Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
File: agTKSpZhYxxOxhWjptFdIgMNz0k.mft (raw, json)
Hash identifier: zPLrZmdN5K4ullC6rhyyhh0kX6BYMDIZnrHyX0++6lo=
Subject key identifier: C9:E3:12:8E:23:25:01:77:73:57:1E:9F:7B:69:68:6B:BB:A2:F7:EE
Authority key identifier: 6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
Certificate issuer: /CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Certificate serial: 0199FCC660204E20CD91695C4E63DAFAC425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 14:01:22 +0000
Manifest this update: Sun 19 Oct 2025 14:01:22 +0000
Manifest next update: Mon 20 Oct 2025 14:01:22 +0000
Files and hashes: 1: 1y00I_lr4dZnPswtulIObxWKqNI.roa (hash: B9wbQnXjTiDMVW+/AnVX4UUAGDb3Y2f5WOlbfFrBXa8=)
2: agTKSpZhYxxOxhWjptFdIgMNz0k.crl (hash: IyersPOZUl9Kvtj6vvK1qlmhhWCaQe/80fuCJnyuxWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:60:20:4e:20:cd:91:69:5c:4e:63:da:fa:c4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a04ca4a9661631c4ec615a3a6d15d22030dcf49
Validity
Not Before: Oct 19 14:01:22 2025 GMT
Not After : Oct 20 14:01:22 2025 GMT
Subject: CN=c9e3128e2325017773571e9f7b69686bbba2f7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:40:59:a9:83:bc:16:01:ee:39:24:04:35:d5:
60:16:5e:2a:88:6f:4a:59:de:e4:10:64:ac:0a:52:
50:d0:61:fb:12:7a:b9:38:a0:ed:09:50:3e:45:1f:
5f:01:0a:50:4c:c0:7d:62:3c:36:f9:51:c4:0c:76:
79:c5:b3:8c:ad:7b:49:02:5a:4a:b7:12:26:19:bc:
8a:38:3a:a0:28:23:29:8d:00:94:ab:ac:79:80:cf:
21:51:d0:f3:7a:07:6a:32:69:a0:8b:ed:e3:b6:b7:
ed:ba:ba:55:7d:13:7d:b2:e0:d1:ff:ac:50:e8:41:
fb:c5:1b:75:5f:c1:b6:18:ba:da:ca:17:8f:39:b4:
5b:45:b5:a8:8b:29:30:7e:09:3a:fe:91:d4:de:97:
a5:2d:f5:fd:55:f8:f9:39:6f:a2:a4:9c:86:73:18:
f6:b5:22:d3:41:fc:c8:e7:6d:b4:5b:2c:5a:77:50:
4a:e5:83:60:20:81:18:ae:85:01:bb:14:32:bb:b2:
88:86:3e:72:b5:81:f7:54:96:87:b0:f7:78:37:5c:
e4:14:8a:b4:08:90:f9:10:f9:7d:2a:17:72:93:49:
19:b6:7e:fa:a0:48:32:8f:81:f5:ad:41:db:48:96:
0e:60:55:93:ba:c4:86:1b:b0:fb:a2:57:cb:29:75:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:E3:12:8E:23:25:01:77:73:57:1E:9F:7B:69:68:6B:BB:A2:F7:EE
X509v3 Authority Key Identifier:
keyid:6A:04:CA:4A:96:61:63:1C:4E:C6:15:A3:A6:D1:5D:22:03:0D:CF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agTKSpZhYxxOxhWjptFdIgMNz0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa4e69-575e-46eb-b9c3-8113da67ef75/1/agTKSpZhYxxOxhWjptFdIgMNz0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:b1:a8:23:36:85:d5:4a:14:66:82:58:63:a5:8b:3d:63:48:
6a:d7:b1:f7:e8:7f:bf:d5:e1:3a:ed:3f:45:12:e1:be:80:30:
4d:80:47:aa:11:da:cb:d6:c8:55:d9:9d:64:c1:72:f7:72:6e:
87:ff:52:25:ca:11:0b:06:c0:16:23:0f:91:06:58:0d:05:6a:
5c:94:a4:fe:30:2d:cc:d9:71:7d:7b:d7:bd:c6:a9:b8:ec:f5:
05:ae:c7:d3:9d:8f:89:d6:f8:b1:3d:35:8a:2c:05:5a:41:d8:
19:c4:42:84:be:ac:15:a7:24:95:81:d3:a9:61:c1:44:76:f3:
38:eb:80:c8:eb:86:51:03:15:a8:de:87:b6:e7:a8:c4:6f:2c:
1e:e5:af:92:fe:5a:6a:f3:c1:e9:25:84:48:88:47:32:88:06:
55:a2:fa:b9:12:db:dc:67:9b:1c:96:39:d9:af:e5:5f:93:40:
93:10:1b:80:54:97:70:18:23:a2:84:67:09:06:5a:26:0a:ab:
95:b8:1b:22:3c:a6:b0:b6:bb:aa:39:fa:ba:a2:dc:a6:ed:59:
85:bd:4a:c9:d6:f0:73:10:5f:fe:2d:ba:9b:fb:84:aa:a0:b3:
1a:e1:8f:e0:69:70:eb:8c:38:f6:bc:9d:40:ae:37:c3:b9:b6:
c3:23:02:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:32:00 2025 by rpki-client