Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
File: AGXxbaYGeD8wH3CKXmtP1f_UMug.mft (raw, json)
Hash identifier: refE5xkQwIpW1wxYygzTqzjFScwlH1HJDAgEHmUCaNM=
Subject key identifier: 96:31:4F:80:8C:9C:78:74:1C:64:1C:E3:B5:6B:65:02:CE:32:E1:75
Authority key identifier: 00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
Certificate issuer: /CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Certificate serial: 0197711A2A01F77F4C7A974FDB206F3FE16D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
Manifest number: 0A2D
Signing time: Sun 15 Jun 2025 01:00:29 +0000
Manifest this update: Sun 15 Jun 2025 01:00:29 +0000
Manifest next update: Mon 16 Jun 2025 01:00:29 +0000
Files and hashes: 1: AGXxbaYGeD8wH3CKXmtP1f_UMug.crl (hash: Z5kA3esQkLd2e/dToR5Wr0RLyFmfZ8RK7KOKjZCXw2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:2a:01:f7:7f:4c:7a:97:4f:db:20:6f:3f:e1:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0065f16da606783f301f708a5e6b4fd5ffd432e8
Validity
Not Before: Jun 15 01:00:29 2025 GMT
Not After : Jun 16 01:00:29 2025 GMT
Subject: CN=96314f808c9c78741c641ce3b56b6502ce32e175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:d9:f1:3b:9e:7b:f5:2c:9a:f8:d0:9a:7a:
49:3e:ab:cf:7c:c5:cd:0c:4f:73:bf:83:a3:49:b7:
53:64:24:7d:b0:e6:ab:b4:41:79:7b:fe:67:3f:78:
7e:52:95:8b:22:7d:b2:d5:b3:ab:6b:de:da:e4:90:
54:48:63:04:a4:4a:d1:5c:e3:29:47:39:57:67:b8:
ee:fa:d5:9a:e7:7b:a8:21:0a:c8:6a:be:6e:b3:1f:
07:f8:16:56:bf:58:1a:3c:d0:5d:4e:dd:21:bb:c4:
f0:48:2f:77:a2:5e:b0:91:7b:6a:d9:aa:31:79:45:
96:fe:50:08:8a:5a:78:ee:74:1c:f2:51:f8:06:c2:
0b:b9:62:2f:38:07:2c:22:1d:6f:f1:46:d9:58:b1:
5e:fe:43:a7:f2:62:8b:31:f5:7f:1a:4b:0a:2c:08:
3e:e9:2a:8c:ed:79:8e:80:12:b7:eb:d1:d3:09:44:
2e:76:12:51:0c:dc:d8:36:e6:7a:fd:64:9b:bf:55:
14:65:c2:d3:b6:1f:26:60:c4:e2:54:7a:a7:4e:2c:
bb:e7:3d:56:f5:94:98:fe:41:02:ed:3b:4c:f6:4f:
1f:7f:37:a3:03:c3:b9:ea:7d:22:b8:71:95:02:69:
27:e7:99:9f:e6:00:fb:44:b2:0d:7c:c2:b7:b9:83:
55:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:31:4F:80:8C:9C:78:74:1C:64:1C:E3:B5:6B:65:02:CE:32:E1:75
X509v3 Authority Key Identifier:
keyid:00:65:F1:6D:A6:06:78:3F:30:1F:70:8A:5E:6B:4F:D5:FF:D4:32:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGXxbaYGeD8wH3CKXmtP1f_UMug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/a441c6-aaa8-4250-a7ec-a4a28bfa488e/1/AGXxbaYGeD8wH3CKXmtP1f_UMug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0c:09:76:20:44:22:33:c9:8c:ff:a6:1e:93:6b:3a:8d:cb:
6e:19:be:8d:48:7f:ef:9d:de:14:d2:c2:f7:1f:be:49:58:9c:
0b:a2:5b:45:58:64:98:38:c1:6a:7d:de:00:db:10:23:04:d7:
37:da:e8:b1:30:c8:b3:59:78:14:7b:71:c3:b3:63:73:21:fc:
e3:7b:b9:b3:94:71:cc:68:65:81:9b:1f:05:80:e3:8b:4a:e1:
5e:f4:f3:f4:c3:95:6e:47:61:06:a0:25:0e:0f:f4:e0:ac:de:
aa:44:aa:df:36:07:58:a0:5e:44:4e:94:e9:68:21:21:69:09:
eb:f2:57:41:af:9c:82:17:8f:a2:09:48:ec:7a:dc:50:12:08:
e2:8c:99:37:66:d3:00:82:d8:e5:b2:9f:6a:ea:08:00:eb:89:
fc:1b:98:c3:d0:11:fa:15:a7:8c:ce:55:e7:c6:f3:47:38:f6:
34:94:77:0b:d7:1b:df:b0:c9:94:e4:a4:0b:bf:08:64:12:fc:
d3:8c:b7:70:49:97:9a:35:74:3f:04:b6:40:8c:fe:1d:cc:15:
22:f8:ff:fb:af:9e:3b:89:66:9a:96:9c:08:64:9f:b1:d3:49:
e7:0a:bb:99:b5:e1:bf:21:56:3d:ba:3b:1f:c5:b6:e1:42:93:
05:25:b1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:51 2025 by rpki-client