Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: tk/t3jFLYirUYH6oRdYkkdVgnpsaFIzdsKDiaLcuO/Q=
Subject key identifier: 12:9A:DA:3A:10:94:A6:95:27:A2:83:18:5D:18:F3:AB:05:EA:DA:D3
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019A4DE18474A0CD9ECE35E44023E0C6A9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:16 +0000
Manifest this update: Tue 04 Nov 2025 08:00:16 +0000
Manifest next update: Wed 05 Nov 2025 08:00:16 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: 7igaNkHVv/OnIz5wUEc7vfoqxaSX4YVR1nJIyRboq2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:84:74:a0:cd:9e:ce:35:e4:40:23:e0:c6:a9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Nov 4 08:00:16 2025 GMT
Not After : Nov 5 08:00:16 2025 GMT
Subject: CN=129ada3a1094a69527a283185d18f3ab05eadad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:c4:2b:1d:9d:34:48:73:32:ac:2f:be:ca:
2d:8b:97:9d:c6:f8:a2:11:41:06:b1:8e:d3:c5:6c:
5e:28:45:87:ab:43:f6:b5:58:28:98:e7:f8:c4:62:
75:79:c4:0c:d4:e4:ae:8f:45:21:01:53:f5:fd:27:
9c:84:43:43:75:66:8c:2d:72:1b:01:c0:1a:6f:4a:
e5:6a:cd:bd:e1:34:d0:a1:96:54:8b:f6:ab:27:e0:
87:f2:22:4b:73:7c:c7:f9:42:a5:79:e2:f8:06:e4:
ca:40:0e:fe:3d:69:a9:50:1e:4a:f7:f4:f7:83:4b:
56:42:7b:eb:f0:38:88:45:a0:d8:96:7f:4a:00:31:
71:76:72:5e:6f:df:fd:3d:3f:4c:48:58:69:d6:1a:
aa:c7:2f:cd:79:a7:3b:e9:6b:dc:c1:ed:19:49:1c:
83:f2:61:57:fe:80:6c:0c:49:73:9c:2f:74:0a:7b:
54:58:49:6b:6f:3d:ea:07:91:f3:c1:d5:ad:29:8b:
02:0a:90:84:39:7a:fe:12:01:bf:9f:18:b9:cc:67:
71:e2:cb:61:b0:5f:f0:d3:d1:6a:eb:1b:c2:70:17:
fb:9f:8c:6c:13:7a:e2:71:f9:4f:ab:b4:21:98:36:
3b:d7:5c:20:82:a8:06:3b:3f:b9:87:a4:0b:c2:95:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9A:DA:3A:10:94:A6:95:27:A2:83:18:5D:18:F3:AB:05:EA:DA:D3
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:92:69:e7:0d:35:38:9a:b1:0c:d0:ad:37:b6:f4:59:37:b4:
a6:7d:f2:97:d8:b7:08:b7:f5:80:c0:69:30:3a:2f:51:c3:4e:
92:d5:f6:01:f4:da:f2:3b:5e:2a:3e:6b:10:6b:53:4e:d8:92:
9a:14:6e:ec:5d:cc:28:38:33:16:2f:fa:e3:88:81:67:e3:95:
8b:0c:52:a6:c0:a7:59:05:c9:f7:29:03:c4:fe:14:0e:8e:06:
18:1a:7d:2a:82:7a:4c:f1:f5:f3:ed:85:a0:9d:51:eb:dd:f5:
8b:1f:e8:15:5b:2d:47:c8:cc:4b:98:ad:b0:a1:94:08:84:75:
39:f2:98:bb:a7:e3:14:e6:2e:66:f0:7c:cd:30:c9:cc:39:ae:
58:52:22:46:34:6e:99:4c:89:7a:ef:2f:c2:f3:e3:3a:c5:a8:
d3:b9:e3:0f:ab:d3:37:9a:1f:51:d7:24:53:a6:8d:c1:94:d4:
2a:59:ab:2d:2a:02:a7:64:fa:01:05:47:56:a2:5e:66:b7:7e:
0d:80:e4:d8:bd:77:c2:84:14:56:ff:21:a4:a4:2e:e7:0e:ce:
2c:d2:ac:14:5f:03:78:c0:25:7f:c1:bf:d6:fb:5a:c0:7e:62:
32:6b:1e:76:48:e5:cc:54:e5:a9:71:d4:9a:17:5b:6d:86:b4:
76:42:ae:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:48:05 2025 by rpki-client