Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: I5VMxbBsWdwYpDSB2/+ywjtv/uwijhfF9Hz5Utg3yiY=
Subject key identifier: 6C:B3:6A:7D:32:8E:DB:B6:15:5D:89:46:E4:64:49:FB:D4:E0:C5:3A
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 01976C9914275A87EED0CF00794506AF9E2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0A5F
Signing time: Sat 14 Jun 2025 04:01:00 +0000
Manifest this update: Sat 14 Jun 2025 04:01:00 +0000
Manifest next update: Sun 15 Jun 2025 04:01:00 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: Q8OYsXX7OvcEdV4zSz3kEkb+DI7enIIRsAXVmW4jQ/A=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:14:27:5a:87:ee:d0:cf:00:79:45:06:af:9e:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Jun 14 04:01:00 2025 GMT
Not After : Jun 15 04:01:00 2025 GMT
Subject: CN=6cb36a7d328edbb6155d8946e46449fbd4e0c53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:5a:b1:44:d8:46:54:52:ac:e6:d8:89:fe:
bd:fa:27:2c:5b:e1:ff:0d:ce:dd:97:d4:49:73:84:
0d:42:d7:2e:c6:12:87:fd:83:65:4d:18:62:68:a1:
e7:96:65:7a:1d:17:23:42:a5:5f:c4:02:09:52:8f:
5d:a5:df:4e:de:c5:e2:f2:b9:db:e3:11:46:64:28:
2d:20:68:f0:a5:02:47:be:de:d2:ac:c3:1f:80:3f:
81:fc:ae:01:92:86:dd:d8:b3:04:69:02:0d:fc:0b:
84:9b:6c:11:7b:ce:17:53:96:50:89:35:73:8d:86:
6e:3b:40:f2:c4:99:d3:55:a5:4d:b1:ac:37:1a:95:
00:f8:7a:37:c9:c7:93:ad:0c:f8:8d:4a:4b:46:56:
eb:5b:2c:c9:a2:c6:2f:78:c6:ef:46:37:04:4d:b1:
d1:0b:1d:54:3e:59:47:c6:27:e9:20:1d:07:b1:ef:
a9:d4:38:05:e2:5d:c9:9a:ae:c4:1b:31:59:6b:95:
e9:38:8c:83:dd:08:b4:bc:b3:61:b5:75:53:a6:ab:
73:4b:b4:d3:13:8a:02:20:60:7d:7c:92:81:57:54:
b2:76:3a:fd:9f:0d:e0:37:18:7c:2d:7b:18:a8:5a:
74:3a:5f:d3:c5:a6:6f:e8:72:ef:bc:8e:45:ab:b7:
d2:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B3:6A:7D:32:8E:DB:B6:15:5D:89:46:E4:64:49:FB:D4:E0:C5:3A
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:4f:5e:92:24:83:3b:ec:fc:9f:8d:4b:f8:68:47:1d:46:e3:
0f:f1:59:ab:9f:78:2f:02:e7:f6:94:25:21:6a:90:7c:cc:71:
e7:da:9c:7f:35:e0:fa:07:1b:4e:1d:5d:f1:05:38:6e:75:eb:
1d:6d:41:ee:f8:57:ad:ce:ff:82:57:41:ab:b4:18:63:7e:2a:
25:6a:28:90:d4:73:0a:a9:0a:67:1e:b6:68:0d:54:22:66:5c:
c3:59:be:9a:c2:48:b3:77:cc:02:d3:80:f5:53:00:53:74:88:
58:f4:19:6d:32:4d:d9:f6:22:3e:cc:31:93:16:5d:94:c4:cc:
33:eb:44:83:78:9a:ca:c0:e6:ab:53:f5:d3:bd:f4:f9:7d:fd:
44:a6:ca:f4:e6:6e:6f:71:00:44:ce:97:0f:14:59:b4:a8:3c:
0a:d8:18:e7:29:ae:d9:fd:b0:69:87:55:06:f0:0f:91:c7:45:
ae:0a:ac:5a:aa:00:00:1f:37:44:a4:ba:d1:29:e5:65:bf:28:
a7:d9:e3:21:ae:49:78:05:e6:8d:07:0e:8a:ab:4e:61:c1:f6:
81:23:15:9a:40:50:51:71:62:97:1f:2a:b9:2b:64:2b:ee:9a:
ad:fd:77:69:88:b7:a8:e5:db:03:1d:05:95:7f:35:16:9a:89:
f3:92:01:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:40 2025 by rpki-client