Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: MmChqD0k3TR1dZ+wnk3kr4Qz0SpKg972iemAUsQRVGc=
Subject key identifier: E3:62:D7:23:90:47:E9:9E:5B:4A:6F:16:C5:A9:0A:19:33:63:7B:05
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019A71B7ED6D7DE66F4AF15DAE472E596D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 014A
Signing time: Tue 11 Nov 2025 07:01:10 +0000
Manifest this update: Tue 11 Nov 2025 07:01:10 +0000
Manifest next update: Wed 12 Nov 2025 07:01:10 +0000
Files and hashes: 1: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: Y2gj+l0IQGVYiNTFYtAKxn8KfHQqt1WW9nxc9oSG3Vc=)
2: CXxioXubsFD7pT7V3lmEzB9pQwc.roa (hash: ZpaZGDCs2iAXuiTvR6LYq4vr8nzKDY5DnZG4F2J5dxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:ed:6d:7d:e6:6f:4a:f1:5d:ae:47:2e:59:6d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Nov 11 07:01:10 2025 GMT
Not After : Nov 12 07:01:10 2025 GMT
Subject: CN=e362d7239047e99e5b4a6f16c5a90a1933637b05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f2:34:d6:b6:28:6c:b2:8b:e3:77:ad:62:7e:
a9:19:9b:7a:43:01:64:04:3b:81:0d:d5:d4:a7:c7:
92:54:14:93:cb:09:d4:21:ae:0e:d5:88:03:ee:dc:
ff:22:91:13:78:e6:cb:32:85:aa:d5:23:82:6d:e5:
67:b9:7c:5c:ee:7b:34:e1:74:6c:13:77:85:b2:a9:
ad:e2:40:f2:e6:8e:02:7c:f0:17:34:ee:82:04:5d:
5d:60:aa:34:a2:8b:c3:b0:6e:1e:d5:6f:2c:62:4f:
1d:2f:f2:6b:01:02:24:6a:58:e0:ee:90:31:82:8b:
88:dc:76:62:94:73:21:5e:df:10:af:65:6e:c4:b2:
d0:89:10:59:dc:48:b6:c2:8a:04:4f:64:4e:42:d6:
6e:18:d5:c9:cc:1c:61:6f:94:25:db:13:5b:5a:78:
0e:bc:3a:0b:a6:07:55:94:af:10:f5:43:3c:10:05:
4f:ee:7e:9e:89:f2:67:6d:3d:be:3d:88:a3:04:db:
f6:7d:d5:17:96:07:ac:e4:24:ae:4d:b8:0f:61:ea:
46:de:e4:d9:c9:d8:33:33:e1:2a:82:42:74:85:b2:
54:58:e9:9b:89:e8:82:34:71:f0:69:f7:13:56:69:
0a:61:1c:03:d8:f4:20:29:c3:9b:4e:40:46:e9:71:
a5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:62:D7:23:90:47:E9:9E:5B:4A:6F:16:C5:A9:0A:19:33:63:7B:05
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:b7:1e:de:69:fb:a9:fb:22:4a:8f:5b:d7:8a:90:57:1b:2e:
7f:e9:cf:d2:56:0e:4f:29:98:73:cc:bb:34:de:db:fd:fe:93:
eb:cf:e4:a1:fa:2b:64:a2:84:7b:70:99:fe:ca:dd:75:6e:53:
4a:aa:ae:05:0c:90:c2:9e:f6:a3:cb:85:b3:85:30:2b:34:7f:
f2:70:54:80:03:7a:0a:2b:60:0c:ba:84:2a:28:85:a1:4d:11:
ca:78:94:20:de:ae:9b:39:ec:f6:f8:94:85:43:7c:46:3b:9c:
73:ae:3f:78:7f:b7:ac:66:a7:d2:35:ab:8b:d2:22:25:48:bc:
2b:ca:22:dd:94:9e:2e:62:11:67:90:ef:83:f7:e7:b2:5d:53:
56:c7:4c:f8:62:91:87:88:8c:3c:e5:ef:82:79:96:ad:bf:25:
37:bf:65:1f:06:4f:41:e9:dc:03:be:6a:41:63:fb:25:b6:ba:
74:61:e9:3f:bd:62:21:cd:32:d3:96:6a:02:03:9d:95:86:97:
f8:de:05:90:7b:99:74:ab:91:58:d7:f0:0a:2f:e0:9c:5e:ee:
69:ed:95:26:94:7d:76:96:40:0a:9a:dd:26:14:da:e2:ba:f9:
e3:24:ee:24:9b:d0:d9:f1:6d:e6:8a:ec:a2:18:86:d4:62:14:
7f:5d:c2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:09:40 2025 by rpki-client