
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: xf1EVcJlLWrzHiKuOIDK3kcjAp2FMm+KwOIeoLcoT9M=
Subject key identifier: 50:4C:3E:35:CF:F4:B3:76:00:77:7C:37:53:39:DC:BD:68:43:DF:60
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 019874500C6D807F0295EBA4CD4575A6D8B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0DCE
Signing time: Mon 04 Aug 2025 09:00:59 +0000
Manifest this update: Mon 04 Aug 2025 09:00:59 +0000
Manifest next update: Tue 05 Aug 2025 09:00:59 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: IVO3g7znbCMTXbuTe2bxkJ7j5i+789TMKu/5Lq45pU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:0c:6d:80:7f:02:95:eb:a4:cd:45:75:a6:d8:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Aug 4 09:00:59 2025 GMT
Not After : Aug 5 09:00:59 2025 GMT
Subject: CN=504c3e35cff4b37600777c375339dcbd6843df60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:33:6d:19:05:35:f0:8c:be:89:c9:86:d4:b7:
06:c1:51:b1:c5:72:fc:10:ca:9f:d4:49:85:62:98:
cf:d9:2e:08:bf:02:0b:f7:cd:69:f3:5c:5b:4a:e3:
c6:a2:62:10:f2:1a:24:29:c2:79:e0:5f:ed:18:fc:
6c:1f:c8:2e:c5:f4:c4:ab:62:c4:b2:62:ac:e1:a8:
c1:f6:49:c2:42:23:7a:6d:69:b5:44:14:00:de:f1:
68:99:e4:3e:a1:86:28:83:58:f1:51:e1:d8:b8:fd:
29:81:c3:68:16:58:bc:56:f4:20:37:71:89:f4:98:
dc:5b:a2:ed:5a:d4:ed:b7:0c:44:b2:b5:83:61:a1:
c1:ed:aa:6d:e1:10:19:a0:62:15:f0:78:11:92:c5:
14:ea:f4:55:2a:5d:da:dc:c8:0a:aa:e5:39:4f:12:
93:7b:48:55:d4:c0:30:7a:a2:8b:46:7b:d8:4a:d4:
65:9b:85:e9:aa:f4:f8:af:68:c6:c5:cb:3f:50:51:
60:b3:35:a8:bb:17:c1:3d:a2:cc:ea:b5:2e:b0:86:
49:46:b6:83:ff:83:cc:61:bb:14:cd:c8:b0:61:6e:
d5:99:aa:02:65:54:07:c7:8b:4b:72:e1:bc:9a:95:
2f:c4:72:aa:2c:7c:5b:56:5f:45:99:8b:77:cc:28:
78:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:4C:3E:35:CF:F4:B3:76:00:77:7C:37:53:39:DC:BD:68:43:DF:60
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:2a:89:27:2b:af:b9:10:f9:ab:80:55:7d:e2:8d:4a:78:79:
b9:7f:10:28:2b:0c:70:44:cc:d1:b5:af:55:f8:12:f0:a0:38:
ac:14:5c:66:b2:df:c3:6b:58:74:e6:e7:e6:66:ba:70:09:9b:
38:70:e9:f1:97:00:2c:b2:9d:b2:72:b3:10:fb:87:e6:59:32:
5f:57:0e:3b:1e:51:ab:79:df:0f:eb:37:3e:66:b0:39:08:a5:
53:bd:da:59:ab:2b:6e:78:ae:b9:0a:ff:19:7e:79:37:be:25:
6d:ff:f8:e6:7d:24:71:8d:1c:b5:16:51:aa:a7:eb:d1:f2:9c:
8e:44:81:97:3d:50:4e:97:20:6e:63:31:f2:46:4c:ca:58:41:
23:f3:07:d0:3e:37:ef:67:6c:61:e6:a6:43:d8:90:85:a5:dc:
41:71:42:1b:23:26:f9:61:f1:f2:12:d5:70:06:5b:f7:95:23:
e1:47:99:43:b5:6e:a6:47:3b:f0:90:dc:60:98:db:b5:3a:a4:
8d:88:cc:ef:85:8a:40:00:1b:20:27:07:bb:fb:b1:86:57:84:
be:ff:4a:4f:83:90:b0:8e:18:3d:ff:27:67:da:71:9d:b1:c4:
bf:7a:db:5d:fb:91:ac:52:2a:b6:4b:36:04:87:05:7c:93:d9:
2c:85:d8:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UAxtgH8CleukzUV1pti2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGM4NjdjOTc5ODcxYzdhZGIwOWY3YzYyMTliYTViMDY0
NTkzMWMwHhcNMjUwODA0MDkwMDU5WhcNMjUwODA1MDkwMDU5WjAzMTEwLwYDVQQD
Eyg1MDRjM2UzNWNmZjRiMzc2MDA3NzdjMzc1MzM5ZGNiZDY4NDNkZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozNtGQU18Iy+icmG1LcGwVGxxXL8
EMqf1EmFYpjP2S4IvwIL981p81xbSuPGomIQ8hokKcJ54F/tGPxsH8guxfTEq2LE
smKs4ajB9knCQiN6bWm1RBQA3vFomeQ+oYYog1jxUeHYuP0pgcNoFli8VvQgN3GJ
9JjcW6LtWtTttwxEsrWDYaHB7apt4RAZoGIV8HgRksUU6vRVKl3a3MgKquU5TxKT
e0hV1MAweqKLRnvYStRlm4XpqvT4r2jGxcs/UFFgszWouxfBPaLM6rUusIZJRraD
/4PMYbsUzciwYW7VmaoCZVQHx4tLcuG8mpUvxHKqLHxbVl9FmYt3zCh4EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBMPjXP9LN2AHd8N1M53L1oQ99gMB8GA1UdIwQY
MBaAFGoMhnyXmHHHrbCffGIZulsGRZMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUt
ZTQ1ODYzZWFjMmI0LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8xZTAxZDItMWExZC00ZGMxLWE4ZDUtZTQ1ODYzZWFjMmI0
LzEvYWd5R2ZKZVljY2V0c0o5OFlobTZXd1pGa3h3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyqJJyuv
uRD5q4BVfeKNSnh5uX8QKCsMcETM0bWvVfgS8KA4rBRcZrLfw2tYdObn5ma6cAmb
OHDp8ZcALLKdsnKzEPuH5lkyX1cOOx5Rq3nfD+s3PmawOQilU73aWasrbniuuQr/
GX55N74lbf/45n0kcY0ctRZRqqfr0fKcjkSBlz1QTpcgbmMx8kZMylhBI/MH0D43
72dsYeamQ9iQhaXcQXFCGyMm+WHx8hLVcAZb95Uj4UeZQ7Vupkc78JDcYJjbtTqk
jYjM74WKQAAbICcHu/uxhleEvv9KT4OQsI4YPf8nZ9pxnbHEv3rbXfuRrFIqtks2
BIcFfJPZLIXYAA==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:03:44 2025 by rpki-client