Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: 246ub9Yqo3AU1U19ym+xq2nFrjXraew7GURL9pn8yhQ=
Subject key identifier: 69:FC:5A:95:F0:DF:77:7E:0E:53:F6:F7:B0:16:9C:64:4A:1E:26:8B
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 019873745E0A34240DB4C6394BBC9CFBCD3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 07E1
Signing time: Mon 04 Aug 2025 05:01:02 +0000
Manifest this update: Mon 04 Aug 2025 05:01:02 +0000
Manifest next update: Tue 05 Aug 2025 05:01:02 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: Y2qCh5rOqsHpuXZ78vcrcH2O/JH+Tj72qj1hpBjJfok=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:5e:0a:34:24:0d:b4:c6:39:4b:bc:9c:fb:cd:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Aug 4 05:01:02 2025 GMT
Not After : Aug 5 05:01:02 2025 GMT
Subject: CN=69fc5a95f0df777e0e53f6f7b0169c644a1e268b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c4:83:ea:51:2f:0c:e0:35:48:10:b8:fb:fc:
d5:2a:73:74:2d:d4:e0:94:98:0a:21:a1:d1:ff:51:
1b:33:f3:63:7a:17:ef:ae:3c:d7:41:87:8d:81:1b:
73:a2:52:ff:3f:99:9d:de:2d:77:da:6d:70:63:81:
eb:98:03:0d:43:a7:82:1f:11:7d:08:ae:d2:78:f5:
f3:ec:f6:1b:74:07:89:d2:cc:d5:88:43:9b:ef:d9:
d2:e6:b1:03:9d:76:3f:36:f8:7e:b8:38:dd:b7:fd:
66:73:e6:af:39:a5:48:cf:9b:6c:3d:3d:5c:52:5f:
63:79:a1:53:2a:25:b5:75:11:f6:bf:44:54:e6:25:
ea:90:a2:ba:5c:47:a7:37:97:73:03:74:93:c3:b9:
60:bd:9a:cf:0b:09:da:65:fe:43:be:68:cc:0b:5f:
44:34:4a:58:63:2b:5c:87:ee:6f:ec:99:a1:17:e6:
a4:82:59:4e:92:eb:65:d1:7f:7b:c1:62:a1:ed:72:
59:e0:f3:b3:f2:cd:2d:4c:e0:df:97:c0:ee:de:24:
25:d6:9f:d3:58:d4:0c:0c:46:ff:18:3f:7c:bb:ed:
83:7e:a0:a3:a6:cd:99:5c:7e:e4:2c:92:44:ce:21:
4d:23:29:bc:47:4b:79:79:ff:82:c8:e3:cf:74:49:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:5A:95:F0:DF:77:7E:0E:53:F6:F7:B0:16:9C:64:4A:1E:26:8B
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:dc:5f:26:f8:89:3c:71:0a:d6:f9:7d:dc:49:4c:30:99:f9:
c4:29:dc:c5:a9:4e:45:df:87:76:e1:0f:b8:97:8d:ee:c8:13:
96:4f:76:5d:8e:22:6f:c4:7d:aa:5a:0d:94:8a:b7:e6:c4:35:
85:5c:77:7e:6b:aa:48:47:32:dd:63:cb:e7:75:3f:ad:15:ea:
e5:20:d7:db:74:51:d5:19:23:f2:cb:93:af:95:44:a1:73:5f:
8e:fc:7e:35:a6:a3:3c:72:d6:21:0f:95:b7:0c:39:a7:fd:9a:
cb:9d:8f:1c:ce:f6:ca:bd:b7:f8:bc:f7:98:76:51:d6:4e:c3:
40:52:b3:e6:f9:42:36:c9:9b:d2:1b:a9:71:ca:56:6c:77:f4:
c7:03:15:7b:b1:00:6f:e0:68:36:5d:86:03:b9:84:73:a9:a1:
77:06:cb:4f:8b:ca:79:af:91:00:4a:b2:16:ec:ef:da:30:c1:
39:d7:4c:e5:ea:93:44:69:bc:8f:15:ac:b6:85:d4:04:dd:33:
89:d8:cf:47:ca:f9:ce:a2:db:d5:76:2f:15:12:a8:56:a1:fb:
6a:a0:69:82:72:93:7d:d6:92:9b:e4:01:cb:40:65:c2:08:0d:
64:1e:0a:07:66:79:ab:54:ad:b7:50:2d:b5:8d:6d:cb:11:32:
75:23:be:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:12:40 2025 by rpki-client