Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: Hnt1+UqkRbxeqQdkYETdkaz6LzIwV2wjKqoUIOYis6Q=
Subject key identifier: CC:F2:7D:B1:B7:96:0F:7F:24:29:78:63:92:CF:58:88:61:BA:0E:15
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 0198C6493BFBF0DB9EEC77112F1667AD8AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0974
Signing time: Wed 20 Aug 2025 07:02:24 +0000
Manifest this update: Wed 20 Aug 2025 07:02:24 +0000
Manifest next update: Thu 21 Aug 2025 07:02:24 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: zn9q5j5io5z7TJmBV8d8DhiwsCkCqhcdhM00NA8SaJI=)
2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 07:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:49:3b:fb:f0:db:9e:ec:77:11:2f:16:67:ad:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Aug 20 07:02:24 2025 GMT
Not After : Aug 21 07:02:24 2025 GMT
Subject: CN=ccf27db1b7960f7f2429786392cf588861ba0e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f5:2f:b3:b7:9e:43:e8:34:1b:f9:96:95:ac:
d2:22:99:43:5a:09:45:8e:1e:ac:fd:e5:3b:a8:a0:
67:64:51:92:66:d6:a8:7c:67:2a:2b:d6:21:b4:89:
4d:16:b8:3d:fa:c7:8c:fc:84:ef:ff:78:05:13:f2:
17:b1:65:9d:0e:d8:fe:ac:fa:6f:c1:65:80:89:8f:
f9:e8:df:bb:6a:38:19:8c:6d:77:e6:7e:0e:98:2c:
8b:51:ed:84:6f:c3:10:6a:2a:40:78:f3:83:76:41:
59:15:03:19:3f:21:53:4e:6c:c7:e5:29:bc:ae:4c:
cf:05:81:56:97:de:d0:9e:99:22:c6:44:33:83:61:
48:e0:77:8d:f7:6e:82:60:d9:77:26:16:e9:f8:8a:
c7:7e:49:d6:a0:22:69:90:63:05:9f:67:36:6c:b5:
d6:79:87:14:aa:f0:96:fb:97:47:9a:5e:ec:4d:03:
54:d1:5e:00:10:15:44:47:fd:03:40:88:5d:fd:77:
c0:ef:eb:a2:d9:fe:a8:64:cb:e3:0e:01:80:e2:28:
8f:5b:3a:5a:23:43:5b:88:87:e7:a3:79:ee:51:7b:
3b:bd:ff:e0:c3:96:c6:52:d7:62:9e:f5:e5:cb:3c:
64:c2:71:45:bb:ea:2a:54:71:84:b2:22:01:5a:36:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:F2:7D:B1:B7:96:0F:7F:24:29:78:63:92:CF:58:88:61:BA:0E:15
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:25:57:c8:54:63:9b:e9:21:c2:42:56:e2:3c:34:53:86:42:
f9:86:25:f7:40:29:fe:99:89:22:4e:51:34:15:3b:27:69:26:
d5:99:68:6c:a4:2e:a1:9c:b4:ac:07:d9:9f:43:21:d4:d4:81:
3d:64:ae:00:ad:f3:8a:48:dd:c3:ec:0c:76:b1:09:22:bf:b4:
98:a9:2f:ea:34:99:1b:c6:9e:8a:9a:03:40:8e:17:23:4d:db:
fd:e9:13:81:d9:3c:e3:40:b9:1f:c6:4c:5c:63:2f:33:0d:eb:
63:8b:54:b9:bc:b3:4b:1f:07:6a:45:ab:a3:f0:1d:86:b8:54:
6c:36:bc:7e:8f:62:9c:c1:cd:c5:7d:6e:d0:a7:40:c6:a9:b6:
24:b2:50:93:bd:f1:e4:2f:bc:94:47:66:4d:e2:27:f9:4a:4b:
f1:94:95:68:e4:e0:fd:0c:d6:d0:14:70:00:6b:64:d9:cd:ce:
6b:07:7e:32:6a:b4:8a:6d:34:34:c2:d5:c4:1b:e0:ca:26:17:
f7:f2:00:61:42:1a:21:63:80:08:39:80:ed:57:4a:a8:9f:2a:
fb:c3:17:cd:28:70:03:c0:66:bb:7c:38:8b:aa:81:80:04:80:
c5:27:b9:30:b3:b1:d4:6d:20:d2:35:5e:90:f5:37:4a:16:a6:
db:bc:31:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 13:15:46 2025 by rpki-client