Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: z/zzmdmAz0rVadE1OAIhO//YBpfAOxZk5qqSjIxxQPM=
Subject key identifier: 13:57:71:43:13:F7:E3:26:04:97:6D:B8:C2:EF:DE:E9:DF:80:1F:9F
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 01988DD939C8FB1914DFD6E9589CE675D7FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 1625
Signing time: Sat 09 Aug 2025 08:01:20 +0000
Manifest this update: Sat 09 Aug 2025 08:01:20 +0000
Manifest next update: Sun 10 Aug 2025 08:01:20 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: fmD1yt1RaHyGTPkjDcax5uG8PWeqayXuAW4oGEA5GMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:39:c8:fb:19:14:df:d6:e9:58:9c:e6:75:d7:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Aug 9 08:01:20 2025 GMT
Not After : Aug 10 08:01:20 2025 GMT
Subject: CN=1357714313f7e32604976db8c2efdee9df801f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:d6:65:b7:c2:4e:36:d5:1f:90:84:97:79:
2a:26:f1:f9:18:3f:75:0e:43:6b:db:da:ff:4d:45:
1c:7b:a2:63:fb:1c:80:7c:a9:55:a8:eb:ea:1b:46:
82:29:7b:de:17:82:eb:09:5a:bd:73:27:8f:63:d4:
de:eb:b5:d4:23:25:fe:51:eb:79:e2:05:21:44:11:
89:ca:b3:14:33:cd:55:3f:5f:fa:c4:33:01:92:4b:
b8:0e:75:ea:e7:f3:75:b0:4d:56:b3:32:17:9c:c8:
a8:ac:14:c4:b7:f1:a6:60:7c:2d:41:38:ed:8d:40:
73:4c:9e:33:01:b9:97:b9:da:33:a2:f0:a7:7c:8a:
ae:cf:ca:60:bd:26:01:fa:41:3b:a6:da:64:40:20:
bc:c8:58:1c:ca:c4:da:22:5c:db:1f:5f:82:cc:78:
84:86:88:4c:c4:35:d3:5b:68:d9:06:5f:cc:47:da:
74:2d:5b:35:f2:b5:d9:43:d0:9f:2c:2f:89:eb:b5:
97:ba:25:cb:cf:03:f7:7f:e8:c3:40:94:9b:53:cf:
ea:c9:9e:d7:07:67:25:79:0b:b8:b8:09:a7:fd:2c:
91:a6:81:09:3f:4f:4e:a9:cd:08:e6:5c:8e:6c:3d:
ed:21:fc:a4:27:f0:90:07:72:9d:1f:95:5f:0c:34:
db:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:71:43:13:F7:E3:26:04:97:6D:B8:C2:EF:DE:E9:DF:80:1F:9F
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:07:8f:b2:fc:44:ba:0a:6b:c9:26:30:74:1e:5a:19:ef:85:
35:cd:11:9f:f0:fb:e8:17:cc:66:e1:0b:8f:05:80:d2:47:ce:
6b:20:d0:47:ef:6f:5f:83:9c:c5:7f:d1:ee:dc:54:dc:cd:25:
c3:57:27:a2:45:d7:95:fb:37:c4:2b:98:1e:48:ed:f0:7b:a3:
af:96:fa:9d:29:62:13:6f:11:5e:83:cd:79:a6:a4:b5:05:9a:
e0:cd:0f:e6:a6:2d:43:33:b8:84:4f:ce:7b:70:9f:c6:f4:98:
bf:d5:69:f8:c2:84:76:32:a8:0f:3b:ec:c5:b5:b4:80:f0:c2:
50:1c:9a:4b:27:b9:0d:dc:a3:3b:78:a2:ea:41:ea:e3:e6:42:
01:2e:66:8e:b2:61:ac:2c:42:d2:4c:4a:c1:4f:78:28:78:5f:
7e:c6:79:c3:d2:dd:ea:d9:88:66:bb:5b:00:f2:57:8f:c2:dd:
07:01:2a:42:59:69:ee:42:6b:4d:1f:6a:3b:22:7e:32:fe:d1:
62:ba:41:e1:f6:ee:95:11:55:84:75:9d:27:41:41:45:ef:b2:
47:3d:d2:97:60:9e:ea:16:f7:6d:92:18:3e:82:c7:95:f7:ad:
1d:06:19:af:48:c5:13:a0:d8:da:93:87:d0:b3:44:71:df:84:
e1:95:9a:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:35:40 2025 by rpki-client