Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: lT18bRJb8mdBAmCt/Ne5jQ+lmiHRP81YPsGjYh34UYg=
Subject key identifier: 4F:14:26:87:41:18:3C:89:88:77:AF:D7:04:19:1E:24:01:6B:4A:6A
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 01974DB307D384B9C39DEE3E322B26351CD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0A4F
Signing time: Sun 08 Jun 2025 04:01:07 +0000
Manifest this update: Sun 08 Jun 2025 04:01:07 +0000
Manifest next update: Mon 09 Jun 2025 04:01:07 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: K5ABq4TQfV1vBXUpyP5WAm/ZhWBU3OO7ceu3giprUPk=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b3:07:d3:84:b9:c3:9d:ee:3e:32:2b:26:35:1c:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jun 8 04:01:07 2025 GMT
Not After : Jun 9 04:01:07 2025 GMT
Subject: CN=4f14268741183c898877afd704191e24016b4a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6c:28:09:36:ce:b6:8f:59:f6:86:f7:1b:67:
3d:cd:e3:3d:f3:c3:ca:7a:cb:6e:e1:64:7e:d3:59:
c0:2f:14:9c:c4:b7:e3:94:1d:bd:9f:f5:91:c8:9d:
e3:8c:e8:1a:04:f4:e2:42:b1:1e:99:ca:11:13:59:
9e:d8:81:87:97:f2:38:33:13:03:85:2d:69:5d:be:
80:0d:7d:db:2f:a8:8c:bb:72:2a:95:fb:ec:3c:50:
bd:67:42:ff:40:69:f4:37:0c:86:94:7e:38:e6:9d:
14:ab:1f:b3:4c:de:ee:db:92:1b:0e:7e:4e:99:6e:
ce:d8:f9:f4:cb:3b:c5:97:66:b3:db:3b:27:d1:86:
07:7d:c9:a8:ce:84:92:81:46:38:04:1d:c0:37:9e:
de:ec:c7:17:59:a9:67:34:06:f9:30:ab:42:89:35:
9e:19:f3:dd:d6:1a:42:d4:8d:da:57:45:2d:79:7b:
28:b8:d2:7a:de:a7:57:77:b3:72:53:81:79:3c:0d:
96:72:90:ff:ad:5e:ed:ce:4b:e0:71:81:2b:d2:60:
2f:18:22:7e:e7:b0:9a:0a:20:7b:70:f2:7c:ab:cc:
ef:13:6a:2f:e3:90:44:b6:c8:42:0a:d9:8a:a0:0c:
8a:3f:b4:a7:6a:3d:b3:c4:e0:76:76:a6:2a:7e:dc:
14:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:14:26:87:41:18:3C:89:88:77:AF:D7:04:19:1E:24:01:6B:4A:6A
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:04:e8:e2:77:ff:4b:81:92:78:8b:99:0e:8b:3d:b4:c1:3c:
3e:5a:a4:57:23:26:9b:33:d6:7a:0c:66:a7:b8:7e:0c:5c:37:
b6:ad:fc:c1:36:46:70:64:bb:e5:81:4c:94:88:f8:4a:ae:cb:
92:d6:a1:f5:a8:ef:2b:39:9f:14:b5:cc:2b:5f:a3:c1:90:6a:
13:1f:ed:be:01:fb:9a:3e:ed:b4:86:67:26:1d:56:bc:51:62:
d5:ce:21:dc:72:df:ab:22:e4:a7:d5:1a:e3:37:0c:39:50:56:
5a:55:75:14:3e:18:f9:44:a4:14:23:70:47:f2:7c:5f:5d:d3:
b4:07:b5:69:2a:29:42:41:5b:09:8e:83:81:8e:4c:50:f2:2a:
59:a8:bc:1f:05:e9:43:89:47:e3:e2:f0:5f:ae:19:12:a6:32:
c1:50:dd:22:03:52:02:24:fc:5b:cb:cb:16:8e:47:d0:81:c6:
58:95:ff:62:07:45:65:03:2b:fc:06:ca:b1:df:5d:10:7c:d7:
c2:12:18:85:c8:10:61:e5:6f:32:f5:cb:e8:2b:d5:57:91:7b:
3a:4c:4e:cb:f9:4e:ee:64:56:f6:66:e9:6e:1e:86:55:10:0a:
ae:ac:ca:0d:92:62:71:23:df:d5:53:dd:0b:1a:5d:37:e9:54:
93:28:aa:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:21 2025 by rpki-client