Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
File: AGsGtdD_EADhDEJ27qCICvIJ16I.mft (raw, json)
Hash identifier: IqdK/ZZBYii6JdoH6igerI4z335VhMv1iDcpPcdTygs=
Subject key identifier: F4:C1:EA:00:76:B8:CB:94:7A:3F:EA:F9:49:FA:6B:0F:0D:B5:32:8A
Authority key identifier: 00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
Certificate issuer: /CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Certificate serial: 0199FB45F8F2FDB058DF3AF997A3DA03CA8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
Manifest number: 0A14
Signing time: Sun 19 Oct 2025 07:01:30 +0000
Manifest this update: Sun 19 Oct 2025 07:01:30 +0000
Manifest next update: Mon 20 Oct 2025 07:01:30 +0000
Files and hashes: 1: AGsGtdD_EADhDEJ27qCICvIJ16I.crl (hash: lpwvWWn/tNOVOo4AK04A4xZoN+4ttdK9y8cz6l452sU=)
2: KWN7lbu9UX4daUEdNDAK3ZMrFAk.roa (hash: WqU1UFiFL55OvehHLohuI3Znyc7Zm1Aa844JXIgkQ7A=)
3: RuH2k0iAjasiUyAH22AdPFV5Ae0.roa (hash: +Reg0vgoBRw6w4QQfuC6Wd/elCxMYo7/ChLckPoqJlc=)
4: wC6GvOL96y7ng1OaBtu0ACc0Uv8.roa (hash: Pb/46jJY/4NqGVEPi/tZl2cVHTdO0P2kZSbGSJnkcFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:45:f8:f2:fd:b0:58:df:3a:f9:97:a3:da:03:ca:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006b06b5d0ff1000e10c4276eea0880af209d7a2
Validity
Not Before: Oct 19 07:01:30 2025 GMT
Not After : Oct 20 07:01:30 2025 GMT
Subject: CN=f4c1ea0076b8cb947a3feaf949fa6b0f0db5328a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:66:35:77:a7:c0:c3:48:e2:7a:c0:ce:bd:
21:6f:95:f1:e2:70:b0:b6:57:22:9b:c8:30:96:86:
27:49:e9:98:c1:38:c6:e6:f3:cc:17:da:69:16:4c:
47:49:8a:73:f6:72:16:15:03:d3:c7:f3:c3:bf:37:
31:61:ed:82:52:04:b3:49:40:15:53:45:a5:b0:b1:
3b:16:f2:d9:ad:84:02:25:0b:53:5c:82:55:0d:f2:
4a:62:a8:08:bc:fa:5a:ef:99:be:b0:22:e6:46:52:
1b:ff:cc:74:dd:34:f1:63:b4:02:db:76:64:ba:30:
36:31:34:cf:79:06:dd:a6:d5:2d:5c:0e:7b:55:7c:
79:85:c9:31:f6:d4:06:6b:00:2a:72:6c:d0:29:4b:
b6:78:b3:92:2b:0f:23:cb:34:da:82:42:ae:fc:e1:
eb:e6:c5:6a:40:6f:29:f1:71:61:1f:f7:43:b4:a5:
09:b8:d1:21:e8:8c:8e:e6:4e:83:cb:78:f6:cf:e8:
9b:9e:62:a0:ad:fe:54:56:d6:63:69:c6:a9:23:80:
89:82:1d:01:35:2b:c1:d8:bc:9f:ce:8a:ed:c4:38:
71:9b:02:7b:64:4d:05:49:0a:ae:0f:60:1a:63:ac:
ad:59:a4:d1:4d:46:20:04:41:04:5f:ca:8d:8d:7b:
4e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:C1:EA:00:76:B8:CB:94:7A:3F:EA:F9:49:FA:6B:0F:0D:B5:32:8A
X509v3 Authority Key Identifier:
keyid:00:6B:06:B5:D0:FF:10:00:E1:0C:42:76:EE:A0:88:0A:F2:09:D7:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AGsGtdD_EADhDEJ27qCICvIJ16I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4737c9-e263-44e7-8fed-57c955c9c85d/1/AGsGtdD_EADhDEJ27qCICvIJ16I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a0:e2:5f:dc:29:3b:20:7b:35:21:71:22:49:dd:c3:6b:61:
5e:c6:44:6f:d8:82:77:ce:e3:73:43:cf:29:ed:92:86:6c:fc:
c2:8f:04:01:ff:0f:77:1f:d9:fb:9e:15:57:40:84:27:f7:e2:
91:b4:25:23:7e:50:56:b3:62:b8:d2:d0:39:c3:0d:2d:4d:33:
bc:e6:fc:55:8b:fd:47:2d:c1:ae:7e:b9:ee:e3:98:01:65:52:
6f:ca:c5:30:26:95:95:10:68:4f:9e:4f:6c:2a:2f:eb:ee:6a:
4b:57:22:0f:57:d4:f6:97:11:97:df:a0:43:5b:15:8e:47:76:
89:6d:93:0d:ef:24:5f:69:c8:9e:dd:29:3e:ba:45:84:25:d0:
4b:fd:35:e6:00:e2:74:fc:37:20:e5:a7:46:0c:f3:ec:54:5a:
bc:2a:13:26:d9:fd:8d:39:36:2c:88:d8:c1:c4:9c:f0:76:4f:
08:34:4c:31:7e:9a:15:a5:06:86:d2:5f:51:53:8b:06:6f:f6:
a8:b2:15:b3:c8:f3:1b:9c:aa:c8:fa:16:1c:81:b0:1d:48:bf:
df:cc:97:44:fb:9d:ef:e8:78:61:a3:b6:91:32:22:e7:dc:f5:
42:4f:0c:72:48:a8:02:d6:eb:93:e3:f2:cf:d4:6c:a5:c4:b9:
b4:29:6e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:11:38 2025 by rpki-client