:2e:a4:6a:8a:d8:f4:d4:5e:a4:0f:f0:33:25:bd:
7c:7b:6c:f3:b8:ae:c1:8d:58:5d:bd:8f:38:b7:39:60:54:41:
64:59:d9:a2:eb:66:d4:2f:f2:5c:bd:2b:b5:89:60:9e:53:c2:
de:37:6f:a0:55:f0:cb:6d:50:86:6c:4a:00:6d:17:94:ba:b3:
40:9f:b1:97:4d:e3:7e:01:c6:90:5e:f4:d4:85:30:1b:b1:f4:
b4:5a:d5:7e:d5:82:37:fc:01:a2:4e:9f:fa:e1:7e:d9:a7:bf:
2c:51:57:3a:d2:03:3e:bd:56:10:19:18:e7:0c:65:8c:34:99:
51:0e:35:a8:9c:c5:3b:41:00:37:90:be:63:9c:c2:98:cd:29:
d1:a9:9a:48:a4:f6:1c:6d:e2:33:66:0b:7f:d8:d7:b3:f5:5c:
06:0d:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:54 2025 by rpki-client