Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: wSrhtllSf202QfjN10LThVe83XnFpk4Q7tOUW5/JZ2Q=
Subject key identifier: F7:65:71:D1:DA:B6:80:24:85:AB:F5:5C:DE:00:E5:B6:BE:A2:7D:6E
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 019A4E189CAD4F7921C1DE6BCA290DBF9E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0A01
Signing time: Tue 04 Nov 2025 09:00:26 +0000
Manifest this update: Tue 04 Nov 2025 09:00:26 +0000
Manifest next update: Wed 05 Nov 2025 09:00:26 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: RB6h0R2a8NoLv0+Bt5GlcMtjXVtxdq5ZNoxU9KeJ7qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:9c:ad:4f:79:21:c1:de:6b:ca:29:0d:bf:9e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Nov 4 09:00:26 2025 GMT
Not After : Nov 5 09:00:26 2025 GMT
Subject: CN=f76571d1dab6802485abf55cde00e5b6bea27d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:9b:bf:3e:87:df:44:e5:39:68:02:c0:a3:
f2:1f:b2:ed:5a:d2:2a:35:fe:38:bf:06:02:e1:79:
a3:1f:2e:bd:81:0d:4c:f3:d3:4f:df:ea:dc:da:09:
12:8f:d9:fc:a5:91:ee:0c:bc:fa:f9:aa:70:7e:00:
6c:c6:5b:b3:32:d1:2d:4a:a2:10:21:52:31:2d:89:
8b:13:e3:bb:ad:e7:15:63:b1:e2:91:a3:bc:ab:fc:
ee:d7:53:59:45:9e:ff:87:0a:e7:b1:0c:83:4e:85:
d8:93:74:5a:bc:71:77:cd:9c:bb:0d:ed:22:cd:e4:
18:cb:18:1d:8a:e0:04:7d:91:ff:9b:b0:64:ba:41:
57:9f:24:23:5e:73:a9:15:2d:e4:81:0b:25:f5:55:
1b:f4:d5:fd:35:f4:a2:d6:e3:23:39:a0:23:ab:24:
89:ff:d4:6d:92:64:35:70:89:c6:90:2a:4a:09:b0:
a1:7f:90:4e:b9:30:80:5a:3b:50:41:d2:10:84:c9:
a8:72:be:a2:a6:0e:ff:09:b4:a0:4c:9a:67:78:be:
9c:a2:70:0e:59:fe:17:42:b2:08:11:b3:77:85:15:
90:a9:9c:4d:44:9d:ff:78:2d:e9:40:d8:db:6f:65:
3b:19:ee:5c:2e:1a:c9:5f:67:a6:ae:06:54:ce:5b:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:65:71:D1:DA:B6:80:24:85:AB:F5:5C:DE:00:E5:B6:BE:A2:7D:6E
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a5:c3:af:b3:af:c1:0a:f4:d8:1c:ad:b1:1d:4f:f9:97:ad:
69:d0:57:80:7e:5a:d0:e2:b7:d1:ee:e5:f1:fc:43:a8:1f:e5:
54:82:c6:85:a1:cd:c4:ae:2f:34:90:cf:ec:34:7b:ef:8c:a7:
7c:4c:30:97:5c:d0:b5:54:35:58:4d:42:ef:41:ba:a3:96:7a:
87:c1:b9:ce:ef:2e:0a:9b:d9:47:0a:c1:3e:39:26:72:0b:70:
4f:d5:f6:bb:25:cd:de:ad:d5:9a:d2:44:17:d8:26:e5:54:be:
b7:fb:82:a7:a0:07:45:70:ab:b8:d8:15:78:5a:b0:5e:1a:4e:
77:81:83:ee:0a:6b:58:69:4c:b2:2c:df:2a:6a:4b:79:99:c3:
76:9f:21:f4:f6:1c:49:bc:a8:f8:ba:36:27:0e:ab:e8:57:67:
4a:6f:f2:02:58:74:00:4d:e6:b0:77:0f:31:fd:97:85:d8:75:
f6:98:59:6f:93:89:0f:fd:a9:ba:f7:77:86:b9:89:c6:a2:6c:
c9:d0:bc:16:b8:8a:de:ad:ee:92:7e:a7:3b:13:3e:66:87:a8:
8e:1e:f2:47:97:c3:59:43:d2:22:43:78:8e:6a:fa:e2:41:34:
a2:0f:ce:af:af:9b:7e:f8:22:73:52:a0:6a:72:63:f0:3e:9c:
7b:24:8b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:44:09 2025 by rpki-client