Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: AP+z8fIVeZKv7JsbTRV5ZCemVLVHrd9mETnrMOU73cQ=
Subject key identifier: BC:71:0F:26:EB:73:37:26:73:BF:DE:40:3A:84:EB:9B:93:92:E5:FA
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 019923A07A85441209A5640CAE244E455A80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 9D
Signing time: Sun 07 Sep 2025 10:02:23 +0000
Manifest this update: Sun 07 Sep 2025 10:02:23 +0000
Manifest next update: Mon 08 Sep 2025 10:02:23 +0000
Files and hashes: 1: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: AMQxQkGKpjuxGoXGw1lTS1CWZiBBbwRrSuMpWc5KbPI=)
2: CXxioXubsFD7pT7V3lmEzB9pQwc.roa (hash: ZpaZGDCs2iAXuiTvR6LYq4vr8nzKDY5DnZG4F2J5dxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:7a:85:44:12:09:a5:64:0c:ae:24:4e:45:5a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Sep 7 10:02:23 2025 GMT
Not After : Sep 8 10:02:23 2025 GMT
Subject: CN=bc710f26eb73372673bfde403a84eb9b9392e5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:96:e8:57:5a:6c:f9:da:41:a8:5d:f9:d1:fb:
67:be:c7:61:af:6d:bd:ca:ac:c2:b8:d0:bf:20:3c:
f5:07:95:3c:57:d3:18:98:5b:4f:62:97:cc:e3:18:
ff:8d:97:96:5d:35:64:de:a9:d5:ae:51:1b:3c:b4:
05:7f:41:dd:be:5b:a8:83:8c:33:35:1f:24:3b:05:
d3:d6:fe:56:22:4d:e7:9b:64:64:9a:3b:73:4a:6d:
6a:55:8c:65:7c:a5:dc:0a:62:72:76:24:88:e5:a8:
18:86:eb:a2:1f:31:dc:44:4c:32:d5:89:88:af:d9:
8c:71:17:38:cb:6e:f9:88:5b:c0:ae:2f:d5:a3:f4:
6b:45:5e:cc:c4:49:0a:4e:1a:3b:13:80:95:51:58:
3c:81:5f:6b:a3:51:72:d0:7a:62:70:fb:a9:5f:43:
ac:cb:29:ae:4b:20:39:c8:b0:5c:d3:4a:70:58:f8:
4d:7a:5a:d0:8f:e9:a7:d7:ab:54:7b:09:11:fa:c9:
fa:ae:d3:77:35:10:e8:87:6e:6d:ba:20:74:aa:41:
87:00:e2:e7:d5:8c:a6:97:0e:ab:5f:5f:2a:6a:7c:
52:80:dc:86:44:5d:4d:81:5d:0c:39:05:d3:6b:ea:
9e:30:3a:02:b9:ff:f3:c7:4d:d7:f5:1a:19:26:27:
0d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:71:0F:26:EB:73:37:26:73:BF:DE:40:3A:84:EB:9B:93:92:E5:FA
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ba:c9:c4:93:7d:2b:9f:cb:9b:02:94:3a:c8:8f:a7:93:7c:
da:b2:72:3d:73:86:ff:26:7b:2a:43:78:1b:11:74:2b:76:5a:
fd:73:1e:b3:b2:95:97:2c:23:33:3c:6e:85:18:3d:46:3f:99:
f7:a8:67:44:47:5e:0b:d3:5c:28:b4:90:d4:07:a4:80:34:bb:
cb:1b:c2:3c:5f:90:0c:03:f9:67:77:bd:7e:f3:38:d6:3e:39:
69:3c:84:74:33:5a:e6:7c:1b:18:35:7e:1d:15:27:6f:3d:a6:
43:e2:31:1c:63:ea:cb:bc:39:aa:81:ec:f5:d8:12:7b:1e:fc:
07:9a:20:24:8b:53:74:e2:b9:59:79:d5:4b:dd:3c:21:0c:65:
43:1d:d4:ad:64:d4:88:3c:0d:7a:e8:de:9b:99:39:5f:3b:78:
34:5a:8b:19:9a:44:3e:38:b7:56:d2:c2:38:e6:67:c9:e5:bf:
3b:13:c8:47:43:02:64:87:b4:8d:ad:52:df:b6:9d:3a:db:af:
52:26:67:89:35:7e:20:37:6a:5f:20:f1:b1:ae:2f:e7:b4:48:
7a:51:0a:cf:40:ad:7f:78:b7:7c:21:1f:94:f3:56:65:55:8a:
04:21:5a:0d:01:63:a7:9c:50:fa:06:ed:c0:97:81:3c:9a:9a:
27:6f:7f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:36 2025 by rpki-client