Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: vZFPCTleLukTtuPu5HAnIsGXuAMViyc+hgP7RpZFOBE=
Subject key identifier: 16:A3:5B:E4:E7:2D:E6:26:0F:A1:74:BC:E2:EB:23:7C:DA:81:7F:01
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01974F335D1DE4A84212784A7A36783B391D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 11:00:55 +0000
Manifest this update: Sun 08 Jun 2025 11:00:55 +0000
Manifest next update: Mon 09 Jun 2025 11:00:55 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: pP4EhBNFjDN+iOCxilCMrHjHIyaVhQLUMRJCqaKr9jc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:5d:1d:e4:a8:42:12:78:4a:7a:36:78:3b:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Jun 8 11:00:55 2025 GMT
Not After : Jun 9 11:00:55 2025 GMT
Subject: CN=16a35be4e72de6260fa174bce2eb237cda817f01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:23:4b:63:4c:1a:fd:55:46:b4:aa:bb:b0:2b:
cc:8e:f8:10:c5:22:73:5f:ae:2b:35:70:80:08:0e:
d8:16:e8:f2:8e:cb:00:ce:fa:5a:1a:87:49:87:25:
3e:10:85:16:45:f4:31:e0:97:ab:3d:50:f7:25:69:
50:ec:aa:b6:66:cb:16:89:a8:d0:f5:ea:46:54:76:
f3:85:4e:02:5a:d0:bc:b9:37:54:80:32:b6:d3:ff:
46:92:ab:0a:d3:a9:f6:fb:c5:3e:6d:45:b2:f0:f5:
c5:e5:02:44:b5:12:c5:59:34:b2:7c:f5:08:f9:d9:
4e:96:b6:fa:27:1b:49:df:ec:e1:9a:5b:94:dd:14:
99:4d:6e:4c:b4:12:de:cd:54:8f:c7:21:0c:af:1f:
c9:e5:0b:90:e2:fd:99:a9:56:1c:ed:38:0d:18:a7:
60:bf:dd:e2:aa:61:4f:81:12:c7:b8:b9:ed:db:05:
a4:0a:b6:1f:79:f1:75:e8:5b:31:57:9d:63:6b:77:
fe:f9:aa:95:3e:6d:3e:17:15:87:dc:08:6c:b1:d2:
41:20:09:d0:f6:40:cb:b6:a2:b5:12:d6:b4:5e:41:
fb:fb:9f:db:e7:e7:fd:67:36:c3:4d:9f:3f:31:26:
bf:56:3d:dc:93:f2:76:44:6b:29:7f:3d:63:3f:31:
19:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A3:5B:E4:E7:2D:E6:26:0F:A1:74:BC:E2:EB:23:7C:DA:81:7F:01
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:69:93:78:2f:a9:49:14:3b:f6:c4:c9:f1:b8:67:bb:60:
fd:8e:2c:f1:8e:df:a9:fe:44:f7:f5:34:31:df:8e:c9:27:e9:
ae:86:cf:a5:f3:fd:8d:d5:c2:38:c8:cb:89:b2:65:f5:b5:00:
d9:a3:a0:7f:b9:21:d1:08:b8:f6:c6:6f:a8:71:41:21:92:17:
93:c1:19:f1:74:60:17:2a:4c:3f:ec:0b:8b:54:e4:2a:26:6b:
d2:42:a0:56:e1:65:27:9f:9d:60:a1:4d:ed:9b:3c:6c:a7:20:
12:c9:50:36:f1:26:ae:b8:20:83:71:4a:c0:23:27:30:54:2f:
9b:e5:cb:cf:d8:ac:94:fb:03:36:df:15:4a:07:59:a4:80:07:
16:a5:e9:ca:6a:72:13:11:35:0c:9c:c8:73:c5:e8:d4:c5:ab:
b5:94:f8:60:fc:6b:cd:ca:29:20:ea:71:71:e9:d3:43:25:46:
da:0d:a3:3d:89:c5:e8:1c:36:b6:ef:fd:73:94:f4:44:51:75:
4b:e2:d6:b5:25:2f:6b:8e:fa:13:98:22:46:82:23:c7:d3:18:
06:b3:e5:20:07:11:73:18:95:93:58:61:85:d4:19:8c:00:b0:
58:ec:55:69:61:f5:9a:68:aa:b9:68:0b:98:63:37:fb:f0:f1:
8d:49:f1:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPM10d5KhCEnhKejZ4OzkdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw
ZGNmNDkwHhcNMjUwNjA4MTEwMDU1WhcNMjUwNjA5MTEwMDU1WjAzMTEwLwYDVQQD
EygxNmEzNWJlNGU3MmRlNjI2MGZhMTc0YmNlMmViMjM3Y2RhODE3ZjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2iNLY0wa/VVGtKq7sCvMjvgQxSJz
X64rNXCACA7YFujyjssAzvpaGodJhyU+EIUWRfQx4JerPVD3JWlQ7Kq2ZssWiajQ
9epGVHbzhU4CWtC8uTdUgDK20/9GkqsK06n2+8U+bUWy8PXF5QJEtRLFWTSyfPUI
+dlOlrb6JxtJ3+zhmluU3RSZTW5MtBLezVSPxyEMrx/J5QuQ4v2ZqVYc7TgNGKdg
v93iqmFPgRLHuLnt2wWkCrYfefF16FsxV51ja3f++aqVPm0+FxWH3AhssdJBIAnQ
9kDLtqK1Eta0XkH7+5/b5+f9ZzbDTZ8/MSa/Vj3ck/J2RGspfz1jPzEZqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBajW+TnLeYmD6F0vOLrI3zagX8BMB8GA1UdIwQY
MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt
ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1
LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsppk3gv
qUkUO/bEyfG4Z7tg/Y4s8Y7fqf5E9/U0Md+OySfprobPpfP9jdXCOMjLibJl9bUA
2aOgf7kh0Qi49sZvqHFBIZIXk8EZ8XRgFypMP+wLi1TkKiZr0kKgVuFlJ5+dYKFN
7Zs8bKcgEslQNvEmrrggg3FKwCMnMFQvm+XLz9islPsDNt8VSgdZpIAHFqXpympy
ExE1DJzIc8Xo1MWrtZT4YPxrzcopIOpxcenTQyVG2g2jPYnF6Bw2tu/9c5T0RFF1
S+LWtSUva476E5giRoIjx9MYBrPlIAcRcxiVk1hhhdQZjACwWOxVaWH1mmiquWgL
mGM3+/DxjUnxOA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 18:44:16 2025 by rpki-client