Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
File: agFtrScwR7GIhmkUhd7dlxccTWg.mft (raw, json)
Hash identifier: K1KBqvBgf9ipAG+lg0IFh3ISAqRNkU4nspRN+ZAP/dE=
Subject key identifier: 91:BB:3D:A7:F7:89:59:A3:3C:6F:A8:93:F8:DA:BD:AB:5E:39:88:49
Authority key identifier: 6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
Certificate issuer: /CN=6a016dad273047b18886691485dedd97171c4d68
Certificate serial: 0198D583D1D3BD81E8B7193CD7490985EFF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
Manifest number: 093E
Signing time: Sat 23 Aug 2025 06:00:42 +0000
Manifest this update: Sat 23 Aug 2025 06:00:42 +0000
Manifest next update: Sun 24 Aug 2025 06:00:42 +0000
Files and hashes: 1: GRjGVnhDoWbQf18vA-j6jPrf8bk.roa (hash: zfy3Xeb5F33VM6wGODUsXEb4Wf9If41Lyk9PhoslocI=)
2: Ydee_9sKBOYSNgV3DpsBR-w7_U8.roa (hash: tgY6PnqoOsKcCw452vOSzlvkg7P0cNWRWTWaQclJxEc=)
3: agFtrScwR7GIhmkUhd7dlxccTWg.crl (hash: 8NhCrMkHM+nWa+sHQZSArGSAEHPwxnwtuNT9eqmw6W0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:d1:d3:bd:81:e8:b7:19:3c:d7:49:09:85:ef:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a016dad273047b18886691485dedd97171c4d68
Validity
Not Before: Aug 23 06:00:42 2025 GMT
Not After : Aug 24 06:00:42 2025 GMT
Subject: CN=91bb3da7f78959a33c6fa893f8dabdab5e398849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b7:44:c8:96:8f:60:39:ee:00:fa:dd:74:80:
16:89:9e:cf:a2:f0:03:43:84:16:b1:99:a4:55:af:
66:66:88:43:04:ac:8f:7a:d7:c5:c3:36:1a:e4:82:
60:91:cb:98:dd:20:b8:85:aa:45:22:a0:97:3b:b9:
24:d6:f2:15:0a:0c:96:f4:8b:a2:26:97:c3:bb:3b:
c6:b2:43:13:10:6b:1d:fe:29:4a:33:4b:68:63:f3:
82:a9:4c:ad:64:ea:ba:d6:cb:3f:32:dc:ba:40:90:
42:ac:18:0e:78:c6:93:c9:b9:95:af:da:a4:f2:06:
95:d9:95:74:32:1a:dd:01:91:b3:8e:a8:ca:9f:8c:
cb:5a:a4:36:88:6b:cc:2b:c6:9c:95:8b:f5:bd:05:
a4:43:2c:9f:a2:30:9e:b3:b4:42:91:33:a7:b6:f5:
09:3b:3b:18:7b:a3:84:18:5f:ad:60:59:8c:e3:e7:
c4:81:34:2a:ba:75:09:b4:3d:61:6a:91:08:19:2b:
79:b1:55:c0:b3:f7:58:b6:24:4b:e5:3c:85:11:7f:
bc:11:93:31:7c:1d:65:5b:d3:e8:b4:44:bf:79:c7:
f8:29:98:7a:b0:5d:2c:19:f3:ab:c0:b4:04:c2:c6:
29:24:e2:79:f5:51:65:a0:53:e8:95:3f:33:a3:9d:
97:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BB:3D:A7:F7:89:59:A3:3C:6F:A8:93:F8:DA:BD:AB:5E:39:88:49
X509v3 Authority Key Identifier:
keyid:6A:01:6D:AD:27:30:47:B1:88:86:69:14:85:DE:DD:97:17:1C:4D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agFtrScwR7GIhmkUhd7dlxccTWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/45c9ad-c4a7-4652-aad3-c952804932c2/1/agFtrScwR7GIhmkUhd7dlxccTWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:36:63:cf:d3:4d:05:c5:bc:c9:27:6f:06:50:45:10:f2:09:
e6:b1:93:12:db:11:db:05:a6:5d:0f:14:20:af:12:b6:70:8b:
3e:5a:16:9f:1a:be:4b:5e:00:0e:c2:18:2f:a3:7f:c0:86:ad:
1f:8a:f8:1b:f1:40:d7:33:6a:56:52:e3:35:ad:66:e6:7c:27:
62:25:8e:29:1c:41:bc:cb:7e:ca:cf:0e:c3:5e:4e:4f:ad:b7:
68:5a:0e:6b:b9:bc:10:50:0b:37:50:32:4e:49:89:a4:13:8d:
be:ca:1f:71:90:3b:4f:37:40:6c:57:f5:49:db:07:81:9a:43:
7e:34:d9:d2:28:3f:11:45:d1:98:fd:e8:5d:e2:fb:34:8d:a2:
2f:19:d4:a3:65:7a:56:e6:16:68:5e:26:8e:fa:4a:f9:52:38:
75:7b:23:f6:1b:f4:db:8e:3b:cf:69:dd:f5:2d:eb:3b:29:c9:
5a:19:72:1b:d2:0f:9b:ab:95:fa:dd:5f:03:ef:1e:9a:ab:53:
37:28:a1:e3:04:97:1a:df:a4:1a:53:da:95:a9:6d:1c:94:75:
60:f2:99:ef:f1:43:f9:11:15:3a:3b:c1:f7:1b:7d:80:c1:c1:
68:b2:3d:2e:91:a7:90:41:95:6f:a0:c2:6b:30:86:d3:aa:bb:
ec:d6:8b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:38 2025 by rpki-client