Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
File: aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft (raw, json)
Hash identifier: Dx3ZHt1vQ4MDRPMf1Tp3XLCkxszlHglsMlK3wxyGK0M=
Subject key identifier: BF:BF:7C:94:8F:E6:76:51:73:87:3A:9C:32:B7:8F:E7:3E:EF:BC:14
Authority key identifier: 6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
Certificate issuer: /CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Certificate serial: 019A01B4B7FE952B9673CCBEF4DC5FCF0D55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
Manifest number: 16E5
Signing time: Mon 20 Oct 2025 13:00:11 +0000
Manifest this update: Mon 20 Oct 2025 13:00:11 +0000
Manifest next update: Tue 21 Oct 2025 13:00:11 +0000
Files and hashes: 1: 7aXu2rhZmv4-BuCU66jCzo0ecAY.roa (hash: tS1hLjKGnhqlQ+lG8lyvuM5sWOqjvWcE7iwF3zaabYE=)
2: aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl (hash: w3vq5CCr9LwHQNyEs6RLOrcSt6iZudjTKPsV/kULJpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:b4:b7:fe:95:2b:96:73:cc:be:f4:dc:5f:cf:0d:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0846bdbb08055acbd6ab59d9560981e046ee6f
Validity
Not Before: Oct 20 13:00:11 2025 GMT
Not After : Oct 21 13:00:11 2025 GMT
Subject: CN=bfbf7c948fe6765173873a9c32b78fe73eefbc14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:8c:9b:f6:15:47:68:38:47:15:23:f1:d0:
07:d5:9c:c4:10:aa:5d:c5:85:d2:65:9c:9d:a6:b8:
19:17:1e:3a:07:e9:88:66:ae:14:33:79:d5:53:66:
d2:7f:e5:f8:70:47:a3:9e:75:a9:67:84:7a:ae:fa:
c2:03:9d:a6:99:31:8d:55:38:6b:06:ed:17:06:3d:
64:c3:71:ff:75:21:eb:72:8d:89:a7:42:1b:cf:5c:
a4:0b:8b:05:d0:0f:ec:63:7a:3c:37:9e:59:8a:f5:
d6:a4:52:df:46:d6:90:bd:d0:6c:f5:e7:50:f9:1f:
96:08:94:28:48:f5:ef:49:7b:f2:60:f2:79:92:40:
57:ac:01:3b:53:3d:4b:a5:38:de:61:c2:57:04:61:
35:ba:00:b4:da:9c:02:bb:47:08:80:fc:03:3d:ce:
ac:cf:f7:87:fd:10:cb:28:64:9f:a0:16:8f:79:01:
d7:64:d5:84:57:c0:b2:9f:01:fe:0b:b6:b9:8e:51:
e3:82:e0:9e:39:cf:be:0e:5d:1f:d8:d3:1e:d3:f2:
a6:46:2d:8f:59:79:86:01:18:ab:f9:cf:42:e8:ac:
3d:97:45:37:93:41:99:b7:dd:e6:cb:e3:b7:eb:5f:
c4:b7:84:24:12:18:a0:e3:ba:fb:b3:bf:32:4e:52:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BF:7C:94:8F:E6:76:51:73:87:3A:9C:32:B7:8F:E7:3E:EF:BC:14
X509v3 Authority Key Identifier:
keyid:6A:08:46:BD:BB:08:05:5A:CB:D6:AB:59:D9:56:09:81:E0:46:EE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aghGvbsIBVrL1qtZ2VYJgeBG7m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/aghGvbsIBVrL1qtZ2VYJgeBG7m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:c5:11:15:a9:b0:ce:df:d6:38:a6:e2:71:8b:09:86:c9:e1:
08:40:74:b8:76:6f:91:66:24:d4:1d:a4:d3:12:35:a7:58:21:
a9:a7:4e:d5:7b:6b:12:03:3d:3c:a3:85:c5:ce:18:a0:a6:32:
a9:25:6f:4a:ec:bf:2e:5a:30:59:24:29:4b:39:30:44:d6:10:
72:18:47:55:44:23:eb:49:e5:c3:cc:5c:73:1a:bc:d2:20:24:
b5:47:f3:aa:94:3e:35:5e:16:9f:49:14:e3:8b:19:0d:45:87:
ef:98:34:a9:11:d7:7b:47:a6:8d:69:b6:cb:f1:55:a2:b7:27:
38:49:8d:9d:3e:85:8a:fb:47:5e:f8:12:e0:cf:1b:b7:e0:5d:
bf:c1:f9:56:1e:2e:b1:27:3a:d2:08:66:6c:ca:b3:4d:dc:6b:
a8:5e:32:62:9a:49:19:e0:e2:35:49:96:f1:cd:55:bb:7d:51:
d7:fb:fb:8e:39:d5:e3:06:9b:28:3c:c1:df:8a:6d:f3:65:b7:
f0:7f:38:37:9f:7b:ce:98:24:75:66:76:90:e8:d2:e6:d6:94:
e8:bd:58:53:b3:97:db:1f:50:14:1a:04:a8:96:65:88:b2:11:
5f:80:c9:fc:76:c2:bf:d1:bc:c1:fe:f1:47:47:6d:ac:d2:35:
ec:a1:99:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:54:34 2025 by rpki-client