Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: TTGnRW2MkMFq6yILo1217KcJIhZAsU2byzBGflj9kf4=
Subject key identifier: DD:E7:04:D1:2C:0B:EB:44:30:73:33:D0:26:D9:61:D1:9F:52:23:C0
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 019A70A4F7F791E9BFC0822DCC14DD05E9D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 02:00:50 +0000
Manifest this update: Tue 11 Nov 2025 02:00:50 +0000
Manifest next update: Wed 12 Nov 2025 02:00:50 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: lCSsh50LGx9SEqqMFgxyyM6Z9EP4HpKj6yKnul0hGOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:a4:f7:f7:91:e9:bf:c0:82:2d:cc:14:dd:05:e9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Nov 11 02:00:50 2025 GMT
Not After : Nov 12 02:00:50 2025 GMT
Subject: CN=dde704d12c0beb44307333d026d961d19f5223c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b6:60:18:3b:d4:44:c3:20:57:9b:38:bf:6a:
42:a6:35:3e:09:f8:cc:2f:35:de:e5:c0:2a:9f:7f:
a4:41:69:24:a9:b3:eb:ed:52:e0:74:9e:69:dc:02:
d9:c6:99:be:cd:1a:f0:c1:d4:88:bd:a3:40:ea:27:
05:86:cd:fd:e6:55:b8:bd:ff:52:f1:6f:51:b4:1b:
70:32:29:50:3e:dc:c4:7c:82:3d:c5:ac:94:d8:50:
43:d5:20:cc:44:e8:b9:a4:e9:f4:12:e0:bf:01:51:
5a:07:9f:45:5d:c7:d0:cc:59:f2:86:a3:0d:23:ee:
c6:db:27:89:02:11:cc:8a:1d:70:87:cb:37:aa:32:
53:78:af:28:aa:63:04:ee:16:ef:5e:af:5e:1b:38:
71:86:ea:9e:99:26:54:cc:24:b6:b7:36:98:3e:b8:
24:c9:f9:65:a0:55:7b:07:82:41:4f:c5:b1:20:e4:
14:9a:59:d0:a2:5c:da:ce:4f:d8:10:48:27:cf:7c:
fe:be:b7:83:04:fe:54:46:92:84:e0:49:da:4f:09:
5a:1b:a4:f6:cd:53:55:10:4e:8f:f8:65:01:2f:fe:
6b:f6:a8:bd:38:33:09:47:5b:95:b3:92:28:e1:11:
b9:02:36:d0:50:4b:57:34:5c:fc:63:b4:43:6a:5e:
25:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:04:D1:2C:0B:EB:44:30:73:33:D0:26:D9:61:D1:9F:52:23:C0
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:c3:e1:44:27:49:e3:97:7b:7c:81:18:fa:63:fd:b2:3b:e3:
99:18:c8:04:b7:5c:a6:59:3f:17:be:f0:1e:0c:09:f1:1f:40:
ce:62:c0:20:18:fa:c8:9d:7d:4e:e6:67:bc:02:c4:92:d9:9c:
be:6c:5d:79:f5:ae:db:ae:a2:49:ea:b6:a1:bd:ba:a4:fe:fa:
f9:02:1f:05:da:55:76:c7:61:58:58:c3:27:27:8d:e5:2b:3d:
bd:7d:3b:ca:0e:6b:8e:e4:35:03:16:a0:ae:18:2f:91:29:24:
ec:04:8c:37:12:13:5d:84:9d:c5:fc:15:15:95:da:47:ec:44:
2a:ea:4a:f8:74:05:a7:19:02:ad:b1:bf:13:2f:b8:d3:a0:3b:
1e:94:75:70:ea:72:9d:2d:76:70:02:44:43:1f:93:fe:55:cf:
e4:59:73:9e:c3:df:b0:e0:cb:04:bd:18:9e:ed:9d:2a:f4:57:
3e:4f:1b:91:d9:41:e6:2c:35:dc:f4:64:96:82:db:67:78:3c:
88:0f:63:ef:f9:3e:1a:f7:8a:27:55:74:6d:51:79:0a:88:3c:
60:6a:f1:1d:00:a8:e9:01:f8:0f:22:55:de:fc:20:ab:01:58:
5f:88:3c:97:b3:30:79:3c:ee:b2:ec:be:4c:8f:0b:f5:c0:22:
39:21:f1:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpwpPf3kem/wIItzBTdBenYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMDRjYTRhOTY2MTYzMWM0ZWM2MTVhM2E2ZDE1ZDIyMDMw
ZGNmNDkwHhcNMjUxMTExMDIwMDUwWhcNMjUxMTEyMDIwMDUwWjAzMTEwLwYDVQQD
EyhkZGU3MDRkMTJjMGJlYjQ0MzA3MzMzZDAyNmQ5NjFkMTlmNTIyM2MwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrZgGDvURMMgV5s4v2pCpjU+CfjM
LzXe5cAqn3+kQWkkqbPr7VLgdJ5p3ALZxpm+zRrwwdSIvaNA6icFhs395lW4vf9S
8W9RtBtwMilQPtzEfII9xayU2FBD1SDMROi5pOn0EuC/AVFaB59FXcfQzFnyhqMN
I+7G2yeJAhHMih1wh8s3qjJTeK8oqmME7hbvXq9eGzhxhuqemSZUzCS2tzaYPrgk
yflloFV7B4JBT8WxIOQUmlnQolzazk/YEEgnz3z+vreDBP5URpKE4EnaTwlaG6T2
zVNVEE6P+GUBL/5r9qi9ODMJR1uVs5Io4RG5AjbQUEtXNFz8Y7RDal4lMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3nBNEsC+tEMHMz0CbZYdGfUiPAMB8GA1UdIwQY
MBaAFGoEykqWYWMcTsYVo6bRXSIDDc9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMt
ODExM2RhNjdlZjc1LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9mYTRlNjktNTc1ZS00NmViLWI5YzMtODExM2RhNjdlZjc1
LzEvYWdUS1NwWmhZeHhPeGhXanB0RmRJZ01OejBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssPhRCdJ
45d7fIEY+mP9sjvjmRjIBLdcplk/F77wHgwJ8R9AzmLAIBj6yJ19TuZnvALEktmc
vmxdefWu266iSeq2ob26pP76+QIfBdpVdsdhWFjDJyeN5Ss9vX07yg5rjuQ1Axag
rhgvkSkk7ASMNxITXYSdxfwVFZXaR+xEKupK+HQFpxkCrbG/Ey+406A7HpR1cOpy
nS12cAJEQx+T/lXP5FlznsPfsODLBL0Ynu2dKvRXPk8bkdlB5iw13PRkloLbZ3g8
iA9j7/k+GveKJ1V0bVF5Cog8YGrxHQCo6QH4DyJV3vwgqwFYX4g8l7MweTzusuy+
TI8L9cAiOSHxuA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:53:38 2025 by rpki-client