Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: 7GFBeaX19pVFFosEUkKE2Nbv8npzR+rrgJjcND6gPr4=
Subject key identifier: 18:06:F3:99:20:43:99:06:D6:31:08:C3:6C:1C:22:B2:D2:EC:AE:DA
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019922FAE26EC388E3734C2F739A0F7C0D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 07:01:31 +0000
Manifest this update: Sun 07 Sep 2025 07:01:31 +0000
Manifest next update: Mon 08 Sep 2025 07:01:31 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: vubUUEwWN8t7cYT3EMIebRIXo5wwq5yZKOvY6ipbRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:e2:6e:c3:88:e3:73:4c:2f:73:9a:0f:7c:0d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Sep 7 07:01:31 2025 GMT
Not After : Sep 8 07:01:31 2025 GMT
Subject: CN=1806f39920439906d63108c36c1c22b2d2ecaeda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:42:79:50:d1:0e:1b:1a:65:8f:c8:20:03:59:
d7:0f:9e:51:55:37:2c:14:47:77:de:99:dd:c0:86:
c3:d2:1f:22:de:72:d1:f4:ca:38:cd:74:d6:74:d6:
a9:9c:88:52:68:e8:3b:3d:3e:b3:78:21:b4:3b:1b:
12:bc:13:0e:94:e7:01:08:76:fa:52:66:6b:d0:d1:
6f:67:df:c5:71:ee:a2:ce:ce:7b:1b:49:99:fd:c9:
38:58:1b:0d:02:ac:f5:ab:43:d6:32:09:4b:81:00:
b8:68:52:ca:c1:16:d6:0c:bf:a2:2c:40:02:17:21:
9a:d1:23:66:c9:37:13:83:b8:79:0b:8e:94:c1:95:
e3:d0:87:9a:4d:f6:5c:ef:d6:dd:b8:68:8f:4f:57:
74:85:a0:b9:86:27:98:3f:5f:5a:c4:ff:ec:73:f3:
5c:b9:34:c4:a0:ba:ff:ab:e4:fa:1f:6f:05:34:ff:
c8:89:b8:d4:5e:74:09:ab:87:7c:d0:3f:d5:9d:1d:
fb:da:f9:1d:f8:f5:00:5f:3a:8c:9b:73:93:68:66:
01:88:00:d2:e3:7b:bf:be:b3:24:00:5a:3a:e7:55:
06:f9:de:8a:a6:7a:23:4d:92:65:b7:88:cb:72:e2:
4d:a6:7a:03:f8:aa:26:b0:4d:2c:21:dc:f9:0b:8e:
5e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:06:F3:99:20:43:99:06:D6:31:08:C3:6C:1C:22:B2:D2:EC:AE:DA
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b8:ae:5c:eb:a3:7b:fd:0b:cd:f8:3b:bf:e5:43:26:52:03:
2f:a0:e8:39:c5:4f:ae:f7:f1:90:26:fc:0e:ce:a1:77:5f:9d:
c9:26:3e:2d:dd:d3:b5:ab:3a:17:e3:7f:17:7e:c0:78:41:01:
c0:c3:3f:e7:e2:bd:20:e6:b9:4e:8a:eb:19:77:37:36:29:94:
8d:12:be:fa:d3:4d:54:e8:b5:dc:60:bd:1f:ed:7a:19:fb:de:
51:54:93:99:7b:95:37:66:b2:87:2e:57:c7:b8:9b:c9:c6:06:
0b:19:c5:63:3e:b8:9d:99:25:41:1c:13:4d:10:0a:3f:82:f3:
3f:c1:36:a3:f7:d6:f7:03:76:dc:e5:ae:7c:95:95:12:eb:0a:
23:26:fc:b2:60:10:7f:34:9f:c1:c5:77:1c:ad:87:d0:a0:16:
60:54:01:90:03:64:29:6c:e1:fc:50:3b:34:90:be:c7:a6:92:
f7:fe:86:57:5e:97:64:58:d8:33:f9:b8:94:16:ca:f1:a5:1c:
66:b5:88:97:c8:9b:50:5e:ba:11:ed:f1:9c:5c:93:0e:6a:5b:
9f:07:34:16:7a:18:99:57:e0:bd:f3:53:1f:66:94:6f:be:2a:
ed:a3:d8:d8:a0:2f:aa:4e:99:1d:17:c1:ad:66:9f:8f:a2:bf:
36:d3:13:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZki+uJuw4jjc0wvc5oPfA1pMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGQ2NjZhNTRkNWUxYmMzNTVjMGQ3MjUwM2E0NThmYzBl
OGUwNmMwHhcNMjUwOTA3MDcwMTMxWhcNMjUwOTA4MDcwMTMxWjAzMTEwLwYDVQQD
EygxODA2ZjM5OTIwNDM5OTA2ZDYzMTA4YzM2YzFjMjJiMmQyZWNhZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskJ5UNEOGxplj8ggA1nXD55RVTcs
FEd33pndwIbD0h8i3nLR9Mo4zXTWdNapnIhSaOg7PT6zeCG0OxsSvBMOlOcBCHb6
UmZr0NFvZ9/Fce6izs57G0mZ/ck4WBsNAqz1q0PWMglLgQC4aFLKwRbWDL+iLEAC
FyGa0SNmyTcTg7h5C46UwZXj0IeaTfZc79bduGiPT1d0haC5hieYP19axP/sc/Nc
uTTEoLr/q+T6H28FNP/IibjUXnQJq4d80D/VnR372vkd+PUAXzqMm3OTaGYBiADS
43u/vrMkAFo651UG+d6KpnojTZJlt4jLcuJNpnoD+KomsE0sIdz5C45efQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBgG85kgQ5kG1jEIw2wcIrLS7K7aMB8GA1UdIwQY
MBaAFGoNZmpU1eG8NVwNclA6RY/A6OBsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4Mjct
YTgyYWQ1NGRlZmJjLzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9hZTg0MmItNGNjNy00ZTA3LTk4MjctYTgyYWQ1NGRlZmJj
LzEvYWcxbWFsVFY0YncxWEExeVVEcEZqOERvNEd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbLiuXOuj
e/0Lzfg7v+VDJlIDL6DoOcVPrvfxkCb8Ds6hd1+dySY+Ld3Ttas6F+N/F37AeEEB
wMM/5+K9IOa5TorrGXc3NimUjRK++tNNVOi13GC9H+16GfveUVSTmXuVN2ayhy5X
x7ibycYGCxnFYz64nZklQRwTTRAKP4LzP8E2o/fW9wN23OWufJWVEusKIyb8smAQ
fzSfwcV3HK2H0KAWYFQBkANkKWzh/FA7NJC+x6aS9/6GV16XZFjYM/m4lBbK8aUc
ZrWIl8ibUF66Ee3xnFyTDmpbnwc0FnoYmVfgvfNTH2aUb74q7aPY2KAvqk6ZHRfB
rWafj6K/NtMTlg==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:30 2025 by rpki-client