Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: rbr5krG8epd9HeHKspxOrDRXdGk5ivt1Uzgf0L1vpys=
Subject key identifier: C2:73:0C:07:D7:8E:41:A4:CC:07:25:DD:E1:60:E1:33:06:EA:AD:00
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 0198960029AE8540B9F12C7E672F26FFA517
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 145D
Signing time: Sun 10 Aug 2025 22:00:49 +0000
Manifest this update: Sun 10 Aug 2025 22:00:49 +0000
Manifest next update: Mon 11 Aug 2025 22:00:49 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: dgaCXg5i0IZpJG6mR14/bFDMu36MI0/+RFX4plp0yI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:00:29:ae:85:40:b9:f1:2c:7e:67:2f:26:ff:a5:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Aug 10 22:00:49 2025 GMT
Not After : Aug 11 22:00:49 2025 GMT
Subject: CN=c2730c07d78e41a4cc0725dde160e13306eaad00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:57:57:6d:84:bd:db:a0:3e:89:58:55:d9:
20:9b:9c:3e:42:b8:57:5c:8c:f1:9b:61:55:f7:9a:
a1:d2:b5:d2:0c:d7:82:92:fd:00:33:7d:50:f2:d2:
c5:bc:55:f5:3a:da:5a:21:b0:db:1f:5c:a0:05:2a:
9c:85:c3:38:0a:f7:1c:a4:91:d6:b3:f8:63:02:d1:
f1:ee:d2:f7:42:5f:48:ee:78:db:08:f2:c9:f2:07:
a9:53:4a:b5:6d:bb:88:f3:55:65:ff:e2:c6:00:29:
fe:55:08:73:7f:4f:08:bd:b3:8a:71:01:6e:0b:31:
1c:2f:7f:14:67:7f:cf:43:79:67:26:8e:99:03:36:
dc:10:0a:91:df:59:07:df:18:3e:aa:fe:5d:64:51:
1a:0c:0f:9b:3b:7a:9b:7e:1d:de:04:4e:d1:79:9a:
c7:88:d2:a5:f3:ab:ec:b0:42:7d:69:2d:50:eb:e3:
ce:60:53:af:5f:d6:4b:d8:ec:9b:8d:d5:9c:6e:d7:
4d:00:ec:21:c4:71:a1:be:40:b5:da:62:97:b7:9f:
5d:ac:cd:5c:1c:a7:d7:12:ff:94:09:1d:b8:b3:3e:
2f:03:5b:86:5e:d1:30:70:4a:8d:cd:7d:9f:dd:8b:
25:cf:1c:c4:d9:44:d0:c9:20:df:9d:49:a6:e3:85:
7f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:73:0C:07:D7:8E:41:A4:CC:07:25:DD:E1:60:E1:33:06:EA:AD:00
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:c0:b5:95:9a:3d:c0:9c:4e:e1:32:5d:05:4f:06:3a:47:e2:
81:f1:dc:2f:f9:be:5a:be:19:84:c1:8b:ce:62:12:8c:34:87:
86:4f:42:60:85:20:4e:ff:16:6a:76:87:2b:e7:ee:ec:41:4f:
6a:03:de:de:9c:29:7f:c5:6c:86:28:51:e1:f5:22:9b:70:99:
85:6c:51:95:90:b1:06:f5:6c:69:76:a9:13:30:81:fd:9e:46:
32:c9:6f:51:8e:a5:06:8e:da:f9:00:fb:ef:a2:09:62:a0:47:
06:ae:84:20:dd:69:73:f6:55:b5:6f:de:eb:5b:92:28:32:64:
de:04:23:93:a8:b3:15:42:ee:3d:f2:9c:46:48:07:43:1b:83:
b8:e9:42:af:07:ca:53:a8:d7:91:2e:77:65:fc:4d:9f:78:bd:
7c:95:a7:fa:59:ef:21:fe:6b:2f:9f:19:fe:09:53:9a:88:90:
0f:68:de:ec:1d:ec:02:ef:fa:a9:38:cd:ed:64:04:c0:8a:72:
27:c8:fe:09:5d:05:5f:59:8c:f0:c3:ad:2e:06:43:43:01:43:
ae:5a:1f:cb:e1:6b:6b:44:47:52:7d:46:11:55:0e:4b:5c:cd:
09:12:f6:f8:b2:eb:97:72:22:1e:b8:29:0d:92:0a:23:d2:d0:
e5:57:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:22:08 2025 by rpki-client