Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
File: agYc8aPo-IYXhUvTtqza2KukWhw.mft (raw, json)
Hash identifier: vx4udBgQ2Jwc7yti67HEgDKTlB4LhGM7ceq2i6x3i4s=
Subject key identifier: A5:39:31:E4:99:9D:98:B3:40:22:AE:55:AD:D5:0E:F3:90:30:81:DA
Authority key identifier: 6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
Certificate issuer: /CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Certificate serial: 01974BC4A069A5874C981C33F7D3F8C72AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 19:01:06 +0000
Manifest this update: Sat 07 Jun 2025 19:01:06 +0000
Manifest next update: Sun 08 Jun 2025 19:01:06 +0000
Files and hashes: 1: agYc8aPo-IYXhUvTtqza2KukWhw.crl (hash: hg37ISxKvjmkfxyQikuEEO924I+teMaEAIE85w3S7ww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:a0:69:a5:87:4c:98:1c:33:f7:d3:f8:c7:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a061cf1a3e8f88617854bd3b6acdad8aba45a1c
Validity
Not Before: Jun 7 19:01:06 2025 GMT
Not After : Jun 8 19:01:06 2025 GMT
Subject: CN=a53931e4999d98b34022ae55add50ef3903081da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:98:c5:a6:97:d7:e0:ca:a9:ef:fb:8f:db:8a:
f3:2a:a2:86:33:f6:02:7e:d0:7c:96:98:ad:a3:6c:
e9:87:c9:11:4e:08:09:cf:ae:bc:03:51:51:46:f7:
99:69:0f:6d:a4:bb:8f:ce:ab:ba:fe:1c:28:0c:68:
2c:c1:98:ea:99:60:09:0e:35:6b:b0:2a:2f:c4:a2:
26:6b:0a:13:55:e4:17:57:b3:b6:ea:d5:7d:8f:d3:
2c:ca:b7:63:fd:19:df:5a:72:48:9f:82:26:42:b9:
6f:b9:bc:03:f7:d3:f8:c6:c9:fc:7a:8d:dc:af:ce:
85:6b:ef:60:25:18:63:ea:ab:12:40:da:4f:69:6c:
eb:23:cc:9c:4e:42:b9:f7:35:b7:cd:f2:0a:8f:25:
ef:4f:35:8e:cb:68:85:84:0b:b3:17:4a:dc:74:c0:
78:f6:14:25:23:fc:d0:3d:08:93:22:f6:5a:ab:a0:
f6:cd:ae:ff:59:7b:92:e3:39:a6:77:30:85:d9:7f:
34:e3:2b:3e:bf:95:fa:2d:81:22:5c:80:ca:eb:49:
92:5d:ae:39:46:67:1e:2f:08:e7:b0:af:88:b6:b6:
2c:52:24:f1:86:17:fe:6d:07:be:b0:c6:15:61:cb:
63:02:0b:7e:82:43:27:82:c6:30:b9:f5:e4:10:74:
88:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:39:31:E4:99:9D:98:B3:40:22:AE:55:AD:D5:0E:F3:90:30:81:DA
X509v3 Authority Key Identifier:
keyid:6A:06:1C:F1:A3:E8:F8:86:17:85:4B:D3:B6:AC:DA:D8:AB:A4:5A:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agYc8aPo-IYXhUvTtqza2KukWhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/0319db-d1fb-4a0b-8f2d-34e181f13bc9/1/agYc8aPo-IYXhUvTtqza2KukWhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:fa:b4:76:54:81:1d:05:d0:1a:32:b8:b0:1f:1d:7f:c1:7d:
96:8a:73:60:64:74:91:f6:28:a0:ab:64:22:1c:12:e8:66:17:
b8:ba:2d:e7:09:7c:e9:75:d3:a0:4c:e2:42:bc:71:4d:60:a8:
b1:70:7c:9e:7b:74:0d:c8:c8:cf:ec:70:46:86:f8:ac:e5:55:
79:d0:0c:15:47:ff:fd:35:44:c6:bb:d8:6c:51:d8:ea:43:29:
fd:ee:fd:05:4f:d9:2d:b6:11:09:5d:3a:45:24:ad:a7:da:6b:
ae:e7:41:4e:2d:01:ef:1d:f2:e8:e3:b5:ba:42:5f:c1:ec:0b:
24:d3:f2:7d:ad:36:3a:ad:1b:d4:d3:3d:3a:cb:4c:7f:db:6a:
29:7e:1b:b7:0f:7a:a5:dc:69:4f:75:8e:0c:26:fc:eb:24:b0:
50:d5:3f:3b:76:fc:7c:2e:8f:70:03:36:e4:eb:2c:b5:47:38:
9b:ee:f7:24:d5:a8:fd:d7:b7:b0:22:ee:f2:d3:74:4a:68:bc:
46:67:ae:2a:a7:2f:76:1d:38:53:f6:40:9e:c7:3b:1c:46:0d:
75:6f:56:36:75:e7:94:bb:f4:93:48:67:f6:9b:20:ee:dc:c6:
b1:dd:cf:5b:c0:2c:5b:47:c5:02:dc:9c:2e:4d:04:f5:21:c6:
7b:21:17:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:56:17 2025 by rpki-client