Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: IUr5yT6pLIWHBN3xg90Xd+G+KUD8Q/u+Q0zGjHKO/U0=
Subject key identifier: 8B:95:A0:C1:D1:D7:2C:FE:7C:5A:2B:99:1F:EA:2F:6F:11:30:D1:8D
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019A522CADC04F968BDD57B9D45CB70F0AA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 1713
Signing time: Wed 05 Nov 2025 04:00:50 +0000
Manifest this update: Wed 05 Nov 2025 04:00:50 +0000
Manifest next update: Thu 06 Nov 2025 04:00:50 +0000
Files and hashes: 1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: Z910glDp0g3I0YFEGJGgLpPdPPu0WiZXejltVOJWnUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:52:2c:ad:c0:4f:96:8b:dd:57:b9:d4:5c:b7:0f:0a:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Nov 5 04:00:50 2025 GMT
Not After : Nov 6 04:00:50 2025 GMT
Subject: CN=8b95a0c1d1d72cfe7c5a2b991fea2f6f1130d18d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:05:31:65:6d:82:30:57:24:4e:e2:a1:9b:
39:fb:75:b8:24:aa:85:46:37:5e:82:3d:95:98:35:
af:12:c0:58:7e:46:9a:b0:80:08:fe:ed:75:66:9f:
48:7d:09:1b:48:87:bb:76:c3:6c:af:37:a1:14:08:
cb:5e:e7:3e:63:da:19:e3:7a:f0:0c:22:f5:2c:91:
fa:7c:d2:30:46:70:2d:45:86:c9:ab:2d:5a:a7:f8:
e0:ee:c2:57:0b:13:25:f9:fd:87:11:33:51:31:34:
86:2f:e7:a0:b0:73:7d:2d:e1:45:42:b6:93:08:4e:
c1:74:ce:b1:7d:6e:70:03:bd:d0:9e:23:d0:e0:38:
37:3a:fb:c1:93:c5:7f:4f:9b:a2:0f:9c:c1:37:0b:
11:46:39:96:9a:5a:1f:e9:d9:07:6f:ac:47:0a:e4:
78:34:2d:6b:6f:eb:d4:ea:f2:9c:4d:ff:f7:60:aa:
4b:db:20:04:34:4b:78:65:c6:3a:82:f4:aa:6c:5d:
57:27:48:fa:17:78:12:17:3e:60:4f:1b:bb:bf:d5:
7f:8f:3f:9c:06:6c:1d:ff:f5:4f:4a:8c:82:a9:35:
ea:ed:9d:6b:cd:5a:d1:07:9c:aa:f9:5d:c4:df:94:
a0:9d:96:50:78:1b:cd:9e:09:27:55:70:a9:ab:e6:
ab:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:95:A0:C1:D1:D7:2C:FE:7C:5A:2B:99:1F:EA:2F:6F:11:30:D1:8D
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4e:91:6c:c3:ad:9f:df:0e:3f:2b:be:fa:e0:a6:f6:b0:09:
3c:8a:e6:2c:48:22:8e:d0:be:b0:d8:96:7e:bc:ea:5e:1f:6c:
24:1c:88:82:2d:2e:57:13:4a:ef:b7:20:bb:49:90:04:31:95:
32:12:b4:97:dd:af:ff:d9:11:24:02:da:35:72:72:23:5c:6c:
e9:31:64:02:48:54:1f:b3:a6:dd:e9:1c:6d:00:75:9a:98:e2:
be:60:d3:96:11:75:16:2b:67:11:e3:3d:26:48:82:79:0c:2d:
c4:d4:f1:74:53:2a:d9:bc:4f:78:92:5d:cc:b0:ad:5b:bb:fe:
b1:e9:f5:ad:45:24:72:56:08:b3:e3:57:b6:fe:ea:c9:fa:16:
95:4f:f5:e0:d9:71:41:3d:7c:de:42:5d:69:1a:12:d4:73:3b:
61:c5:7b:26:cd:d2:a3:85:7e:9f:e9:59:0c:08:69:8d:c4:7d:
43:50:9e:49:48:01:00:25:26:29:ae:b5:fd:a2:a1:d0:8c:8b:
e4:45:1d:21:67:fa:d6:a6:4a:82:a8:0f:17:28:3a:48:04:9e:
bf:7b:59:4c:bd:37:3d:5c:45:71:3e:1e:14:81:43:94:da:2b:
e2:1e:99:85:84:2d:c2:ba:f6:df:a3:59:46:71:d0:64:ff:d9:
86:d3:bf:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:47:56 2025 by rpki-client