Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: dmLTWM4JsFaQbjit001RAqdlQrp8ZotofkpcTylNRWs=
Subject key identifier: DC:4B:8E:E8:D2:06:CE:1B:49:8A:84:D6:E8:47:CB:4F:8F:30:03:2C
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0199C4FB9CD6A5D82C259E0487780B4A3584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 09BA
Signing time: Wed 08 Oct 2025 18:00:48 +0000
Manifest this update: Wed 08 Oct 2025 18:00:48 +0000
Manifest next update: Thu 09 Oct 2025 18:00:48 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: cjRxuTfKuGMdhvRlnw0988xFgxjBQX8J0cZaUpU5Rkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c4:fb:9c:d6:a5:d8:2c:25:9e:04:87:78:0b:4a:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Oct 8 18:00:48 2025 GMT
Not After : Oct 9 18:00:48 2025 GMT
Subject: CN=dc4b8ee8d206ce1b498a84d6e847cb4f8f30032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3b:25:d3:16:f1:95:d2:37:59:c4:8e:2d:da:
cc:fd:69:00:2a:c4:2d:c2:e7:db:96:a4:8b:d5:dd:
4c:9b:bd:9d:0b:3a:a4:c4:ab:e7:e9:8b:b4:8d:f3:
65:cd:da:a0:b4:7a:c7:da:64:9a:58:e5:fd:2e:eb:
7e:b5:ca:9b:af:de:fb:b1:e9:1b:36:83:53:39:f2:
c9:56:b3:59:cb:7b:7f:46:43:ad:76:6e:40:01:b7:
8e:a1:e2:a5:66:64:16:80:31:e0:e9:43:61:c9:63:
c5:31:06:c4:03:59:53:83:3f:10:90:91:5a:83:28:
6e:31:f5:dc:f1:ac:65:3b:8e:5a:11:92:dd:e6:97:
2c:c3:ad:1c:4a:e2:55:62:a8:c6:c8:cf:68:4f:8e:
2e:fe:8f:43:34:a6:2e:62:4b:e9:69:32:d0:30:ec:
72:48:63:ef:31:1d:9d:3a:9c:c1:31:c8:22:16:e6:
0d:ea:a7:4a:89:fc:68:10:e3:57:88:75:7e:a7:d1:
6e:40:61:28:fe:2e:a1:6a:95:9c:e3:a6:d1:9f:43:
b4:41:bc:c7:d1:18:0d:ee:1e:13:80:f7:0b:f5:4e:
15:c4:96:c3:d3:c8:58:59:f8:b0:1f:11:29:f8:51:
8f:e5:1a:c8:33:a5:71:94:3b:a2:74:1a:e8:80:df:
de:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4B:8E:E8:D2:06:CE:1B:49:8A:84:D6:E8:47:CB:4F:8F:30:03:2C
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:2d:c8:c4:b0:84:02:85:a5:ad:9a:7c:35:75:44:a3:41:b6:
38:78:1e:7a:45:42:15:ee:13:06:5f:92:67:88:cd:0e:21:81:
32:30:c0:da:f7:94:ac:d2:72:6d:9d:e8:9e:ea:59:79:9b:e6:
9b:84:3e:36:de:be:1b:31:9b:9e:bc:e0:70:ae:7a:01:5d:a8:
6c:26:54:c8:d7:77:4c:b7:3b:1e:b8:76:c4:ac:0e:1c:70:be:
e0:22:61:d7:31:1d:85:82:48:05:d2:27:cf:66:29:69:40:20:
30:a6:b8:e1:17:e5:be:e9:8f:2e:13:37:0f:11:6e:41:05:96:
82:18:7e:ba:6d:96:c7:44:67:6f:3f:f0:ca:77:42:5f:60:9f:
b1:87:03:2c:b8:5d:56:0e:26:b5:39:d7:f9:f3:9d:6a:41:de:
78:66:7b:18:40:c4:64:6e:ac:42:79:eb:6d:55:2c:14:d8:98:
54:b5:d6:de:48:1c:38:5a:c2:77:b2:c6:4c:ee:3b:69:dd:27:
dd:5e:32:0b:91:67:d6:1e:c0:20:97:99:13:64:92:05:e4:42:
a5:16:3c:95:cd:60:93:1d:0e:d7:a2:c5:ec:30:b5:aa:1d:ac:
be:65:5d:0c:d3:68:17:2f:36:a4:59:14:58:3f:6a:55:e7:f9:
41:83:39:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 8 23:10:22 2025 by rpki-client