Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
File: IMfqxFyNu15e_dZcGIFEmGA_Agk.mft (raw, json)
Hash identifier: n/EzJt2PZn56CWWe7Hlu613kbcobyE2xepBho7KGFp8=
Subject key identifier: 86:99:C7:34:6D:12:09:F4:58:AF:6E:08:1D:D4:9C:4D:6E:22:88:A3
Authority key identifier: 20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
Certificate issuer: /CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Certificate serial: 01987ED388027A911E0FD2B4FDA04D6B24EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
Manifest number: 0AED
Signing time: Wed 06 Aug 2025 10:00:48 +0000
Manifest this update: Wed 06 Aug 2025 10:00:48 +0000
Manifest next update: Thu 07 Aug 2025 10:00:48 +0000
Files and hashes: 1: IMfqxFyNu15e_dZcGIFEmGA_Agk.crl (hash: /jiGRl03Z25EyCelEWDpUU/xgj3N2Fz4Po7FoBdnPfQ=)
2: fJsTGq6uakoiJ0dwxu_7stP0qrM.roa (hash: MoPxKioiLed+eXmn0AgedAbSRVyzh3BZ35NDQ3cs6II=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d3:88:02:7a:91:1e:0f:d2:b4:fd:a0:4d:6b:24:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c7eac45c8dbb5e5efdd65c18814498603f0209
Validity
Not Before: Aug 6 10:00:48 2025 GMT
Not After : Aug 7 10:00:48 2025 GMT
Subject: CN=8699c7346d1209f458af6e081dd49c4d6e2288a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:72:3f:92:45:15:5c:8d:7f:36:9b:99:a4:
57:f3:82:41:37:19:e0:e0:c9:2a:88:2d:be:b8:37:
a4:bd:c1:69:7f:eb:e1:e1:77:0a:01:8b:f4:56:d9:
a2:42:55:01:7f:c1:48:06:a3:ca:92:b1:5b:1d:47:
1f:1d:28:42:c1:1b:9c:eb:34:ad:97:be:7a:ee:c5:
58:e5:95:92:f4:c9:ac:47:13:ad:d9:3b:c7:1a:69:
d5:67:df:4c:66:eb:b4:91:0a:04:4b:cf:33:90:c7:
45:a0:4b:1f:d0:44:36:90:c1:c2:44:7d:7f:b0:78:
b9:ec:a4:1b:d0:8e:6c:5b:e2:49:dd:d5:16:2d:26:
b5:76:97:6f:61:62:17:9a:72:1a:a3:8d:f3:cb:8f:
b5:a9:db:b5:3d:9c:a6:8d:f5:99:25:60:52:57:ca:
9c:31:22:bb:5c:1d:09:c2:af:9c:43:f7:36:ee:b7:
ec:7c:f1:eb:11:fa:22:c6:81:ec:b8:95:63:5f:be:
89:05:dc:73:64:7e:bf:a3:5e:ec:2d:a4:6d:c8:26:
7a:6f:0d:d8:21:5a:a0:9e:5c:38:2f:10:66:6e:03:
8b:c9:ce:95:55:4b:1c:d8:ae:73:30:c1:85:5f:40:
58:11:d9:33:bb:43:cc:87:ba:d9:af:1a:6a:bd:60:
ea:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:C7:34:6D:12:09:F4:58:AF:6E:08:1D:D4:9C:4D:6E:22:88:A3
X509v3 Authority Key Identifier:
keyid:20:C7:EA:C4:5C:8D:BB:5E:5E:FD:D6:5C:18:81:44:98:60:3F:02:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMfqxFyNu15e_dZcGIFEmGA_Agk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/c5e498-c895-4354-be85-704eab6ca3e8/1/IMfqxFyNu15e_dZcGIFEmGA_Agk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ff:07:3a:25:bb:d0:a0:4b:c0:7b:b5:67:3b:91:80:bd:0b:
8d:8f:36:6a:56:58:87:a3:3d:ed:17:0d:38:8b:d7:cf:80:a2:
7f:bd:ec:20:40:c6:39:f2:f6:e6:f9:60:4c:73:86:52:83:5d:
45:e5:62:42:c2:31:2f:88:ae:10:2a:63:d7:b7:3a:c7:70:f3:
ba:6a:6c:ec:68:cd:bf:2a:5d:f6:36:c1:4c:67:4e:6d:ca:30:
27:50:43:88:10:d5:43:c4:2b:56:1c:b5:46:09:27:86:90:2b:
c4:68:50:f8:07:ec:bd:4e:2f:3f:33:1d:6c:e0:6d:d3:a8:cb:
40:96:07:07:b0:7d:79:af:23:1a:24:b5:1b:6b:36:28:ae:e1:
0b:db:03:7f:6a:21:22:d0:ea:de:c1:be:a8:ef:95:e3:c7:7f:
ba:1e:b0:d4:ef:a2:f2:e1:e1:90:2a:a3:87:16:f4:96:7b:88:
a9:e0:7b:3b:93:52:2a:3c:15:01:7e:e2:cc:63:f6:e4:84:98:
c7:1c:9d:8f:56:b7:33:f5:7c:aa:ec:03:7c:75:cd:0e:ae:28:
98:86:01:4a:d8:ba:0d:74:b0:46:df:97:f2:0e:73:ff:c5:7f:
27:80:ef:e4:e7:4f:78:ec:2e:0e:cc:7e:38:1a:b0:d4:3a:17:
cf:9a:fc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:40 2025 by rpki-client