Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: uDsHU6eRdJ57OKUkEUf39WadoQcqtDTKbKAwsZz9cHA=
Subject key identifier: 9B:11:99:B9:F6:1E:9A:9A:3C:D2:4D:F1:69:B5:F1:94:D8:0E:01:FE
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019A4F62A3E26F4F1F5B9920E4B3BE904B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0EC4
Signing time: Tue 04 Nov 2025 15:00:55 +0000
Manifest this update: Tue 04 Nov 2025 15:00:55 +0000
Manifest next update: Wed 05 Nov 2025 15:00:55 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: vtwBr4i6OTRK0JYB1+TqCcsyjFWPb42oRRYzy95dYUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:a3:e2:6f:4f:1f:5b:99:20:e4:b3:be:90:4b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Nov 4 15:00:55 2025 GMT
Not After : Nov 5 15:00:55 2025 GMT
Subject: CN=9b1199b9f61e9a9a3cd24df169b5f194d80e01fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:c8:6b:2a:e5:af:10:89:1b:a9:20:47:c8:
83:a2:3c:b2:1e:74:94:b0:68:c5:fb:80:ff:3e:24:
ba:8d:f8:0e:22:29:ea:e7:80:a8:58:66:4d:3f:70:
e2:88:b1:6e:42:55:87:b8:85:3a:fa:c9:df:3a:81:
5f:d9:1a:54:f2:97:eb:f9:35:d7:6b:4a:7c:54:5f:
61:7a:65:b2:ae:1a:40:0e:a0:80:9f:85:63:17:1b:
11:2a:7b:bb:46:89:2d:f7:76:ea:33:ef:a9:2a:7c:
51:55:6b:90:8c:97:ea:40:25:f9:45:c8:3a:d7:b4:
88:5d:e5:3b:da:89:60:b0:7f:63:62:69:6f:7d:16:
4d:6f:55:44:b6:3a:05:47:eb:9d:53:6a:ac:49:62:
ee:0d:05:ce:ae:41:38:4a:90:0d:53:7e:ab:52:02:
50:be:6d:53:20:8c:ef:bf:1d:2a:8b:9b:e1:e3:b5:
ef:f2:09:90:be:5b:00:11:31:b9:94:ec:2e:2f:ea:
f8:0d:c7:7d:e4:0b:08:05:12:75:79:b8:7b:69:a8:
dc:7b:da:d1:e0:1a:6b:f7:cf:4c:7a:3b:46:ec:26:
30:0a:08:73:52:aa:4d:fb:1b:49:0e:d6:12:03:5d:
43:65:60:6a:0b:71:7c:48:97:87:84:ef:9e:77:7c:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:11:99:B9:F6:1E:9A:9A:3C:D2:4D:F1:69:B5:F1:94:D8:0E:01:FE
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e0:0b:8c:1e:46:7d:28:ee:18:33:6d:b1:d1:62:49:b0:c2:
bf:83:e4:21:f9:e0:95:2c:5f:d6:89:1a:51:8e:0e:af:61:45:
80:21:0b:3c:c1:26:33:96:aa:2c:53:ad:fe:4f:f0:ea:85:44:
33:36:4a:67:6c:4f:0b:f2:75:2e:77:1f:89:7b:c2:26:5d:88:
d3:3e:ca:ce:4c:6b:e3:b0:75:66:f7:ba:08:6f:9a:ef:dc:1d:
9b:18:c8:1e:23:33:56:bc:de:06:9c:9e:50:3c:b8:0a:1a:d9:
a5:ef:99:46:88:ec:98:94:26:3e:7e:6d:8d:d7:5c:21:b9:0a:
d6:af:55:39:7f:68:3e:6f:96:a2:a8:29:76:04:db:5e:7e:0d:
59:11:2e:47:5a:3e:53:82:72:1c:4f:20:3f:41:c8:8a:e7:07:
36:dc:6e:53:42:5e:21:77:8e:13:9b:18:ca:34:a4:95:a5:68:
24:16:8c:44:92:eb:9d:41:ee:b8:1b:fd:36:c1:ea:34:ee:4b:
38:d4:1c:00:8e:3b:aa:c6:f0:01:84:d0:ea:11:4e:ef:88:4e:
5b:31:da:c3:e9:6c:47:31:66:da:31:b7:4f:53:0c:b5:a3:08:
b1:e4:6a:cf:83:53:9f:90:6a:11:9e:a9:63:76:fb:2c:8a:44:
0d:4e:74:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 22:37:24 2025 by rpki-client