Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: i8s8BOUoU2Bwv9poPsk506cZAthbJPuZ0NKmOtkytD4=
Subject key identifier: 7E:52:DE:2F:AD:53:A6:AE:D9:06:92:F6:36:BD:D5:9D:3D:3E:E0:49
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 019A725CE50565FDF41421989C0B71BF1D8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 118F
Signing time: Tue 11 Nov 2025 10:01:21 +0000
Manifest this update: Tue 11 Nov 2025 10:01:21 +0000
Manifest next update: Wed 12 Nov 2025 10:01:21 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: 6iPN56KCZC+aNvC4x349TO3sABJC1w6IYJp/30ZDRz4=)
2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:5c:e5:05:65:fd:f4:14:21:98:9c:0b:71:bf:1d:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Nov 11 10:01:21 2025 GMT
Not After : Nov 12 10:01:21 2025 GMT
Subject: CN=7e52de2fad53a6aed90692f636bdd59d3d3ee049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1f:ff:33:51:e2:35:c3:cf:31:f7:b9:6c:cd:
be:8f:31:f3:e3:65:79:e8:c4:85:99:0e:fe:fd:ef:
42:df:58:a1:bf:bd:a4:4d:8e:d8:3e:3b:65:fd:d8:
be:6f:d7:44:5b:88:82:58:4b:56:3a:52:20:af:1b:
61:2f:8d:c2:96:25:a8:62:92:51:b9:12:d0:73:50:
d8:2e:08:af:87:00:5f:6e:11:09:6f:58:39:b6:1d:
07:ae:fa:fb:15:65:f2:e9:52:b4:ab:c1:1f:15:f3:
5c:c4:ac:14:97:b0:51:27:11:50:1e:54:f5:93:15:
d2:ff:2b:51:b2:34:c4:f9:4d:35:20:61:2e:bd:fd:
4b:62:14:56:fe:21:33:8b:e1:5e:11:bc:a9:28:38:
b5:9d:1e:2e:53:4a:87:74:f2:7e:74:dc:1f:8d:f9:
fb:04:e0:84:77:4e:c1:8e:e8:fb:8c:c9:04:dd:c3:
b1:7c:e8:5d:a5:6e:2a:9f:4c:65:dd:50:53:8f:39:
09:a9:24:04:14:1a:20:c5:65:a7:fc:96:4c:a2:0c:
78:90:15:e4:e7:e4:0b:67:3c:4e:49:b1:e8:87:c2:
e9:42:24:ac:a4:34:86:ef:e7:af:c4:27:28:a5:9a:
50:f6:31:c1:49:f8:26:83:e2:d9:30:50:dc:bc:7b:
fa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:DE:2F:AD:53:A6:AE:D9:06:92:F6:36:BD:D5:9D:3D:3E:E0:49
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:54:15:e9:b6:3e:11:f6:23:1c:76:95:6a:2a:20:a4:fd:d9:
81:57:2c:af:c1:aa:94:e5:6f:ca:24:4e:30:d2:51:3f:92:31:
50:3d:de:c6:dc:89:fc:eb:78:f8:ea:f5:a1:85:d8:b2:f1:13:
d3:36:d6:39:01:eb:ac:66:c7:9c:d3:bd:cd:f8:a3:a9:86:4c:
b5:cc:e9:c6:a4:01:ba:f2:12:73:a6:a1:42:a9:70:88:f0:93:
90:80:18:4a:37:e3:8e:ba:02:1e:50:8c:2b:a8:30:35:0c:cf:
35:38:dd:ad:da:0c:c0:75:e1:d7:c4:59:2a:5e:65:a2:cf:26:
66:f5:64:ed:8a:db:f7:8a:38:61:9c:a4:63:f7:85:72:b2:0a:
ba:4a:66:86:1e:f5:48:80:10:f1:46:71:17:ac:a7:52:7b:28:
b7:86:28:a6:bb:d5:a2:cc:49:19:21:9d:71:1f:4f:91:15:c9:
72:cc:b0:f1:3b:e4:f8:97:6c:e8:0e:ca:ab:69:6c:a8:da:ae:
dd:50:6a:c4:10:42:5e:75:06:04:7b:41:1e:f1:8f:59:d2:a8:
6a:7e:1c:6a:70:47:9c:4d:ab:30:87:ac:b4:ee:9f:31:2f:dc:
d1:d4:94:34:3b:f4:fc:f1:d8:11:5e:92:be:b3:15:75:90:b1:
07:e4:57:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 18:34:22 2025 by rpki-client