Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: NUPk/4Cq4esGMDnq4A2vZP4yAon9kwvYi/rHXtX5xq8=
Subject key identifier: 69:EA:D0:83:ED:79:35:95:23:E8:A2:A5:60:6E:71:6C:EF:93:2E:E9
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 019A4F994D00527A93094383A6E08000B91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 117D
Signing time: Tue 04 Nov 2025 16:00:37 +0000
Manifest this update: Tue 04 Nov 2025 16:00:37 +0000
Manifest next update: Wed 05 Nov 2025 16:00:37 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: K+bExFUdXJx8vNeqzXrkkNtKOPO5Va3BVt+nVGgpT3c=)
2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 16:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:99:4d:00:52:7a:93:09:43:83:a6:e0:80:00:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Nov 4 16:00:37 2025 GMT
Not After : Nov 5 16:00:37 2025 GMT
Subject: CN=69ead083ed79359523e8a2a5606e716cef932ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:56:0a:5d:f2:73:90:22:1b:57:29:1d:77:
30:b0:69:c1:1a:6f:cc:d0:2c:34:6f:0f:b6:05:d0:
61:12:f2:88:42:59:4b:56:34:00:11:8e:d1:a1:b7:
be:b0:27:64:30:d7:11:2e:99:92:07:e4:66:89:4c:
c5:3b:a3:2d:3a:10:f6:df:bc:78:af:30:90:32:52:
46:19:3d:8d:0f:94:65:2e:39:07:b7:81:90:b2:c6:
df:ce:29:11:03:e4:1b:3e:79:1f:7d:8b:62:8f:21:
fa:7e:97:7c:99:b2:01:02:11:a2:2d:5d:24:c5:33:
cf:bf:ca:e2:59:b7:21:d6:02:a5:aa:f5:74:50:fc:
ca:6e:8e:e5:2f:b7:1d:8b:07:21:c0:07:f1:ba:06:
8f:90:19:86:26:3f:46:61:8b:60:f6:05:29:7a:c8:
81:ea:35:63:54:03:89:a9:4c:82:cf:35:13:f8:90:
4b:90:5a:e3:a0:b7:6a:f7:c5:dd:00:b4:5d:30:08:
cd:40:00:f9:c8:5d:2a:47:3c:0e:13:c1:f4:9b:9b:
b7:2d:c9:13:39:be:f7:5d:89:fc:b4:ec:f0:e6:91:
64:2d:f7:6e:f4:81:78:08:08:ea:8e:5c:0f:78:39:
74:77:6d:b3:0a:a1:2c:59:0f:02:bb:0f:40:6b:c4:
29:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EA:D0:83:ED:79:35:95:23:E8:A2:A5:60:6E:71:6C:EF:93:2E:E9
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5a:27:34:95:31:fa:17:cc:1d:4d:c4:47:9f:1f:8a:9b:3f:
02:d4:9b:1c:1c:3a:ca:68:6d:79:b1:25:a0:d8:ec:63:2c:34:
50:71:a5:09:6f:64:7e:07:c9:b3:81:71:5f:36:70:29:2e:49:
50:8d:5b:26:f2:77:bd:a1:fe:a3:82:4d:48:05:3c:73:b8:4c:
5f:83:84:a0:2e:a4:84:ec:e4:12:b8:81:1d:6a:4c:d7:bf:5e:
9c:d0:74:03:fb:ac:66:43:4c:4e:25:16:3b:15:98:2a:d9:f0:
e6:bf:1a:8f:44:1c:81:58:fc:f6:86:e3:8d:c0:59:6d:cc:0c:
7c:7f:20:c6:b8:6e:36:6c:57:eb:dd:69:53:86:36:dd:b0:f7:
82:d5:fb:c5:22:b3:8e:52:75:1a:84:cc:ec:4c:e3:2f:7b:a1:
cf:c8:38:eb:a1:7b:2c:46:6e:fc:86:af:92:40:28:e9:08:8f:
25:4c:a0:60:9c:3a:ef:85:09:3a:ce:43:80:a1:b1:ff:ac:8e:
9b:97:9e:8c:f8:62:83:11:d9:8b:f2:69:e9:7e:04:98:11:bc:
94:29:34:f7:c4:c3:c0:88:65:b7:41:4e:a7:5c:fd:fe:a7:83:
9f:a9:c9:11:dd:cc:8f:ea:da:44:74:f9:76:c8:60:3a:d1:32:
33:94:1f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:17:08 2025 by rpki-client