Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
File: agPhC26juPNiz7I671icd3cefso.mft (raw, json)
Hash identifier: tW9AXPLfaSikH5lEyrMtSMNDw4qctFu3+BwL5ImGWQY=
Subject key identifier: 2A:E5:4F:00:F0:01:AA:8C:78:24:1C:2F:27:04:36:45:67:7B:D1:2D
Authority key identifier: 6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
Certificate issuer: /CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Certificate serial: 01974E8E66358BEE359378F05E6D1556308C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
Manifest number: 0779
Signing time: Sun 08 Jun 2025 08:00:44 +0000
Manifest this update: Sun 08 Jun 2025 08:00:44 +0000
Manifest next update: Mon 09 Jun 2025 08:00:44 +0000
Files and hashes: 1: 2vSSEUGyoECcbr-T4y2ubbHraKg.roa (hash: B7WLa2ysTg94FsBb1jS1WwKUUvVr7kQqcY57g1dK/4s=)
2: agPhC26juPNiz7I671icd3cefso.crl (hash: 1ALgPdDtcT0aKj4qwhEetltxYDczJNScaB1UVZG3tA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:66:35:8b:ee:35:93:78:f0:5e:6d:15:56:30:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a03e10b6ea3b8f362cfb23aef589c77771e7eca
Validity
Not Before: Jun 8 08:00:44 2025 GMT
Not After : Jun 9 08:00:44 2025 GMT
Subject: CN=2ae54f00f001aa8c78241c2f27043645677bd12d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0c:0b:f1:08:2c:5f:4a:61:fa:a9:77:d0:a4:
9f:71:12:99:9a:69:85:b8:4b:9f:7a:93:5d:d7:d8:
e5:90:f1:1f:fe:94:38:50:d0:89:fc:6c:d2:9f:b8:
45:c2:ea:a2:b2:6d:d4:6c:22:ee:02:cd:02:da:7b:
13:d3:b3:6c:61:a3:22:eb:bd:6e:52:d5:ef:44:d1:
d1:e2:5e:76:e3:7b:33:ec:e2:64:4f:4e:ec:e3:43:
ec:9f:d9:2c:9d:2f:8e:0f:65:47:ae:c6:f5:d2:0c:
4c:dc:e7:79:62:03:5a:a6:49:1c:88:fc:e2:a0:07:
2c:ba:67:70:9d:f3:7c:8d:67:ff:fe:70:d0:4c:37:
e4:d3:05:7c:72:ee:d3:25:22:0f:71:aa:75:b8:db:
92:ae:36:f2:c7:22:e2:9c:55:3f:66:8a:8b:f6:58:
f6:d2:46:cd:4a:fa:60:94:bd:bd:57:35:03:6d:ae:
c9:57:df:70:c4:5e:ef:cf:08:4e:d7:77:20:49:ce:
fb:0f:39:63:27:32:ea:e0:08:22:3f:e4:4b:4e:61:
de:04:9a:c5:10:13:93:a9:02:41:aa:2a:d8:77:57:
a5:34:ba:b2:eb:63:1b:76:3e:e0:f7:0c:7d:e1:37:
f5:52:cb:2f:87:ff:a4:6b:01:96:5b:20:a5:f1:74:
ea:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:E5:4F:00:F0:01:AA:8C:78:24:1C:2F:27:04:36:45:67:7B:D1:2D
X509v3 Authority Key Identifier:
keyid:6A:03:E1:0B:6E:A3:B8:F3:62:CF:B2:3A:EF:58:9C:77:77:1E:7E:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agPhC26juPNiz7I671icd3cefso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/757eae-f439-4c50-969c-5b6d7bcf8081/1/agPhC26juPNiz7I671icd3cefso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:5b:15:96:ad:d7:26:13:46:59:ca:9f:29:00:7e:f5:f4:
8a:35:5e:56:6b:b7:e3:28:f0:56:8f:0f:7e:2f:55:1a:4d:95:
05:49:2e:fa:0d:6b:59:05:2a:23:77:bd:ab:a6:55:8b:1d:e3:
c8:51:78:db:05:fa:8d:d1:e2:ed:03:9a:88:34:e4:85:f7:ef:
21:3f:80:e1:4c:3a:04:f8:72:fc:54:85:90:2c:3a:5d:bd:9f:
71:3e:c0:94:1b:c6:48:3d:59:7b:b9:26:b8:18:37:c1:5f:4b:
0f:fa:37:79:7b:2e:de:ef:15:5a:7a:e9:e9:3b:de:d6:95:76:
48:3a:d9:da:38:da:05:24:33:49:53:2b:00:d3:32:d5:04:d8:
fb:51:07:a4:0f:5d:0a:05:93:95:51:4a:3f:97:b7:7a:e7:1c:
15:d5:ef:29:6d:e0:a6:38:57:7a:d0:3b:15:59:93:9b:44:ac:
71:95:cb:bb:6d:94:d3:ec:b2:f7:48:2e:e4:59:b2:d8:41:a8:
9b:f7:05:9e:eb:27:b7:10:f5:98:f0:81:4c:81:a5:f1:e5:07:
8f:0c:71:c4:f4:d1:73:53:54:96:aa:00:4e:67:5e:91:f0:71:
db:44:90:be:34:62:2f:fa:83:37:26:07:a4:b2:e2:ad:cd:cd:
3b:eb:92:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 10:48:58 2025 by rpki-client