Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft (raw, json)
Hash identifier: OMywvTeXKmjfCw5lbnF3uUI7LE97RvilD7HBE/7aWY8=
Subject key identifier: F3:A6:EA:4F:3E:2D:04:65:FB:15:3D:85:7C:FF:84:84:23:CC:65:2A
Authority key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Certificate issuer: /CN=00642b607b94a143ff41c554c913bd5a651f8c05
Certificate serial: 019A1E07E4CA24BAF95910342DD9E0D963D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
Manifest number: 16F8
Signing time: Sun 26 Oct 2025 01:00:25 +0000
Manifest this update: Sun 26 Oct 2025 01:00:25 +0000
Manifest next update: Mon 27 Oct 2025 01:00:25 +0000
Files and hashes: 1: 1-BqPUmwLhiY4Yhx0LfgUMnThGxA.roa (hash: K4n04vrpGIt/U+DsbhlaysS9N4rLWgryrsGr6i9waUc=)
2: 1nS0uX-20m5q3S5s2ax-hzltY7M.roa (hash: fPbs3orCk/9uH211HxlkX/O3dh9FAzUrv0hFLfs7bIc=)
3: 2MWwWUq-nPd7Gzhb6Z0417winfw.roa (hash: JU/lw4BXm/KV3NT2WmLhKrIC3zR0XBpPPnNeGokCO90=)
4: AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl (hash: vEOVeRaInPWrXTykTGA10nLhSj/nH89Ym1v5YFvTv5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 19:59:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1e:07:e4:ca:24:ba:f9:59:10:34:2d:d9:e0:d9:63:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Validity
Not Before: Oct 26 01:00:25 2025 GMT
Not After : Oct 27 01:00:25 2025 GMT
Subject: CN=f3a6ea4f3e2d0465fb153d857cff848423cc652a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:45:5b:2b:6e:a2:1c:98:d9:0d:cc:de:35:be:
19:c6:c3:34:cf:98:0d:2e:8f:d0:5c:37:d9:40:d3:
46:d4:fb:e4:29:53:13:ae:f5:7e:ba:e2:85:30:b9:
ae:61:2b:75:a1:66:be:d8:2c:29:f3:77:34:f8:f0:
43:0d:ff:da:ef:af:23:04:78:13:08:fb:0b:47:42:
95:4c:8a:34:70:99:c0:97:36:7a:5a:25:18:0f:f0:
66:86:cb:ad:0c:18:9d:2c:3c:8f:20:54:64:08:b3:
fa:a3:ce:bb:de:47:f8:a5:48:d0:1d:d5:a1:35:32:
15:9b:82:08:08:b2:51:de:fb:75:45:26:76:33:d8:
a5:c7:f3:72:d9:aa:3e:a4:79:fd:8b:ab:09:66:79:
0c:e4:f3:d1:3c:1a:0d:19:21:1b:00:a2:c9:e5:91:
b4:94:f3:20:ba:bc:17:41:3d:41:85:84:73:e3:6f:
a1:be:e1:cd:ad:43:c3:b8:08:c3:4a:75:b8:fb:70:
08:6c:84:a2:7b:f5:c7:f6:a4:e0:b8:5e:70:45:fb:
06:da:0e:7c:52:93:7c:3b:b2:a0:dc:c8:e0:7a:e6:
a9:13:5b:e9:60:f6:e7:9c:f2:a2:fc:81:83:b6:63:
d5:3b:97:fb:f6:13:c9:6f:e0:12:b5:66:13:53:c5:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:A6:EA:4F:3E:2D:04:65:FB:15:3D:85:7C:FF:84:84:23:CC:65:2A
X509v3 Authority Key Identifier:
keyid:00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:15:66:f8:08:73:0d:00:a2:6d:59:48:8d:a7:e3:3f:c0:41:
42:b7:7c:de:0d:bc:2d:21:6c:56:12:b7:6a:b6:f4:66:c2:1c:
d3:66:0d:b9:b7:05:e8:e8:96:dd:34:27:ad:77:ab:bc:98:ef:
22:d8:24:81:ab:ca:93:07:b1:77:45:05:8e:fe:81:88:76:5e:
22:14:1c:07:4e:00:6a:72:6b:5f:18:c5:85:55:2d:a0:70:85:
1d:56:c7:70:1a:d8:9f:cd:59:df:20:96:8a:5f:37:14:43:3d:
8e:f6:78:07:86:10:83:03:2f:3b:a7:49:8a:8e:29:52:43:66:
1c:2a:22:b0:f0:a4:d8:39:37:02:83:13:e2:c2:82:d9:9b:7d:
1c:b3:42:54:a9:4b:07:13:08:5c:ab:75:1e:b6:6f:01:a2:e9:
8a:58:71:0d:82:0a:bb:ab:7f:fb:7f:e3:f6:c3:c3:59:4a:a2:
d0:43:b3:dc:52:d6:7c:82:a6:32:a4:af:23:07:71:fd:d0:d3:
f2:8e:3d:83:0b:18:8a:ac:81:31:49:4c:0d:3f:e4:67:30:ae:
94:ee:b4:6f:6d:cc:26:5e:eb:95:d5:52:59:12:dc:e6:46:fe:
05:aa:df:52:ab:17:f8:be:40:85:f9:1c:c8:7c:f4:64:e3:51:
df:ea:c8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 03:22:39 2025 by rpki-client