Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: 61OBwE7D0TzM0kXRZEpQPTJY4Qqx3VATFSlodVHpyAg=
Subject key identifier: 9B:73:3A:E1:CE:4C:D4:99:46:0D:F4:9C:A2:14:23:86:69:4F:04:0D
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 01976D3E64F83F5BF6AFEB7D0A8BA6C99089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:01:34 +0000
Manifest this update: Sat 14 Jun 2025 07:01:34 +0000
Manifest next update: Sun 15 Jun 2025 07:01:34 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: roYG7cRvP/IBRQOIBO52Hz1vVX6llgLUgX6pGXXSiJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:64:f8:3f:5b:f6:af:eb:7d:0a:8b:a6:c9:90:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Jun 14 07:01:34 2025 GMT
Not After : Jun 15 07:01:34 2025 GMT
Subject: CN=9b733ae1ce4cd499460df49ca2142386694f040d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4a:29:38:48:e1:6f:93:83:64:fa:28:1e:98:
63:4d:19:c2:3a:ae:69:33:bf:40:06:12:3a:e3:fc:
32:11:3e:0e:2b:f7:c6:75:fd:c5:fe:fd:53:93:ff:
a1:b2:b0:38:ae:c6:4b:49:a6:e4:fe:53:53:cd:35:
d4:0d:9e:9b:d5:40:ff:0a:59:b8:39:e9:89:7e:95:
17:4c:1c:06:ad:f3:69:14:1a:f0:6b:f3:d9:c5:90:
b8:c2:64:36:cd:81:dd:18:ef:ef:cf:67:1c:71:33:
3c:28:7f:44:aa:02:b6:b7:bd:84:51:c2:04:ff:23:
78:c0:e7:7d:07:a9:b8:0a:c8:b3:2a:b0:06:2f:1e:
3a:c0:3d:4d:1f:1c:4e:b3:98:ea:b1:3a:2d:ef:10:
39:fa:85:c4:03:55:4a:5a:13:ff:81:16:33:5b:b8:
cd:27:ee:53:36:f1:01:d8:33:04:5b:9e:72:cc:03:
f1:b5:62:5a:f8:4e:84:30:7a:74:5f:fc:cb:00:cc:
56:18:29:66:57:7b:ba:b9:e5:3a:af:eb:5d:fc:f1:
6c:4d:99:bf:34:00:bb:f2:2d:29:c9:22:61:06:c3:
50:71:86:47:bd:c7:b2:24:34:25:b5:8c:6a:6d:fb:
02:c3:a7:a6:a6:27:88:34:aa:73:dd:58:96:52:0d:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:73:3A:E1:CE:4C:D4:99:46:0D:F4:9C:A2:14:23:86:69:4F:04:0D
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:58:47:17:f5:f4:0e:0d:3d:20:fb:b6:85:ce:4a:c6:17:5e:
6e:f3:68:44:44:d8:8c:64:43:51:2f:08:b2:87:ee:13:c3:2a:
5a:44:9a:f6:2e:43:f3:33:42:99:f3:db:73:d7:38:67:c4:61:
61:98:1b:5c:a9:67:60:7e:0f:d9:a6:f0:56:35:bf:ac:3c:65:
65:df:7d:b2:85:be:14:60:2f:2b:ba:17:48:46:bf:3d:81:b2:
98:7b:5b:64:33:60:59:bc:6f:f4:a1:7e:b9:aa:14:1b:7f:1f:
5b:f6:45:dd:31:11:c5:01:a9:c0:9b:d4:3e:65:45:7a:e7:5c:
32:5a:ec:33:80:2c:12:6f:f2:56:d1:dc:37:8c:e5:c3:1a:56:
75:da:c2:b8:c9:e3:92:9d:3f:0b:c1:a2:9e:6b:99:1b:88:28:
fb:8b:3d:ed:55:d3:16:7e:48:2c:8f:49:a4:ab:21:33:1a:6a:
84:b0:85:13:78:54:eb:b2:27:a1:18:7a:6d:bd:45:8d:98:cf:
a4:d4:1b:c0:46:fd:93:da:de:b3:ad:c2:87:86:23:e3:38:d5:
0b:a6:51:38:42:f8:62:80:1e:ea:bb:c6:7e:c2:fc:11:68:ee:
7a:9d:8f:12:26:57:13:fe:31:cc:6f:42:6a:bf:78:88:66:35:
72:23:bc:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:48:48 2025 by rpki-client