Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: 6pNfXCHo4CuipVLeUVwYa9guL/ZZkIbGVsQbO1Po6bc=
Subject key identifier: 25:01:BB:0C:CA:0F:90:AD:C2:48:1C:2F:B6:28:23:F5:ED:1D:39:F5
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 019A503E321C93C7941146F013253A18F19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0A40
Signing time: Tue 04 Nov 2025 19:00:44 +0000
Manifest this update: Tue 04 Nov 2025 19:00:44 +0000
Manifest next update: Wed 05 Nov 2025 19:00:44 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: tWPLQPguyrV9138Md0RJvVQe12F7Ru8ubSQRm2H6BYI=)
2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:49:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:3e:32:1c:93:c7:94:11:46:f0:13:25:3a:18:f1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Nov 4 19:00:44 2025 GMT
Not After : Nov 5 19:00:44 2025 GMT
Subject: CN=2501bb0cca0f90adc2481c2fb62823f5ed1d39f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:90:a6:35:20:75:80:85:27:25:2f:7b:4c:
ab:c7:49:36:28:c0:91:50:0a:9e:6c:49:a7:86:c6:
20:50:01:a5:0a:2c:8d:80:ea:a0:e7:9c:d2:22:00:
51:38:93:f5:50:12:91:18:89:3c:91:90:fb:08:e9:
45:a4:9d:2b:8c:db:2e:c8:27:0e:2d:ed:cc:31:8a:
c3:c3:a6:b1:64:ba:0d:b8:18:02:00:bb:52:97:83:
91:56:5f:16:c4:62:e1:cf:42:bb:a2:fc:d0:a1:94:
6e:09:66:7f:f4:06:93:dc:41:05:50:ca:7d:db:b0:
b0:a0:5a:95:67:85:e3:4c:fa:1f:cf:76:67:ef:d2:
de:df:58:b6:0c:c1:1e:14:a3:1b:15:79:9f:68:09:
ed:f6:92:af:04:24:6b:08:72:8e:9d:e2:ff:fe:58:
7f:e6:7f:fc:03:e4:f2:bb:b9:bf:39:d6:68:cf:2b:
66:a3:83:69:8f:bc:e4:ba:5c:31:07:34:7e:e9:1b:
c0:c9:be:4f:5d:0f:cc:93:2d:63:b7:ef:15:67:9b:
30:ae:09:0d:d7:8e:9d:b0:e1:c0:f1:08:68:a8:f7:
0a:fd:53:7b:06:d0:39:c1:0e:b7:5f:2b:ef:3a:49:
c2:cc:d0:2b:2a:2f:e4:dc:b8:d0:e5:67:87:3f:92:
d9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:01:BB:0C:CA:0F:90:AD:C2:48:1C:2F:B6:28:23:F5:ED:1D:39:F5
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:f8:7b:9b:11:e4:b4:90:b2:73:a9:bc:a1:8e:e9:86:41:a5:
ca:24:9d:d3:2c:60:13:c4:67:7a:e3:b2:32:e9:70:22:d6:87:
49:ea:a1:67:b9:9b:e8:f2:77:6c:f4:dc:2a:47:cf:9a:b0:06:
43:fe:bb:d3:d7:fb:75:4d:32:67:38:01:8b:fc:9d:78:6c:88:
23:8f:6e:91:91:56:12:d7:af:c9:d8:34:6b:f5:fc:ac:62:fe:
d8:2f:3b:c4:ae:48:d9:8b:1c:96:3e:a8:56:2a:04:d2:d3:fc:
5a:ec:fc:f7:b3:2c:43:43:7f:19:c0:28:25:07:84:68:06:39:
5c:79:65:ab:ef:1d:bc:7c:38:18:24:78:21:34:f0:de:68:73:
68:85:60:a9:5d:9f:60:8c:08:0a:ab:56:a8:7b:43:19:37:0b:
cb:6d:6b:4b:fe:e6:b3:38:26:06:cf:d3:db:fd:cf:f4:09:1f:
09:89:b0:a9:eb:f2:e9:90:a7:68:fc:57:8b:40:ae:75:c6:01:
41:42:e0:d4:34:e1:52:38:d6:a0:4b:79:a4:b8:5e:18:9c:1f:
e9:6a:db:57:ef:79:0e:b7:d4:40:44:40:b5:83:1e:14:f0:ed:
e6:23:d7:90:bd:8e:9f:92:06:37:52:96:fe:34:ef:d8:c5:94:
aa:ff:c4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:27:38 2025 by rpki-client