Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: K3RuhnamZAQeoBJgoQ+oj2rYCerIRi4lqKjeb6jA4JM=
Subject key identifier: AB:27:E7:0F:0E:F0:13:F6:AF:F0:1D:BB:7A:53:94:B9:61:E0:48:46
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 019A711322BD6288957332411C40CFAD67E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 171E
Signing time: Tue 11 Nov 2025 04:01:10 +0000
Manifest this update: Tue 11 Nov 2025 04:01:10 +0000
Manifest next update: Wed 12 Nov 2025 04:01:10 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: vym/T55e09UbmQEUg06gnSnI1tm2WlwOGm/52OfUdPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:22:bd:62:88:95:73:32:41:1c:40:cf:ad:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Nov 11 04:01:10 2025 GMT
Not After : Nov 12 04:01:10 2025 GMT
Subject: CN=ab27e70f0ef013f6aff01dbb7a5394b961e04846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:39:ab:13:c4:a1:02:06:84:91:55:54:e5:b0:
37:ef:1a:f0:dd:f5:56:7f:6e:53:77:2f:64:d2:14:
e7:86:51:9c:0c:4d:d1:81:6e:b0:37:e3:dc:51:0f:
6c:a3:ae:b5:95:99:d2:fd:d9:56:01:41:51:49:c5:
7a:43:aa:36:2d:14:4c:52:17:12:d4:8b:29:8e:40:
eb:be:e9:80:03:f9:f8:a2:d4:a6:6d:fc:94:2e:e3:
c4:f0:3b:52:af:8b:4c:2f:de:fa:ca:4b:0d:53:b2:
50:b5:e3:59:4d:ce:29:10:59:c0:1f:65:62:6e:02:
8d:9d:28:bb:04:37:32:60:70:6f:d5:8c:06:35:32:
e9:3d:98:ba:96:89:f0:b8:35:9a:d0:b0:20:a8:9f:
27:5a:e8:76:1b:bd:9e:ed:de:2f:ab:ff:23:eb:9b:
a5:8d:27:69:be:a2:3a:01:07:ee:a0:88:6a:c7:db:
b3:7d:6b:43:e2:56:86:ac:61:c1:ed:a4:0f:ed:2f:
85:83:0f:b1:4e:6f:20:df:18:af:49:b5:e8:9b:0d:
39:80:6d:1f:e6:b0:23:f7:44:3b:6d:14:31:5d:73:
eb:d8:e2:4a:c6:ed:ec:10:3a:85:63:da:24:ff:fb:
47:6a:02:a3:72:1f:8f:05:7b:47:f7:e3:e6:34:d1:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:27:E7:0F:0E:F0:13:F6:AF:F0:1D:BB:7A:53:94:B9:61:E0:48:46
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:67:d2:dd:a7:9c:a1:2f:56:a5:db:01:d1:1c:b1:0f:00:0d:
93:ca:1c:88:60:e7:29:1a:24:8b:56:74:3c:d4:0e:0f:40:ae:
51:96:1f:d5:dc:7f:74:8b:17:b3:0f:95:04:95:b5:30:e0:3b:
3b:77:c9:74:ba:7c:f4:56:63:49:45:cd:0f:8b:d7:10:f1:8a:
21:ee:38:68:7a:e3:b0:3f:60:9c:59:f8:c6:0b:72:64:0b:51:
ed:20:3c:66:cb:2d:e1:2d:b4:0c:3d:ce:bc:cd:c8:df:f8:8c:
c5:61:92:b5:d8:15:8f:62:c4:11:3f:6a:b7:03:6c:ee:66:fe:
bb:08:40:5c:08:0f:bb:73:b1:d8:5d:88:73:33:62:62:68:9b:
7c:50:75:eb:2a:d3:b0:f0:d8:73:a3:e4:df:b0:ae:b4:fd:cf:
ac:99:89:eb:4b:6c:12:4a:b9:18:8b:fb:97:63:32:53:bb:20:
51:6a:7a:55:7d:6a:d6:fe:83:9c:1c:02:2c:f9:ee:e9:62:93:
dc:c0:b4:58:80:fb:42:fd:47:18:23:a7:90:69:f6:76:0f:1d:
f2:65:ce:af:3e:ec:46:02:db:1c:34:a5:1e:c2:8c:bb:28:c1:
3c:1c:26:0e:62:68:d5:aa:7f:d5:d4:85:1a:98:05:38:b2:e2:
80:06:f2:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:41:50 2025 by rpki-client