Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: kOkcl8f1q9CwSuoB04WThPBeewIMeEdfy0/hLJBi1v8=
Subject key identifier: 5D:F7:2B:25:6F:1F:9E:7B:EB:9F:3D:1B:75:F1:7E:76:02:44:65:3E
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0197499EE73CE91D45AA7A80C82248F66A93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0871
Signing time: Sat 07 Jun 2025 09:00:40 +0000
Manifest this update: Sat 07 Jun 2025 09:00:40 +0000
Manifest next update: Sun 08 Jun 2025 09:00:40 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: P0fbSgceSAYrAprOtqCtD+65YNmeBRuVWoxRjMkWujc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:e7:3c:e9:1d:45:aa:7a:80:c8:22:48:f6:6a:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Jun 7 09:00:40 2025 GMT
Not After : Jun 8 09:00:40 2025 GMT
Subject: CN=5df72b256f1f9e7beb9f3d1b75f17e760244653e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7e:e7:96:f7:11:bb:f9:63:ce:37:58:d6:f8:
a5:5c:b4:d2:12:cb:9f:96:9e:77:78:18:ed:fd:0c:
e9:16:f6:c7:f4:5c:49:07:48:1f:08:4f:78:b4:16:
39:ee:4d:56:e9:70:2f:bd:2d:0c:6c:00:a5:bc:6b:
b7:68:8a:ca:9e:25:13:51:dd:1f:01:d9:cb:7d:5c:
9d:3b:6b:d8:b1:63:51:4e:60:42:a4:23:fb:92:62:
fe:1d:f7:b4:d4:0b:ad:ca:76:a2:05:77:bb:30:80:
8d:b9:81:fa:63:a4:ec:6f:28:c6:56:97:52:d7:40:
46:4b:5e:da:79:0b:94:24:d4:6b:17:05:4f:60:e5:
31:51:40:12:67:3c:46:da:0e:a7:5b:39:e6:be:36:
d5:df:b5:0c:8f:ce:f9:4d:49:7d:58:7c:6e:d2:08:
6a:24:0c:ec:c5:d8:c5:f6:ce:b8:9d:8b:b5:1a:ae:
23:a7:ed:7e:74:67:76:7d:6a:d4:20:ec:8c:6d:db:
ba:23:47:fb:01:5e:a4:e9:4e:a2:9d:a6:9a:4f:59:
ee:80:c1:1c:fe:26:be:dc:45:28:a7:84:a6:bc:13:
25:25:93:e9:70:8f:48:19:75:47:04:4d:6a:08:cd:
a9:c5:ee:e9:5b:89:7c:dc:eb:38:c0:ea:9f:6f:7f:
79:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:F7:2B:25:6F:1F:9E:7B:EB:9F:3D:1B:75:F1:7E:76:02:44:65:3E
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ac:c9:c3:ef:a5:0c:85:3f:5a:5f:af:24:4d:01:25:78:1a:
5c:21:e3:6e:4c:7f:19:68:e8:4b:f6:29:47:35:c8:74:93:e3:
31:0b:be:a5:b0:43:69:e0:44:21:94:9e:23:0a:63:52:74:f5:
12:93:0a:de:89:57:78:18:74:94:f3:34:5e:aa:ce:e8:e6:91:
e5:9c:83:93:95:93:dc:45:05:d4:6d:37:f9:60:36:5f:9c:08:
f2:5f:dc:70:8e:2a:97:46:ab:e1:7e:3d:58:17:0c:db:bb:67:
6a:3d:f8:5d:3c:ec:79:f5:0b:73:e5:9c:3e:f7:ea:13:5d:92:
81:0d:bf:85:86:ef:12:99:9e:1e:a9:08:64:d8:65:f0:fd:d3:
26:55:13:e3:c4:d9:8d:b1:4a:f2:56:1c:67:ad:9d:15:38:2c:
dc:60:b0:90:a7:e1:95:cc:47:f7:3b:7b:fa:06:27:2b:6d:32:
ad:03:6d:9f:d6:93:15:a9:12:30:da:fc:c5:aa:3b:69:db:3f:
b5:d6:84:b8:d9:5c:38:fc:fb:3e:1f:65:e6:f1:3d:41:e6:20:
95:c5:5b:ae:78:f9:41:28:df:43:8a:f5:4a:e3:3a:15:3e:04:
9a:fa:b2:32:e4:e8:52:6d:b5:71:9c:eb:97:e9:ec:e8:5c:a1:
34:94:e0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:29:24 2025 by rpki-client