
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: 1xQAg3fJL6a8cln/bIk1GotKTqxbIe/khbuFY4AQTgQ=
Subject key identifier: E2:13:AF:60:11:B7:DC:26:0E:C0:C9:EB:3D:33:DB:3F:D6:92:D2:E8
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 01976EBE0B94AAFA59CB54C1BA4A85462AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 075A
Signing time: Sat 14 Jun 2025 14:00:37 +0000
Manifest this update: Sat 14 Jun 2025 14:00:37 +0000
Manifest next update: Sun 15 Jun 2025 14:00:37 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: MKJknT2zPA9fL/B7Rn0ONFiBsmJyOUNfzIEkQ/MsWwo=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:0b:94:aa:fa:59:cb:54:c1:ba:4a:85:46:2a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Jun 14 14:00:37 2025 GMT
Not After : Jun 15 14:00:37 2025 GMT
Subject: CN=e213af6011b7dc260ec0c9eb3d33db3fd692d2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:e2:0d:79:46:95:4b:3a:ba:32:97:56:9c:
30:12:d5:80:27:c0:0a:93:ab:02:80:55:6a:32:c9:
43:49:21:f5:bf:3d:02:8a:e9:63:50:d5:db:5c:df:
d5:52:11:05:84:d1:80:4d:10:02:5c:8b:68:8d:f9:
44:db:b5:97:e8:fd:d5:a7:c7:bb:ed:69:6a:21:63:
13:92:09:83:30:be:7a:fb:de:b8:c1:6b:47:60:0c:
67:fd:1e:d6:e5:5b:40:f0:80:c0:c7:ef:37:65:0a:
74:bb:77:50:7f:d1:26:3c:3b:8a:07:ee:99:a6:53:
94:e6:d3:15:b0:7c:8b:79:60:f4:b9:58:42:c3:df:
93:49:0d:52:b4:24:5e:c5:53:83:73:e7:d8:13:29:
b9:5f:39:4d:4a:4b:05:a1:5b:51:fb:88:01:6c:9a:
f2:58:fd:60:c0:98:47:25:4a:79:61:6f:8a:82:8c:
a6:1b:e6:b3:a8:c0:17:b5:2c:1d:85:fe:46:dc:b8:
c9:43:7c:b2:bd:aa:4b:3e:bd:d3:c6:f2:bd:b9:2d:
a8:11:1e:60:34:4f:7a:c8:99:7c:3f:2f:fa:82:2e:
61:f0:05:8c:d6:a5:4f:22:dd:6d:fa:02:6e:7f:04:
6a:e9:28:a4:a0:eb:e3:b5:3c:c1:48:e0:af:61:13:
a1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:13:AF:60:11:B7:DC:26:0E:C0:C9:EB:3D:33:DB:3F:D6:92:D2:E8
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6b:b8:1e:5c:30:41:04:26:21:16:89:d2:d4:40:63:bf:1e:
2c:e3:70:8d:d0:3e:05:3b:7b:81:10:a2:b7:29:ee:57:07:2f:
67:f7:10:78:46:90:42:ab:f8:73:03:7b:30:b8:af:f3:0c:b9:
cd:e3:cd:bf:ab:d9:82:10:86:7a:be:5a:6c:70:25:d0:79:37:
de:52:73:cd:20:a3:92:4f:41:c6:28:70:ec:a9:94:b4:71:50:
96:73:7c:28:02:61:eb:c2:d5:2a:25:3d:61:62:49:54:bc:97:
d4:a5:99:e4:bd:60:b5:a8:c5:8f:de:8c:ab:ed:e2:6f:b2:65:
08:f3:30:d1:b7:f9:28:ce:6a:cf:e2:89:52:12:51:a8:17:d7:
12:c5:d2:3a:6b:72:2e:52:6e:cb:68:51:81:66:db:f1:25:c3:
23:f6:fd:e2:49:6c:74:ed:f9:72:a6:32:76:3d:a2:dc:4f:fb:
33:89:16:c0:3c:4b:47:f0:46:09:68:df:3e:16:93:b6:2c:66:
68:e4:28:09:07:68:25:24:58:da:8f:7d:3a:e1:b7:6a:4c:ff:
f7:db:4a:82:4d:95:12:20:da:42:83:e3:b2:d4:66:95:b6:59:
d7:f0:3b:ff:d6:15:1a:5f:11:cd:ac:d4:a7:92:a9:98:a7:2d:
94:54:5e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:08:11 2025 by rpki-client