Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: EpKO7MIgg2PxBPcP1wWrzjxRcmaoJ0FUgF78QRxkUA8=
Subject key identifier: DB:BF:BC:CB:49:BF:45:A4:F5:35:A8:2B:81:41:BD:7B:DD:A1:34:8C
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019769CEDB1480276D0B860A9EE2585D6F1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0D44
Signing time: Fri 13 Jun 2025 15:00:53 +0000
Manifest this update: Fri 13 Jun 2025 15:00:53 +0000
Manifest next update: Sat 14 Jun 2025 15:00:53 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: A1qRMq/ytKHwmmbkbnyzW0GgfEjerg/SsV7hTaINq2o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:db:14:80:27:6d:0b:86:0a:9e:e2:58:5d:6f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Jun 13 15:00:53 2025 GMT
Not After : Jun 14 15:00:53 2025 GMT
Subject: CN=dbbfbccb49bf45a4f535a82b8141bd7bdda1348c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:92:62:9c:7d:70:e2:35:90:a6:3a:fb:1e:ef:
68:d5:7f:a3:d0:ff:e4:f6:b6:5d:83:b1:9e:40:94:
3e:6a:41:f4:78:68:35:f2:78:67:d5:71:51:6b:9d:
51:96:fb:15:59:be:4c:82:04:c8:44:72:ed:1d:0f:
85:26:38:d3:a4:86:48:27:0a:b2:7c:56:e1:2f:46:
03:df:f0:fe:b4:48:61:82:48:b2:cc:15:a0:1d:63:
f3:c2:3c:3f:5d:08:d8:71:6f:ef:84:27:4b:d9:f8:
1e:a2:8a:91:14:dc:16:36:81:cf:bf:4f:5b:87:bd:
f2:f6:75:31:93:fa:5b:8b:55:fc:ce:e6:8a:e9:c5:
3b:6f:f6:81:b2:e7:52:fd:50:ae:c3:93:a0:a9:35:
8f:4d:e1:3b:c8:3e:96:4f:82:c3:ce:d5:5c:9a:c1:
b1:f3:d6:ce:bb:bf:24:ff:5a:95:75:3b:7f:16:bf:
15:85:16:2f:05:2e:d8:2b:ce:bb:1e:76:4f:71:07:
86:69:40:81:c4:bd:56:6c:bc:7b:b3:7f:1e:db:6c:
e7:85:0b:4d:b3:3e:a8:af:99:c2:da:ac:08:af:32:
44:f3:9d:bf:09:99:a8:46:23:c6:d7:52:2d:ef:bb:
fe:45:e3:d4:06:6e:68:e7:76:b8:3c:15:71:ef:cc:
41:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BF:BC:CB:49:BF:45:A4:F5:35:A8:2B:81:41:BD:7B:DD:A1:34:8C
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:03:9f:9b:98:6c:24:10:cf:e1:8a:7a:74:25:77:ee:21:7d:
ea:89:16:73:4a:f9:a8:13:e5:22:d9:c0:de:b2:61:5a:34:65:
da:d4:8a:b3:0c:7a:44:63:f9:18:1f:3f:90:49:68:11:5a:64:
c3:39:7e:23:58:27:ae:a3:b2:f1:c6:a4:3a:b7:fa:18:61:44:
ef:dc:b3:44:f8:53:43:43:7f:cf:53:65:c0:32:e8:1c:fe:90:
f6:41:96:1d:b0:1a:01:22:3c:db:ff:0a:53:6f:e0:12:c8:b8:
ba:34:59:be:82:35:c7:6b:dd:b3:70:b7:7f:5c:32:cd:19:22:
ad:28:83:22:3f:30:e0:b1:47:ab:83:2e:26:13:56:73:7c:88:
5b:44:d3:05:aa:a3:69:d4:d6:b9:74:0e:df:69:77:b9:e2:98:
5d:ff:22:7c:c3:df:69:01:7c:3b:83:9b:52:64:a3:d8:b2:85:
48:2f:83:d5:29:3e:30:27:c9:07:dc:5c:1d:95:3f:ac:07:ba:
f8:67:0e:82:ba:b3:08:de:41:fd:94:ed:63:a5:0f:75:53:04:
b9:c4:d2:55:83:e1:7e:94:4f:f6:4e:be:e3:25:53:79:dc:19:
60:37:36:62:ee:fa:ad:f0:e7:4b:5b:1d:9a:9c:8d:52:b9:5b:
d4:27:aa:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpztsUgCdtC4YKnuJYXW8fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGM4NjdjOTc5ODcxYzdhZGIwOWY3YzYyMTliYTViMDY0
NTkzMWMwHhcNMjUwNjEzMTUwMDUzWhcNMjUwNjE0MTUwMDUzWjAzMTEwLwYDVQQD
EyhkYmJmYmNjYjQ5YmY0NWE0ZjUzNWE4MmI4MTQxYmQ3YmRkYTEzNDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpJinH1w4jWQpjr7Hu9o1X+j0P/k
9rZdg7GeQJQ+akH0eGg18nhn1XFRa51RlvsVWb5MggTIRHLtHQ+FJjjTpIZIJwqy
fFbhL0YD3/D+tEhhgkiyzBWgHWPzwjw/XQjYcW/vhCdL2fgeooqRFNwWNoHPv09b
h73y9nUxk/pbi1X8zuaK6cU7b/aBsudS/VCuw5OgqTWPTeE7yD6WT4LDztVcmsGx
89bOu78k/1qVdTt/Fr8VhRYvBS7YK867HnZPcQeGaUCBxL1WbLx7s38e22znhQtN
sz6or5nC2qwIrzJE852/CZmoRiPG11It77v+RePUBm5o53a4PBVx78xBkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNu/vMtJv0Wk9TWoK4FBvXvdoTSMMB8GA1UdIwQY
MBaAFGoMhnyXmHHHrbCffGIZulsGRZMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUt
ZTQ1ODYzZWFjMmI0LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUtZTQ1ODYzZWFjMmI0
LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwOfm5hs
JBDP4Yp6dCV37iF96okWc0r5qBPlItnA3rJhWjRl2tSKswx6RGP5GB8/kEloEVpk
wzl+I1gnrqOy8cakOrf6GGFE79yzRPhTQ0N/z1NlwDLoHP6Q9kGWHbAaASI82/8K
U2/gEsi4ujRZvoI1x2vds3C3f1wyzRkirSiDIj8w4LFHq4MuJhNWc3yIW0TTBaqj
adTWuXQO32l3ueKYXf8ifMPfaQF8O4ObUmSj2LKFSC+D1Sk+MCfJB9xcHZU/rAe6
+GcOgrqzCN5B/ZTtY6UPdVMEucTSVYPhfpRP9k6+4yVTedwZYDc2Yu76rfDnS1sd
mpyNUrlb1Ceqrw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:34 2025 by rpki-client