
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: FeNlxE95r6qOV7R9tH0gBQqhEapNIXoQ6yZJjVWk6lM=
Subject key identifier: F3:80:45:8F:36:58:E5:9A:AC:02:50:4A:61:A9:DB:C3:6D:25:4A:D7
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 0199239F05093EF5D15C989CCA2889AE4057
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 10:00:48 +0000
Manifest this update: Sun 07 Sep 2025 10:00:48 +0000
Manifest next update: Mon 08 Sep 2025 10:00:48 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: 9TCkKxWmEcvIxHMonOu6umJZsQWvNwMcIg9lFlmAPbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:05:09:3e:f5:d1:5c:98:9c:ca:28:89:ae:40:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Sep 7 10:00:48 2025 GMT
Not After : Sep 8 10:00:48 2025 GMT
Subject: CN=f380458f3658e59aac02504a61a9dbc36d254ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a6:da:ea:e7:e4:6f:f6:89:16:88:16:a1:09:
45:60:b0:d3:db:cc:a4:0f:21:e3:dd:f4:05:30:33:
2f:03:87:96:12:13:37:72:46:cf:31:51:8e:61:0d:
ed:07:84:00:59:d9:24:1f:44:04:ab:56:16:bd:4c:
a4:e3:45:18:a7:71:a9:73:e4:5f:07:45:c8:d5:93:
07:fe:58:af:d8:95:60:e4:72:47:d6:21:3a:3d:ea:
ee:a2:c7:53:6d:82:0c:65:a3:3a:b1:59:cf:46:01:
57:a7:09:34:18:35:00:7c:b9:f2:7c:f8:f4:54:ae:
1c:ab:eb:a2:c5:7d:58:69:54:0b:df:1d:aa:57:60:
46:28:a0:b9:d4:f2:e9:48:ce:50:49:5e:59:36:ff:
2a:1b:d4:79:62:33:ed:58:87:88:48:ff:55:6b:0f:
a7:1b:10:9b:b6:1f:1f:10:5b:30:93:9e:f1:11:0b:
81:6d:73:66:3e:ee:11:74:c2:81:1c:26:78:c8:11:
ae:26:10:92:b6:d1:ef:1b:03:18:0f:bf:25:44:c5:
74:77:83:68:32:60:49:46:53:7f:8a:ac:31:53:a0:
cb:48:1c:b4:8e:41:c6:08:9b:22:49:69:95:a3:3c:
0c:b0:6c:a0:3b:0b:5c:08:7d:83:10:8c:62:ce:ad:
20:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:80:45:8F:36:58:E5:9A:AC:02:50:4A:61:A9:DB:C3:6D:25:4A:D7
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:ef:71:ee:48:c4:ee:00:e4:ec:50:be:12:05:ec:dd:b7:01:
1c:45:61:c2:e8:e6:fb:cf:9e:51:0a:fa:95:90:ba:aa:85:ea:
a0:24:9b:74:39:74:62:cd:f9:94:dc:98:a5:68:e5:1f:bc:a0:
fd:ed:3e:df:ce:5f:1b:1d:72:ee:80:04:51:68:25:91:21:33:
a0:8d:61:aa:d2:ba:9e:6c:43:ad:1d:bc:c7:18:a0:53:b6:2a:
ee:0d:a9:18:d7:e8:f3:35:ee:fd:91:74:a3:13:8e:89:ce:53:
7d:0e:4b:fd:18:d9:11:48:22:bc:13:64:5e:66:9d:63:19:9e:
f7:77:60:59:8b:87:1e:b8:20:bf:8d:d2:7f:cf:81:56:0d:10:
9a:2e:1f:6e:18:01:ce:7f:d9:20:3f:b5:e9:02:8a:8a:5a:a2:
24:54:20:69:89:22:a9:24:22:d6:fd:70:14:2f:19:44:bc:0c:
6c:9e:68:f5:88:50:af:4e:2d:96:a3:34:84:bd:f6:1d:02:3c:
f5:d2:e0:ee:35:30:40:26:12:ce:43:63:03:31:e5:85:4e:98:
83:05:3e:2a:3c:dd:06:a5:5b:00:45:20:de:f4:e2:03:d8:51:
82:8d:d1:a0:6f:80:71:54:84:4b:28:6b:85:70:62:b8:a4:1b:
5e:52:18:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:07 2025 by rpki-client