Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: YaSJWeh73w0EvGOuuQ0LG5PftkkObw7OJmDMSJ4NwPM=
Subject key identifier: 02:19:CB:48:C3:01:5C:75:9A:3A:66:9C:F0:B0:AE:4E:69:5F:FB:41
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 019A7113512A70B5A8CC66F8B94BF7CC0CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 1553
Signing time: Tue 11 Nov 2025 04:01:22 +0000
Manifest this update: Tue 11 Nov 2025 04:01:22 +0000
Manifest next update: Wed 12 Nov 2025 04:01:22 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: gXjx5o1pAC8cjh+TD7a4BfClKk7+uoDWi9lgPVPXWPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:51:2a:70:b5:a8:cc:66:f8:b9:4b:f7:cc:0c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Nov 11 04:01:22 2025 GMT
Not After : Nov 12 04:01:22 2025 GMT
Subject: CN=0219cb48c3015c759a3a669cf0b0ae4e695ffb41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:18:93:a3:88:5e:e9:2b:59:8d:a5:15:36:53:
63:a9:fd:fa:88:28:fb:04:ee:83:77:fd:0a:a2:f7:
da:54:85:3c:bf:d0:e8:03:68:a7:80:b8:2c:be:e9:
1c:6e:04:cf:6f:a3:cb:2a:24:91:af:5a:8a:8c:a4:
9d:75:1d:24:8b:de:9b:b2:51:95:3a:e9:b3:cd:92:
91:6b:57:37:20:fa:1c:89:27:b4:f2:b4:22:39:a1:
d7:20:51:7e:3d:1d:57:46:8e:7b:43:e1:9a:03:44:
e1:89:b0:30:96:ca:c5:59:3c:2b:06:53:ab:93:0c:
f9:07:a8:ab:5f:44:05:cc:31:01:08:b7:99:78:ff:
3c:7f:0f:9f:bf:4c:9e:28:aa:30:18:d8:73:62:14:
14:40:0f:ce:06:73:5a:5b:1f:58:99:cd:a7:1c:32:
4c:89:db:bc:d4:41:b1:77:1e:12:11:fb:a5:fc:83:
6d:31:1d:a5:64:52:48:63:ba:f0:7c:0a:94:f9:77:
51:31:be:fe:97:fb:69:8c:d6:9f:bb:3e:ea:ee:89:
4e:6b:96:ca:a6:e8:5c:fb:92:09:1c:8d:36:bf:6d:
20:b2:02:dc:c7:28:30:2a:74:bb:ec:c9:fb:48:b2:
92:c1:50:92:2b:9b:6d:50:71:6b:92:18:30:30:03:
64:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:19:CB:48:C3:01:5C:75:9A:3A:66:9C:F0:B0:AE:4E:69:5F:FB:41
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:0f:ee:9c:d5:5b:1b:95:af:ed:26:4a:41:b6:4f:9a:3c:cb:
18:6a:4f:bb:bb:f9:04:0a:3f:00:9b:34:08:af:3f:b0:8e:92:
c5:4c:b4:54:4b:40:85:8a:30:34:10:a9:a7:b0:01:82:d9:02:
0d:3b:34:95:1c:c8:9b:24:67:17:4c:7f:9a:52:50:7a:44:60:
c7:7f:91:88:bc:f0:ba:c0:23:54:0b:cf:96:46:6f:c7:c7:65:
a0:dc:f8:eb:e0:b7:57:91:1f:e3:58:3d:72:ff:0d:6b:96:0f:
33:49:51:8c:a5:7a:07:8d:f1:63:c9:36:b9:c2:d7:55:d1:2d:
9f:38:ba:d0:c7:dd:46:79:93:87:81:ed:74:c9:1f:a0:0d:ee:
cb:76:89:b4:ee:f4:4e:60:c9:e5:3b:29:0e:a5:7b:a8:19:00:
5d:83:99:28:bc:a7:59:2d:a2:02:73:1e:52:48:f7:37:69:4f:
d3:ac:4c:83:1f:38:f0:92:5d:96:90:fa:f3:00:97:22:b2:5e:
bf:8f:44:e7:b8:df:69:9c:0f:e3:c8:ee:c3:21:19:6b:99:68:
5c:5d:35:8a:90:c7:61:e8:c1:09:0d:75:7a:51:72:85:c8:98:
37:66:95:1a:9c:2d:50:7d:c2:c1:06:0c:19:e8:1c:84:fe:70:
78:06:38:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxE1EqcLWozGb4uUv3zAytMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw
MWQ1YjUwHhcNMjUxMTExMDQwMTIyWhcNMjUxMTEyMDQwMTIyWjAzMTEwLwYDVQQD
EygwMjE5Y2I0OGMzMDE1Yzc1OWEzYTY2OWNmMGIwYWU0ZTY5NWZmYjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7hiTo4he6StZjaUVNlNjqf36iCj7
BO6Dd/0KovfaVIU8v9DoA2ingLgsvukcbgTPb6PLKiSRr1qKjKSddR0ki96bslGV
OumzzZKRa1c3IPociSe08rQiOaHXIFF+PR1XRo57Q+GaA0ThibAwlsrFWTwrBlOr
kwz5B6irX0QFzDEBCLeZeP88fw+fv0yeKKowGNhzYhQUQA/OBnNaWx9Ymc2nHDJM
idu81EGxdx4SEful/INtMR2lZFJIY7rwfAqU+XdRMb7+l/tpjNafuz7q7olOa5bK
puhc+5IJHI02v20gsgLcxygwKnS77Mn7SLKSwVCSK5ttUHFrkhgwMANkxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIZy0jDAVx1mjpmnPCwrk5pX/tBMB8GA1UdIwQY
MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt
MjZjOWY5OTMyYmJjLzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj
LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPQ/unNVb
G5Wv7SZKQbZPmjzLGGpPu7v5BAo/AJs0CK8/sI6SxUy0VEtAhYowNBCpp7ABgtkC
DTs0lRzImyRnF0x/mlJQekRgx3+RiLzwusAjVAvPlkZvx8dloNz46+C3V5Ef41g9
cv8Na5YPM0lRjKV6B43xY8k2ucLXVdEtnzi60MfdRnmTh4HtdMkfoA3uy3aJtO70
TmDJ5TspDqV7qBkAXYOZKLynWS2iAnMeUkj3N2lP06xMgx848JJdlpD68wCXIrJe
v49E57jfaZwP48juwyEZa5loXF01ipDHYejBCQ11elFyhciYN2aVGpwtUH3CwQYM
GegchP5weAY4RQ==
-----END CERTIFICATE-----
Generated at Tue Nov 11 14:20:25 2025 by rpki-client