Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
File: AG5fNfGSihR_HaQbXXtbDWGy1vg.mft (raw, json)
Hash identifier: nj+KCx4JofkAnoYv+VWjjWt5ZNkQqvs03lYIbx0IoxM=
Subject key identifier: C9:5D:EF:E1:A0:6A:05:04:BF:8B:0E:59:E2:37:67:73:EA:FA:DA:42
Authority key identifier: 00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
Certificate issuer: /CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Certificate serial: 0199FFC749DA6137BF5381256D1420890B5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
Manifest number: 010F
Signing time: Mon 20 Oct 2025 04:01:14 +0000
Manifest this update: Mon 20 Oct 2025 04:01:14 +0000
Manifest next update: Tue 21 Oct 2025 04:01:14 +0000
Files and hashes: 1: AG5fNfGSihR_HaQbXXtbDWGy1vg.crl (hash: N0KBFJjuIWtRb5eYmOCQTAfB6gGPsjIzeZKsllgtDbM=)
2: CXxioXubsFD7pT7V3lmEzB9pQwc.roa (hash: ZpaZGDCs2iAXuiTvR6LYq4vr8nzKDY5DnZG4F2J5dxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:c7:49:da:61:37:bf:53:81:25:6d:14:20:89:0b:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=006e5f35f1928a147f1da41b5d7b5b0d61b2d6f8
Validity
Not Before: Oct 20 04:01:14 2025 GMT
Not After : Oct 21 04:01:14 2025 GMT
Subject: CN=c95defe1a06a0504bf8b0e59e2376773eafada42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:94:fc:c6:28:c8:dd:bc:ae:09:d2:38:0e:
e5:e8:b2:eb:f9:f4:68:d2:f3:44:f6:1e:33:ea:3e:
fa:f6:cd:9b:e4:d0:d4:e8:1d:48:c3:dd:22:62:4b:
7c:3f:f3:7a:83:5f:6a:d4:1d:55:56:fe:6f:f3:c8:
72:13:7b:98:ee:09:5c:4e:88:4e:54:6c:9c:6d:33:
38:b4:9e:cc:12:36:2a:d9:26:c6:f5:93:62:1f:92:
c8:84:3d:8c:36:8a:33:4a:38:df:e4:6a:a8:65:02:
52:f7:29:ac:87:c9:ce:10:75:14:af:a3:10:6f:b2:
0d:ef:06:18:29:79:76:87:e1:66:56:f7:9f:79:b6:
9c:2b:47:e4:a3:b8:45:8f:9f:56:d5:3b:2c:34:17:
d8:35:35:ff:8b:01:84:2b:d2:bc:92:e6:62:14:fc:
67:51:49:d3:a9:fe:4c:91:55:63:55:df:f5:1f:68:
c6:70:dc:fd:fa:4c:90:86:a9:0d:26:69:fa:3d:5f:
af:02:3d:7d:53:63:fe:aa:0c:8e:c1:3d:dc:2c:f6:
e4:02:98:eb:18:2c:42:ef:17:c4:f2:1c:e7:f0:1f:
d9:ed:96:a6:58:9e:e2:b9:71:c2:3f:55:a1:48:d7:
88:7a:10:7a:ed:0c:b8:54:87:61:8a:fe:2f:c1:7f:
51:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:5D:EF:E1:A0:6A:05:04:BF:8B:0E:59:E2:37:67:73:EA:FA:DA:42
X509v3 Authority Key Identifier:
keyid:00:6E:5F:35:F1:92:8A:14:7F:1D:A4:1B:5D:7B:5B:0D:61:B2:D6:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AG5fNfGSihR_HaQbXXtbDWGy1vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b85e51-f8a9-4f97-b84e-a059b43eda03/1/AG5fNfGSihR_HaQbXXtbDWGy1vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:69:bf:8d:ed:4b:ca:ba:b8:2f:88:66:57:79:62:17:8c:61:
d8:4b:e4:76:28:c8:54:01:f5:d8:32:7b:0e:b6:c0:4d:4d:c7:
1c:cc:d5:19:4e:44:cb:ff:32:c4:3c:df:46:98:4d:79:e0:75:
41:20:63:f7:52:ed:05:f4:f3:60:55:08:8c:7f:66:f2:ca:1b:
c6:26:62:8f:e4:30:dc:8a:3c:e4:bc:2b:69:a3:de:6c:11:ac:
52:1e:e0:f6:58:38:b0:7e:30:73:d1:41:fa:71:21:fb:17:38:
67:00:32:c9:52:9e:7c:b7:a8:3a:63:f6:6a:b7:b9:78:03:21:
10:3e:09:7e:b0:68:dc:72:73:29:b7:93:db:ff:1e:87:86:a0:
c6:bb:0e:62:ca:5d:52:16:4b:a3:62:58:0b:a2:5c:90:97:4d:
d3:e6:18:cd:35:13:9d:1e:c5:d1:b3:eb:7e:88:51:5f:f7:1a:
b3:df:06:f6:f0:c3:59:59:b9:a5:37:1f:be:a9:b5:d8:68:b4:
c5:74:ca:db:8f:d7:67:2c:f2:c8:a8:60:19:01:87:a8:60:20:
40:f1:28:06:3e:e1:40:9c:f6:24:c4:10:7e:59:d7:ab:b5:1a:
04:93:a9:4b:95:1f:84:f3:ff:ed:ce:7b:64:3e:8f:39:8a:0c:
6d:5b:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 06:38:23 2025 by rpki-client