Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
File: aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft (raw, json)
Hash identifier: sS3WJwidkW5fXzAex5SaROW3844wWFBkTy/u2Ikx62c=
Subject key identifier: 65:C5:6E:29:D1:FD:E4:16:27:B5:19:EB:68:E7:30:1E:95:6A:A7:A5
Authority key identifier: 68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
Certificate issuer: /CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Certificate serial: 0199FB7CE1B6E6968BD41C965C409B82ED8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
Manifest number: 08AC
Signing time: Sun 19 Oct 2025 08:01:29 +0000
Manifest this update: Sun 19 Oct 2025 08:01:29 +0000
Manifest next update: Mon 20 Oct 2025 08:01:29 +0000
Files and hashes: 1: 5MKVHwP5QACbDwSUJKA2GW7sHnQ.roa (hash: iXzFw4W5Foz0uwg9MMW+CW99Q/qBQogltnHgfr+P8PQ=)
2: MTrzAX_D8XgoMN3mTBa0ASkLO-s.roa (hash: 5xLIJUhiZ8b7rVLgmWHwi35aSAKsu4l83lIArXRkd8w=)
3: aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl (hash: zMGtHc2eykfDy52HaJqwmPxvNEOU1PFJCysXBgSHg5w=)
4: zBSuOK6TSZdyfy80PgMlJMzpxoY.roa (hash: fCR2rdLvuL4emdZ++ZNvy3Kaqpga8geFfxEmhxpqkvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:7c:e1:b6:e6:96:8b:d4:1c:96:5c:40:9b:82:ed:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68637081ca7c2eba41010abeaad64a7c61f6a113
Validity
Not Before: Oct 19 08:01:29 2025 GMT
Not After : Oct 20 08:01:29 2025 GMT
Subject: CN=65c56e29d1fde41627b519eb68e7301e956aa7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:fc:2d:f9:8d:ad:2b:44:eb:7e:23:c7:fd:
29:67:dc:1a:81:4d:d0:5c:6d:e7:68:62:09:fd:34:
12:da:f3:a7:4b:6a:eb:f6:e9:57:3a:bb:d0:0e:e3:
a0:d6:a7:fd:53:4b:f7:75:4d:1e:6e:af:6d:e5:9f:
12:b8:55:b3:c2:90:2b:b2:ae:ef:5d:ae:56:7a:1a:
78:fe:30:c9:ae:58:a1:f4:4e:52:6d:c4:e6:6e:c4:
27:d3:09:6c:56:b7:24:27:20:f6:fd:51:ca:65:e7:
a4:f9:d6:0c:29:42:b0:43:52:bd:0a:e8:71:04:0b:
de:8b:2c:67:bd:f0:eb:80:ff:ae:b7:60:ae:7f:3a:
f6:b2:6b:ac:21:f9:e1:22:8f:82:4a:9b:9a:f9:b5:
86:85:71:de:68:59:0e:aa:a9:74:a7:fe:fa:98:56:
ca:1f:35:b3:4c:4d:75:53:09:4e:95:5b:49:34:e9:
72:6d:22:fd:5f:15:43:bd:ee:3f:7a:39:65:ba:82:
70:af:34:b0:9d:c0:cd:35:09:46:63:db:4c:2f:79:
e3:95:b2:de:31:e8:51:ff:f4:5d:c7:7d:5e:de:2a:
b5:5d:ee:63:51:0c:0e:1a:00:52:e0:00:b9:bd:54:
ac:d6:bc:63:3d:15:4b:7e:8a:e1:ac:43:37:bd:24:
5b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C5:6E:29:D1:FD:E4:16:27:B5:19:EB:68:E7:30:1E:95:6A:A7:A5
X509v3 Authority Key Identifier:
keyid:68:63:70:81:CA:7C:2E:BA:41:01:0A:BE:AA:D6:4A:7C:61:F6:A1:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGNwgcp8LrpBAQq-qtZKfGH2oRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6f3269-587d-4b87-8d3a-e6679e7b795a/1/aGNwgcp8LrpBAQq-qtZKfGH2oRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:34:76:cc:dd:c2:41:f7:36:9b:ca:f5:81:8e:c6:c3:ed:b2:
ae:32:dd:b9:76:e6:c7:f0:29:c8:7a:f0:16:96:79:8b:c1:db:
8f:83:6f:39:09:5f:84:c7:21:97:c7:ba:df:88:55:79:c8:10:
70:c3:a1:96:15:80:d2:61:27:e4:e5:a7:12:ba:5f:e7:5e:fb:
0e:5f:12:f6:52:76:39:61:30:c1:ab:49:43:2a:6e:30:c3:8c:
61:30:05:b5:61:ab:bd:6c:5f:1e:e5:a5:20:fe:69:5c:63:48:
f5:aa:b3:21:69:fe:5c:5c:dc:0a:ad:85:94:b8:ff:ec:36:41:
95:68:4e:86:8e:a6:fd:58:e9:d8:9c:6f:e8:01:d9:72:9a:81:
01:ac:7c:12:6f:51:82:d0:57:90:cc:be:86:01:f1:fa:f4:e8:
4a:d1:15:63:40:a3:8e:cd:70:e0:b5:f7:70:5c:8c:f1:2c:9e:
90:25:b6:d4:21:86:0b:b6:8b:8f:34:ec:3a:a9:b8:94:0c:ad:
4d:c3:38:2b:1a:60:33:c4:49:ad:d3:79:52:47:44:0f:66:3f:
8b:6b:15:1e:ff:35:20:a6:eb:e5:5e:22:5f:8f:6e:70:66:24:
10:59:ef:91:64:bd:02:63:ab:71:b5:40:b4:2b:4f:22:a5:cd:
f4:61:4d:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn7fOG25paL1ByWXECbgu2MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjM3MDgxY2E3YzJlYmE0MTAxMGFiZWFhZDY0YTdjNjFm
NmExMTMwHhcNMjUxMDE5MDgwMTI5WhcNMjUxMDIwMDgwMTI5WjAzMTEwLwYDVQQD
Eyg2NWM1NmUyOWQxZmRlNDE2MjdiNTE5ZWI2OGU3MzAxZTk1NmFhN2E1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQj8LfmNrStE634jx/0pZ9wagU3Q
XG3naGIJ/TQS2vOnS2rr9ulXOrvQDuOg1qf9U0v3dU0ebq9t5Z8SuFWzwpArsq7v
Xa5Wehp4/jDJrlih9E5SbcTmbsQn0wlsVrckJyD2/VHKZeek+dYMKUKwQ1K9Cuhx
BAveiyxnvfDrgP+ut2Cufzr2smusIfnhIo+CSpua+bWGhXHeaFkOqql0p/76mFbK
HzWzTE11UwlOlVtJNOlybSL9XxVDve4/ejlluoJwrzSwncDNNQlGY9tML3njlbLe
MehR//Rdx31e3iq1Xe5jUQwOGgBS4AC5vVSs1rxjPRVLforhrEM3vSRbgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXFbinR/eQWJ7UZ62jnMB6VaqelMB8GA1UdIwQY
MBaAFGhjcIHKfC66QQEKvqrWSnxh9qETMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2Et
ZTY2NzllN2I3OTVhLzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC82ZjMyNjktNTg3ZC00Yjg3LThkM2EtZTY2NzllN2I3OTVh
LzEvYUdOd2djcDhMcnBCQVFxLXF0WktmR0gyb1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTR2zN3C
Qfc2m8r1gY7Gw+2yrjLduXbmx/ApyHrwFpZ5i8Hbj4NvOQlfhMchl8e634hVecgQ
cMOhlhWA0mEn5OWnErpf5177Dl8S9lJ2OWEwwatJQypuMMOMYTAFtWGrvWxfHuWl
IP5pXGNI9aqzIWn+XFzcCq2FlLj/7DZBlWhOho6m/Vjp2Jxv6AHZcpqBAax8Em9R
gtBXkMy+hgHx+vToStEVY0Cjjs1w4LX3cFyM8SyekCW21CGGC7aLjzTsOqm4lAyt
TcM4KxpgM8RJrdN5UkdED2Y/i2sVHv81IKbr5V4iX49ucGYkEFnvkWS9AmOrcbVA
tCtPIqXN9GFN1A==
-----END CERTIFICATE-----
Generated at Sun Oct 19 16:08:32 2025 by rpki-client