Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
File: ag1malTV4bw1XA1yUDpFj8Do4Gw.mft (raw, json)
Hash identifier: VVkKp4Fu9kQNIMTYCpMy10sNJ3RNMek5r14f5JMvxgY=
Subject key identifier: 26:37:88:E1:50:7E:AB:46:9A:AB:C6:D3:60:CB:09:8D:51:E4:7B:18
Authority key identifier: 6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
Certificate issuer: /CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Certificate serial: 0199FD34979E265631A385617126A9779126
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 16:01:46 +0000
Manifest this update: Sun 19 Oct 2025 16:01:46 +0000
Manifest next update: Mon 20 Oct 2025 16:01:46 +0000
Files and hashes: 1: Zbu9lV-TXRr1mjPabkdbQi-tc2k.roa (hash: L0pLG2iq3DWnmdVA1LNHGmiPWiH4T8eZ9Q5L7k/ukzQ=)
2: ag1malTV4bw1XA1yUDpFj8Do4Gw.crl (hash: o7XPZVgXwbjtzInh6mavQOZr1AhAnLztPeBT+67WQvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:97:9e:26:56:31:a3:85:61:71:26:a9:77:91:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0d666a54d5e1bc355c0d72503a458fc0e8e06c
Validity
Not Before: Oct 19 16:01:46 2025 GMT
Not After : Oct 20 16:01:46 2025 GMT
Subject: CN=263788e1507eab469aabc6d360cb098d51e47b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:05:9b:71:42:ec:0c:74:37:8c:e9:da:9d:
0f:aa:eb:8f:0a:91:be:3b:83:17:6e:d4:61:6c:d9:
ee:1d:1c:d3:54:4b:b8:42:e0:bc:36:55:bf:6c:87:
be:61:3b:cb:15:19:b0:23:a0:d9:b5:4d:43:32:38:
b3:76:7a:82:a0:20:79:78:c2:de:50:9b:17:c5:9d:
13:7c:dd:7b:a8:47:95:90:33:11:06:ab:d6:c8:18:
ab:89:1d:3d:55:1d:6b:d1:14:41:ca:5c:b9:8c:4d:
7f:79:a6:60:c6:b3:12:a8:e4:e2:b3:ed:f2:89:1c:
db:a1:ff:8b:3b:77:e7:74:20:1b:88:ce:bc:93:e4:
08:b3:5e:27:17:cf:2e:04:e5:0b:72:96:f8:09:f0:
a3:85:dc:bc:be:e6:6e:90:52:e2:80:fc:f1:5b:63:
61:95:c0:0a:07:b6:7e:98:b9:58:b4:45:97:1c:47:
25:f3:39:41:da:2d:5d:71:c5:d0:5a:23:9c:db:04:
61:d7:a0:02:1e:47:36:5f:46:62:6a:15:1c:43:be:
da:0a:20:10:f5:81:ce:77:8d:87:68:f4:6e:8a:86:
22:0f:1b:15:4b:67:59:ba:82:10:1a:4c:1c:e8:ac:
0f:d9:a7:21:19:42:e8:d6:69:92:3b:84:d6:c2:ac:
63:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:37:88:E1:50:7E:AB:46:9A:AB:C6:D3:60:CB:09:8D:51:E4:7B:18
X509v3 Authority Key Identifier:
keyid:6A:0D:66:6A:54:D5:E1:BC:35:5C:0D:72:50:3A:45:8F:C0:E8:E0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag1malTV4bw1XA1yUDpFj8Do4Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/ae842b-4cc7-4e07-9827-a82ad54defbc/1/ag1malTV4bw1XA1yUDpFj8Do4Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:a4:ac:67:39:f8:f8:cf:62:22:e1:0f:fb:c3:51:9e:56:d1:
3d:48:00:88:dd:22:a5:38:cf:c4:a4:98:1c:00:ba:43:57:db:
3d:2d:e1:6f:c6:41:43:5b:b1:a4:fe:56:7b:b2:41:00:f0:55:
84:24:bb:ae:56:6c:92:74:af:91:2f:17:60:83:76:8f:4b:ac:
8e:29:91:ce:69:ae:f2:ba:45:9e:90:ba:ff:02:00:35:59:16:
cb:2b:9e:a8:98:12:1f:9b:05:8d:31:b6:76:44:f6:e7:5f:b9:
aa:24:e1:a3:ad:7e:f1:17:74:cb:63:56:5e:d8:bb:c4:6f:ca:
dd:84:51:3a:57:cd:6f:72:1b:74:24:5c:8f:da:2a:e0:72:6d:
e0:63:81:fe:16:10:33:0a:77:ea:9e:b6:de:d1:8d:51:f9:6e:
44:0e:ec:c4:ee:7a:09:29:15:0e:57:35:51:48:49:ac:7e:61:
c4:20:3c:4b:9e:d9:57:82:c1:50:c8:1d:ad:34:cb:d9:d0:eb:
3b:f2:b9:fd:a9:52:0b:23:04:04:81:46:37:f2:91:b7:84:77:
cb:6b:5b:5d:a5:80:86:4c:ed:2a:a7:8c:bc:66:45:af:4f:57:
e9:0f:d6:c6:b7:29:0c:a3:3b:d3:7c:2d:ec:41:b3:ef:60:c9:
e2:b7:4f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:27:49 2025 by rpki-client