Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: iz/AziaHythuKTmnxgWUOFnV2BnG9j3CW/qW9huuqQA=
Subject key identifier: 18:27:08:13:76:DB:62:37:FF:FB:4F:22:90:96:FA:A5:4B:8A:F3:A4
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 019922FABEDE26FB0AF05C228A46076BFF49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 14A6
Signing time: Sun 07 Sep 2025 07:01:22 +0000
Manifest this update: Sun 07 Sep 2025 07:01:22 +0000
Manifest next update: Mon 08 Sep 2025 07:01:22 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: JXhnymg0aiu2NAS26xwa0m6HpC/E63qEorV+eA2OYmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:be:de:26:fb:0a:f0:5c:22:8a:46:07:6b:ff:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Sep 7 07:01:22 2025 GMT
Not After : Sep 8 07:01:22 2025 GMT
Subject: CN=1827081376db6237fffb4f229096faa54b8af3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:1d:a5:99:fc:a6:32:5b:68:95:8c:b7:3b:
88:c8:b1:a9:d0:c4:17:4f:ec:bd:3c:f8:09:e1:b3:
1e:db:67:13:33:01:23:4b:e9:b9:33:45:eb:7f:c3:
53:92:94:2d:f4:44:7a:11:b2:17:84:20:90:3e:a4:
c0:3b:94:2b:e1:ab:a8:c1:1f:53:5b:24:01:f8:ce:
56:a2:80:b0:a5:6e:c6:f0:6f:47:2a:8f:30:e4:84:
e2:73:4b:d5:37:5b:da:6f:8c:a2:4b:ca:ff:b6:c3:
33:55:94:73:20:83:79:fa:ca:3a:9a:2b:91:ac:88:
7e:83:7e:3d:ee:af:96:2c:ee:63:24:22:b1:f5:a4:
a7:32:42:e4:80:e6:60:8a:0e:78:c4:7a:95:83:d8:
92:3d:a1:e7:73:65:5d:b7:3f:0e:85:35:16:d2:cf:
88:fb:e9:bd:c6:eb:96:17:8e:21:79:4b:b7:94:f6:
9a:ca:45:75:52:e2:03:fd:c9:50:6f:cc:3d:a1:27:
87:9a:35:88:2d:65:fa:02:23:d8:ee:06:78:1a:74:
5a:ba:18:3e:ea:74:51:8e:50:60:0e:6d:ca:dd:b3:
55:f3:a0:4e:fe:bc:86:35:bd:32:b4:0e:cc:b0:7d:
27:55:7f:8c:ff:0e:b3:f6:86:25:f5:cc:b3:c7:95:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:27:08:13:76:DB:62:37:FF:FB:4F:22:90:96:FA:A5:4B:8A:F3:A4
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:99:aa:21:d7:af:a7:5e:20:c8:11:3d:9a:8a:f5:ff:c3:04:
f8:95:78:32:f6:62:ba:a7:b2:27:9c:2c:f0:91:52:13:c7:83:
6b:b5:2d:3a:80:f7:81:5f:79:19:08:d8:0f:50:fd:a9:7d:27:
ac:60:83:0f:b6:b2:78:0d:b6:d6:af:c1:6d:f6:c0:3f:0c:39:
54:3f:9c:42:d2:2e:b6:21:34:a7:5b:85:4e:25:27:8d:78:49:
c3:14:41:ce:01:85:b5:56:ea:c6:5b:7c:a4:f2:d3:49:f8:44:
47:22:d6:71:54:42:d1:21:83:5a:a5:10:07:f2:a3:42:6e:79:
08:38:07:cb:13:70:c0:b7:63:09:70:09:27:03:96:12:b8:3b:
99:3b:18:46:a9:01:0a:43:99:20:26:49:5d:d0:b3:f3:00:f1:
56:40:23:21:e6:1f:c8:fa:d8:da:fc:fa:8e:95:fb:ad:11:d8:
f1:67:a5:dd:7d:6a:ac:ac:08:e5:7e:c2:3c:52:30:02:7d:54:
f1:e6:e1:ff:d9:6b:af:21:95:e2:87:bd:e3:01:8a:90:02:54:
18:68:77:19:71:6e:71:95:36:44:e2:89:30:73:ae:da:ae:5a:
4c:4a:f8:7a:86:a7:5a:bf:95:20:5f:16:31:5b:d4:9a:01:ca:
3e:f1:68:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:10 2025 by rpki-client