Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: 9YKS3K+9iEY+c3KJvfDmZmP25D8taaqfCM3q++0l+zI=
Subject key identifier: 11:A5:04:0A:FD:3A:63:C8:34:3B:8D:DD:38:66:E1:72:D9:A3:91:20
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0198C610C626D4EC93105CE84A1601551B03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 0936
Signing time: Wed 20 Aug 2025 06:00:44 +0000
Manifest this update: Wed 20 Aug 2025 06:00:44 +0000
Manifest next update: Thu 21 Aug 2025 06:00:44 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: b8KvtApFXU+bqpzxWJCrJjU2/HXFsFlb1ZZtQfoPKk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c6:10:c6:26:d4:ec:93:10:5c:e8:4a:16:01:55:1b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Aug 20 06:00:44 2025 GMT
Not After : Aug 21 06:00:44 2025 GMT
Subject: CN=11a5040afd3a63c8343b8ddd3866e172d9a39120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:17:44:b9:07:41:11:fe:c3:6e:31:d5:66:23:
d3:c7:5a:d8:14:85:ea:65:de:59:53:f4:92:43:df:
6f:92:28:c3:6d:b4:86:3a:bc:3f:fa:e3:5b:3b:8e:
68:9d:7d:5b:4e:86:15:da:f8:bd:9f:33:61:34:97:
87:2c:42:5e:51:2f:06:6a:0e:6a:44:b8:f5:c6:79:
46:20:de:9e:6d:93:7d:59:e3:d3:c5:1f:55:3d:0d:
2d:5d:57:46:73:36:69:eb:ec:78:e3:90:82:10:e4:
3c:fb:83:88:a7:c1:93:aa:b4:56:26:e8:57:9f:81:
dc:55:88:a0:3a:9b:23:fa:ce:36:4f:e1:bc:b6:af:
a7:d5:3c:06:ba:11:28:42:2d:25:4c:8d:a9:35:06:
e1:78:3e:ef:5f:ea:81:2f:88:4e:1f:b8:b1:3f:ff:
0f:25:1d:e7:05:5e:40:42:14:10:d8:78:7c:d3:27:
bf:cf:92:60:f7:ad:e3:84:30:cd:9c:2a:51:19:4b:
2e:d2:be:a8:49:50:48:0c:02:6e:47:0e:b9:65:42:
41:41:a6:4d:26:69:12:16:45:e7:24:80:74:be:5a:
da:ee:71:48:16:11:df:06:f8:90:d7:cd:eb:4f:a8:
da:6e:1a:02:56:1c:8f:8c:63:34:1d:93:13:47:8f:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A5:04:0A:FD:3A:63:C8:34:3B:8D:DD:38:66:E1:72:D9:A3:91:20
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e2:86:d7:a8:14:40:df:da:4f:41:54:70:93:54:97:92:43:
72:f3:dd:d8:b3:6e:4d:4e:0c:ab:5c:90:7d:ef:c1:1f:07:6f:
29:c5:9c:78:0e:10:91:4e:84:2d:c5:a0:76:9d:3d:8f:6a:bd:
8d:9b:59:4f:eb:04:bd:79:47:33:d6:8e:c4:5c:89:d6:01:c7:
56:8b:89:0d:4a:69:9e:4c:25:dc:01:2c:70:56:cd:13:25:5b:
c3:c2:02:0d:25:55:fb:f5:35:f0:7d:ed:10:ab:60:2a:a5:64:
cf:3f:99:a6:3a:6e:b4:ad:7a:b8:80:2f:42:0f:4d:db:dd:25:
15:26:20:11:ba:4a:3d:ee:4f:2e:ab:c5:0e:8a:be:da:56:76:
18:7a:bb:48:f1:85:06:eb:9c:21:8d:37:fb:83:3c:17:75:25:
93:c3:27:5a:9a:15:55:da:84:ad:dc:0f:83:6f:7a:0e:26:35:
82:2b:da:91:bc:d0:94:e0:ea:11:00:4b:06:5d:72:1b:c7:10:
8b:43:f1:4c:66:29:4c:c4:ca:cb:fe:d4:57:56:43:41:ca:15:
35:90:12:3c:6b:82:ba:46:dd:55:df:c3:14:79:4e:b1:e1:dd:
09:eb:7a:95:ba:6b:4f:26:aa:da:ba:bd:af:75:36:7b:b6:32:
63:11:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:26:03 2025 by rpki-client