Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
File: aGWWsztIwpNd0Sn6xuYdvACBk_8.mft (raw, json)
Hash identifier: 4BkKUcHeF0iONVzZbQQYzCa9xszfDn8+n6UBnjbrsC8=
Subject key identifier: 15:0D:41:EB:EF:5E:5C:A1:80:60:BA:CA:35:DC:7B:C5:A3:E0:23:DF
Authority key identifier: 68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
Certificate issuer: /CN=686596b33b48c2935dd129fac6e61dbc008193ff
Certificate serial: 01976E8730DBDDC6BA98854D27B706FF609A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
Manifest number: 09FC
Signing time: Sat 14 Jun 2025 13:00:42 +0000
Manifest this update: Sat 14 Jun 2025 13:00:42 +0000
Manifest next update: Sun 15 Jun 2025 13:00:42 +0000
Files and hashes: 1: aGWWsztIwpNd0Sn6xuYdvACBk_8.crl (hash: +9MweU0OZeibNSAoJX9Nj+z/JCRjW4QcaXJGmSLEq1Y=)
2: sO327XoAur1DplfvgQUPrjYRerA.roa (hash: Y49ly/oM+VJ0V39d5VwjbL8ksFq63YJHHzGwktv4Jrw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:30:db:dd:c6:ba:98:85:4d:27:b7:06:ff:60:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686596b33b48c2935dd129fac6e61dbc008193ff
Validity
Not Before: Jun 14 13:00:42 2025 GMT
Not After : Jun 15 13:00:42 2025 GMT
Subject: CN=150d41ebef5e5ca18060baca35dc7bc5a3e023df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:b9:cb:aa:b5:b9:b6:3a:ab:c0:62:94:fb:
12:46:85:a2:21:50:3f:d3:0a:65:1a:bf:50:85:42:
55:fb:db:ba:38:0a:b0:68:38:ab:24:10:46:a1:38:
90:53:3d:86:52:a7:bb:20:16:ef:40:be:ac:ad:54:
14:09:2c:7d:b0:a9:ed:39:70:fb:6e:ef:8b:78:ab:
a0:7c:68:98:ac:f3:90:b7:a9:71:ab:d8:f2:e6:81:
ad:a3:60:ff:a3:5b:20:f4:63:99:f8:fa:f9:39:f1:
f3:af:46:af:bb:cd:47:99:e8:26:2b:ad:44:11:42:
b1:2c:00:ac:6d:fe:b5:30:7d:65:24:ee:c7:7f:0d:
4a:bd:07:88:86:7b:a3:02:0d:73:45:f9:ef:61:e7:
0d:0f:df:7d:1b:00:4e:44:a3:4c:35:ed:c6:0b:5c:
a0:dc:af:ae:8c:2e:ed:1a:ef:cb:89:2f:04:ba:09:
0c:e5:b4:2c:f9:de:cf:11:8e:f9:13:19:24:49:44:
b2:83:2d:f6:4b:2c:7c:e1:bc:de:0f:5a:e8:0f:2f:
6f:1d:28:09:0f:52:b1:d6:6f:f8:db:2e:df:82:fe:
2c:3f:2c:60:4a:35:e9:09:8e:85:e8:62:f1:24:ce:
2d:05:03:29:e0:38:ac:e5:8d:d9:6e:be:8f:57:a5:
a5:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0D:41:EB:EF:5E:5C:A1:80:60:BA:CA:35:DC:7B:C5:A3:E0:23:DF
X509v3 Authority Key Identifier:
keyid:68:65:96:B3:3B:48:C2:93:5D:D1:29:FA:C6:E6:1D:BC:00:81:93:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGWWsztIwpNd0Sn6xuYdvACBk_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/c069f1-9f82-4d5a-8631-451cda077d86/1/aGWWsztIwpNd0Sn6xuYdvACBk_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:08:2d:29:ed:64:f9:56:19:53:12:34:90:b1:17:2d:af:d8:
96:ea:6c:8a:b8:d8:44:70:8f:4e:ef:50:0a:83:44:7a:43:09:
80:21:25:4a:f2:58:ae:cb:d0:fb:eb:a9:20:c7:0b:11:d0:2e:
2b:db:b9:4b:df:ce:56:7c:57:ad:99:d8:2e:55:b3:80:33:50:
00:d5:f2:8d:d9:ed:31:78:69:c5:7e:c2:e4:c7:ab:60:cf:68:
2f:08:1d:c5:41:a0:e7:ff:f8:4f:e4:88:f5:c3:bd:dc:24:06:
70:ca:f1:3d:6f:4f:4d:de:6f:0a:89:c6:37:01:d3:4f:9c:c4:
6a:19:be:40:2f:03:c1:b8:20:3a:2a:09:81:fc:89:78:11:ee:
fd:c6:6d:0c:91:48:eb:f3:9e:e3:62:89:fe:ca:e4:56:f6:f5:
f7:af:41:c2:e7:b6:4b:9e:1f:35:6f:09:56:d6:2d:92:ad:d5:
c4:f0:8d:7b:d8:57:40:77:bd:ac:81:36:e0:f9:6c:12:00:99:
b3:11:57:4f:d9:b2:55:ea:ab:4f:9f:fe:8c:51:f1:aa:f3:4b:
5b:7e:cd:cb:e6:82:48:7e:03:38:9d:18:69:52:f9:c9:97:45:
dc:ea:8a:49:51:cd:79:00:4e:82:a9:f9:a9:b2:1d:f2:7c:69:
c1:86:57:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:41:10 2025 by rpki-client