Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: e1hgRRPrqD08NlX3/3Mipwuu0iqUwjm8voijKJDxfpo=
Subject key identifier: 20:95:77:7E:14:63:03:09:59:B2:46:AF:78:36:22:35:68:C9:40:FD
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0199FCFD97934CB2A6280AAE2275645B91FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 09D7
Signing time: Sun 19 Oct 2025 15:01:41 +0000
Manifest this update: Sun 19 Oct 2025 15:01:41 +0000
Manifest next update: Mon 20 Oct 2025 15:01:41 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: cGpDwsMT6RVmC/1STo30HWtio1fQKLlRB6zw/LQPteo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:fd:97:93:4c:b2:a6:28:0a:ae:22:75:64:5b:91:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Oct 19 15:01:41 2025 GMT
Not After : Oct 20 15:01:41 2025 GMT
Subject: CN=2095777e1463030959b246af7836223568c940fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f4:77:ef:49:eb:ed:b4:50:20:05:ca:51:de:
c1:be:54:0d:82:e1:8d:79:12:f6:eb:9d:e2:58:69:
d9:b0:2b:9f:7c:c2:7d:46:00:f2:eb:09:fd:8e:b2:
d6:d2:05:85:3f:a9:c7:99:6e:16:7b:14:44:6a:3c:
b4:13:90:ad:7e:fc:34:d0:80:84:33:1e:d6:5d:20:
db:2a:b9:99:ee:72:9c:95:59:33:4e:9b:55:4d:24:
3a:d2:ff:f0:fc:2e:93:50:c2:5c:1d:df:89:53:6f:
03:d7:66:46:4e:f6:26:1f:84:0d:75:73:1e:df:9b:
94:42:8e:3e:bc:52:42:3c:6c:4f:c4:91:ec:74:32:
71:2f:dc:aa:ae:f2:fd:ee:d2:a3:6b:b1:c6:c5:3e:
33:4e:19:ee:1b:c1:43:fd:3f:a1:05:a5:14:f2:00:
6c:d8:2a:aa:18:2a:67:53:66:61:01:c1:5d:b3:49:
38:da:78:9a:50:c3:ee:04:c7:52:eb:ca:5a:e2:ee:
c1:3e:c3:4b:16:b5:9f:79:15:8e:12:6d:12:76:f2:
bf:05:75:b7:45:af:f1:13:78:79:50:06:28:a0:13:
29:ad:fe:11:c3:6e:9b:ae:ea:83:73:5b:8b:6e:40:
21:f6:23:1b:26:96:fa:c1:cf:19:0b:bc:83:be:2d:
85:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:95:77:7E:14:63:03:09:59:B2:46:AF:78:36:22:35:68:C9:40:FD
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:32:d1:39:4b:4a:37:e3:62:fe:99:97:04:ee:d3:13:c7:ca:
a2:28:6e:23:25:f3:3d:8b:ff:fe:7d:59:e8:b6:37:0b:a4:1b:
1a:f6:7e:6a:3c:37:b4:0a:80:2a:30:2a:3a:77:df:b9:46:c0:
e8:1b:c9:1b:96:dc:99:bb:8d:bb:ca:e2:e8:62:e2:e2:19:5d:
4d:87:d9:91:55:53:50:65:02:94:45:bf:1a:e0:3c:96:03:af:
f3:da:04:ea:0e:ae:ba:2e:7e:81:5a:3f:42:e4:79:0b:1f:30:
01:7e:ce:d2:0e:c1:85:e9:d0:11:da:77:6f:a6:66:33:1c:46:
64:de:40:67:21:3d:4c:e0:b2:72:b6:33:dc:bf:89:9e:6f:46:
a5:99:28:09:bf:e8:97:26:e4:0b:8c:f7:22:34:d1:2b:ea:50:
57:fc:eb:bb:b1:37:d6:d0:38:2a:84:22:9d:4d:5e:32:9b:f4:
e7:13:aa:80:82:c3:22:c7:58:5e:2e:d2:9e:6f:e0:ee:fb:5d:
1e:37:75:87:b2:30:54:32:35:43:1a:d3:b3:f2:9d:46:79:fd:
63:b7:6a:74:85:a4:ed:12:99:26:6c:f3:f2:e3:29:cc:eb:74:
77:e9:d9:f6:3b:89:4b:46:20:86:3b:af:74:c4:eb:ca:ff:30:
61:75:f0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:16 2025 by rpki-client