Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: /vPWIexpTX1Zj36+g9LMNoV0QZ/302dehPdwNKrGCI0=
Subject key identifier: 4D:77:CA:8F:39:36:51:DF:5B:C2:D1:05:95:DF:F6:23:9C:6C:5B:93
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 019A71B7DEF9D84E0ACE57C46CC0F540CCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:06 +0000
Manifest this update: Tue 11 Nov 2025 07:01:06 +0000
Manifest next update: Wed 12 Nov 2025 07:01:06 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: FZX4bO2f8OZma0CxsIRkfMvOWA6C4yP034RxwnaWVcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:de:f9:d8:4e:0a:ce:57:c4:6c:c0:f5:40:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Nov 11 07:01:06 2025 GMT
Not After : Nov 12 07:01:06 2025 GMT
Subject: CN=4d77ca8f393651df5bc2d10595dff6239c6c5b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:27:ee:8a:12:75:d6:c5:7f:be:46:50:f2:5c:
d4:13:98:18:54:e6:83:17:44:c9:4a:c1:a8:75:b9:
84:5c:18:b0:71:ae:b6:00:2a:53:aa:b0:1a:e2:e0:
2b:61:51:c4:1e:2f:c5:fb:c3:93:1a:fb:06:1a:8f:
93:b2:ef:6a:31:1f:0f:6b:05:86:1c:c3:3d:c0:3e:
90:20:30:a2:71:0a:10:35:b9:8b:1d:47:fa:c9:e6:
e6:b7:22:1f:08:98:ba:78:ce:41:c4:ca:04:71:ac:
fa:de:c9:1f:77:50:b5:cd:89:4b:38:fa:1d:cd:8f:
39:f1:65:d1:72:11:4d:e3:b9:4c:ba:b4:a7:da:e1:
d6:06:d5:e8:9f:e7:f7:18:5c:cf:5e:4d:f3:b6:02:
07:d5:da:08:87:00:b8:3d:35:e9:ce:c0:6f:3d:65:
39:83:63:ec:5e:89:26:a4:85:3f:3e:ee:45:e6:be:
63:ab:03:5b:89:d5:34:13:f8:76:7e:db:fc:af:eb:
c3:ae:3e:7b:b3:7c:d1:c6:f2:45:06:aa:93:0c:20:
4c:12:7e:ba:20:28:d0:d3:52:08:da:95:ff:64:51:
16:79:a4:f1:e0:58:b2:53:11:d0:78:be:50:7e:34:
78:ff:a0:29:65:54:0b:98:fd:d2:c4:0f:a6:ee:4d:
57:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:77:CA:8F:39:36:51:DF:5B:C2:D1:05:95:DF:F6:23:9C:6C:5B:93
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:bf:e2:41:62:3a:a5:3a:b6:e6:31:d8:eb:32:95:ec:ae:
ca:a7:61:c4:b6:3b:ec:04:22:0f:ef:50:52:e4:1e:94:dd:e7:
97:09:43:b8:b1:32:8a:39:59:0b:a6:bc:e6:79:30:34:d7:8a:
45:60:a0:18:a9:00:e2:58:fe:37:dd:ad:77:0f:13:5b:44:16:
79:2a:8c:2b:6b:f1:20:ad:d0:36:af:88:25:30:8f:2d:81:24:
b4:ce:b4:e4:9d:8e:ab:a6:da:d6:c6:28:4b:0e:c9:5e:ac:22:
3e:c9:96:e7:d1:f6:8c:d2:ca:b2:b3:8b:3e:8a:c7:57:23:18:
bc:26:6a:6e:df:29:a9:40:80:88:82:a3:e5:a5:21:41:73:37:
28:01:35:0e:2f:6a:2a:be:3f:d1:0d:71:26:51:9f:97:f3:06:
d9:bc:22:d7:05:e9:1a:4b:9e:cf:1b:64:15:15:43:93:e1:95:
8d:84:ca:e1:52:51:09:87:a5:6e:ae:3a:0b:c4:1f:cd:2f:fa:
26:2b:3e:e7:29:61:1a:e9:50:af:53:5b:ef:a0:9c:78:f1:38:
22:4b:fb:b5:39:87:03:5d:b2:a0:f0:97:5b:75:fa:e3:54:75:
50:bb:0f:3d:88:9c:da:a5:29:fa:ef:20:88:a5:9f:10:bd:49:
f7:c4:8d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:27:42 2025 by rpki-client