Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
File: AguJY5thIAOqgSvktlIbVnhFao4.mft (raw, json)
Hash identifier: g3/9e+pkq5V3/hPpKDVlgB7QMTyiGJD1ae6fASpIOTQ=
Subject key identifier: 6B:09:65:38:5C:B6:2B:58:CD:6D:EE:CB:20:B4:E2:3F:9F:64:D7:4D
Authority key identifier: 02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
Certificate issuer: /CN=020b89639b612003aa812be4b6521b5678456a8e
Certificate serial: 01989FDEBD321938256ECA56158090EAC741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
Manifest number: 038F
Signing time: Tue 12 Aug 2025 20:00:30 +0000
Manifest this update: Tue 12 Aug 2025 20:00:30 +0000
Manifest next update: Wed 13 Aug 2025 20:00:30 +0000
Files and hashes: 1: AguJY5thIAOqgSvktlIbVnhFao4.crl (hash: bzm/FX1+ufpzK2zh4eUjdxywTXbYWutnJuC31p63VQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:bd:32:19:38:25:6e:ca:56:15:80:90:ea:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=020b89639b612003aa812be4b6521b5678456a8e
Validity
Not Before: Aug 12 20:00:30 2025 GMT
Not After : Aug 13 20:00:30 2025 GMT
Subject: CN=6b0965385cb62b58cd6deecb20b4e23f9f64d74d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:18:bb:21:74:61:1c:cb:7e:6b:10:6d:a9:e9:
e9:ce:f5:52:42:b1:28:d4:76:2c:af:20:e1:ed:94:
7b:62:de:3b:66:9e:37:fd:cf:f5:32:0b:b1:0c:06:
bf:f4:63:8b:99:e2:01:24:81:51:8a:32:d3:43:a2:
25:b3:47:11:8f:26:0b:15:61:a9:9e:2b:3d:88:15:
f5:15:8e:f5:2b:32:7b:0a:28:7e:4f:e1:43:f9:0f:
5f:8e:f8:57:c6:f9:4d:18:ad:c7:8c:32:e5:38:08:
4b:6a:1c:25:2c:ed:be:70:a5:5b:f1:89:53:60:cd:
9c:1c:db:95:46:87:25:4e:0b:94:76:c4:3b:60:97:
5c:af:4b:6b:33:1e:b9:1d:da:66:05:71:09:0a:01:
fc:2a:3e:40:d1:e2:9d:b4:85:26:24:a4:f4:53:ea:
a9:a8:e0:49:d8:72:d3:54:dd:a9:75:70:b6:21:95:
52:f3:81:eb:8b:a7:6d:2a:8c:ea:10:ff:3b:da:ad:
a7:41:a7:65:a9:2e:5f:10:b0:84:b2:7c:86:18:06:
a5:79:48:e3:6f:e4:dc:73:cc:1c:cb:82:b1:32:87:
44:cf:a9:d2:07:dc:66:9b:49:c5:81:20:ca:b0:fd:
a0:4c:4e:1f:68:c9:97:a0:5b:c6:6a:95:af:bb:77:
88:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:09:65:38:5C:B6:2B:58:CD:6D:EE:CB:20:B4:E2:3F:9F:64:D7:4D
X509v3 Authority Key Identifier:
keyid:02:0B:89:63:9B:61:20:03:AA:81:2B:E4:B6:52:1B:56:78:45:6A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AguJY5thIAOqgSvktlIbVnhFao4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77e9c5-abc2-4c39-b502-ebf329e96846/1/AguJY5thIAOqgSvktlIbVnhFao4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a0:27:9b:05:43:67:55:53:75:22:91:f5:1e:d3:ae:88:0a:
b2:89:53:18:47:e1:73:0e:21:59:f0:0c:60:f9:1d:9c:6e:38:
93:10:91:b9:f0:9b:cc:ed:9e:2a:88:1f:5b:0b:d1:0f:2c:14:
7c:cc:30:41:76:17:95:11:a4:32:40:77:96:cc:10:f0:ec:c3:
66:92:a0:9b:78:d7:c3:aa:f9:74:a3:47:2a:a8:ee:ab:98:a7:
44:aa:b9:76:7d:f9:3d:52:61:c1:c8:8c:94:4a:c4:f2:4e:7a:
17:bf:78:96:fd:6c:f9:1c:7d:00:89:6a:d6:ba:c4:fe:04:34:
73:a2:07:2a:37:14:74:9d:f2:18:53:66:ea:2e:16:65:80:af:
08:e6:2d:52:7d:aa:da:ed:ce:ee:e7:c1:c8:3a:45:50:58:0d:
d9:aa:d1:47:ce:f3:07:7b:af:b1:1a:7c:24:31:56:41:f1:88:
3a:18:4c:18:ab:7b:de:42:a5:9b:cd:29:37:0d:0b:f7:d7:7a:
cf:9a:1e:e1:ed:45:b8:43:4b:b7:a2:82:0a:14:70:87:b0:37:
64:1f:a7:c8:8f:22:1c:25:43:94:a4:f0:47:35:88:bc:9b:3a:
9d:78:01:a3:4a:e9:66:26:88:2a:47:be:3a:12:f4:a5:23:cb:
0f:85:eb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:56 2025 by rpki-client