Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: MpOXf3LRC6Umenf3hjU5bueO69CxxTGmPvEp6trLtgk=
Subject key identifier: 5B:F2:D6:3B:BE:85:9A:BC:28:94:4C:DB:6A:1E:DF:24:5D:3C:33:ED
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 0199FC8F8AA965BA45FA53ACC986D6C95912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 1152
Signing time: Sun 19 Oct 2025 13:01:29 +0000
Manifest this update: Sun 19 Oct 2025 13:01:29 +0000
Manifest next update: Mon 20 Oct 2025 13:01:29 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: RcP6ta/u9RZsId+nB2o3FLyiPHTahp5qzps9xlkjSNY=)
2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:8a:a9:65:ba:45:fa:53:ac:c9:86:d6:c9:59:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Oct 19 13:01:29 2025 GMT
Not After : Oct 20 13:01:29 2025 GMT
Subject: CN=5bf2d63bbe859abc28944cdb6a1edf245d3c33ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9b:28:ba:82:7a:4a:ff:f1:86:6e:aa:f5:a5:
70:24:89:48:c0:f2:6e:fc:db:ce:71:b7:7c:cd:17:
d2:3a:1c:21:7b:9f:3b:9b:4f:00:16:ec:12:bf:3a:
92:82:85:7e:8e:40:e3:c9:b0:e5:9e:5c:20:86:1a:
cb:0f:91:41:51:7c:ed:2f:d1:6b:2d:38:7b:91:e7:
c6:a8:9a:95:73:2c:c9:bb:b1:a2:4b:a8:b2:08:b8:
72:84:32:a8:55:c9:4f:00:a0:71:85:7b:e0:32:54:
f0:7c:a1:ac:b6:c7:c8:1b:54:da:9e:71:f7:d8:c6:
45:eb:bd:45:e7:be:c4:96:a7:e2:c3:73:1c:11:a2:
09:04:0c:43:65:f7:1a:ac:ab:f6:38:a6:f3:c6:8f:
c9:85:f8:10:0a:97:f9:67:de:b6:8a:a1:15:e3:f5:
a4:66:b3:5d:43:3a:c1:aa:45:19:9a:92:08:c2:21:
f7:ea:e3:cc:2a:c6:4c:3e:8d:8f:d4:42:c2:e5:b1:
9b:10:78:92:2f:42:80:d9:a5:ae:bf:07:1c:37:2f:
9d:90:da:62:bb:1e:63:05:1e:fe:b0:e8:a5:c8:f3:
ec:5f:5f:57:f7:16:0f:92:bc:7e:c5:0b:c2:2f:81:
fb:e4:d6:87:f9:b8:e5:4a:11:5a:2e:2f:1f:79:25:
82:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F2:D6:3B:BE:85:9A:BC:28:94:4C:DB:6A:1E:DF:24:5D:3C:33:ED
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:78:00:9c:de:09:11:60:13:0d:ec:0c:5b:62:8d:4b:51:dd:
67:ad:a9:43:fe:76:38:a9:4b:00:32:b8:89:04:94:24:93:1e:
25:8b:62:bd:1b:22:bb:61:07:e8:c0:09:5f:1c:b2:07:5f:3c:
6f:0a:20:80:93:d6:bd:c7:ed:e8:61:a2:8e:cb:b5:e0:5f:41:
53:d4:4d:72:91:66:e4:2d:e0:28:bc:2c:51:89:24:c6:43:e9:
49:14:22:a2:49:ac:f1:dd:6b:9c:07:b0:ea:c2:f0:8e:4f:a2:
ed:46:3a:9f:c1:58:33:f0:98:bb:6e:38:0b:b6:97:42:21:1e:
a7:da:fc:79:89:0b:87:b4:23:66:6f:78:88:0e:98:24:52:2d:
17:67:9f:a1:03:11:46:2b:1a:3d:73:57:a1:6f:27:02:0b:97:
25:43:47:3a:16:a3:10:67:02:30:40:58:9a:6b:d9:c9:0c:e9:
c7:49:64:b4:17:cd:bf:bb:f9:af:96:70:bf:65:a3:08:f2:18:
f5:56:5c:79:4e:6d:e5:ad:e4:58:db:d6:08:7f:8c:2d:6e:cb:
60:7e:d6:81:2f:9c:57:e0:b6:74:5f:bc:6e:5c:f2:07:14:01:
6f:a5:c9:83:a0:d1:d7:25:59:dc:61:c1:67:35:bf:a6:9c:6e:
55:19:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:36:32 2025 by rpki-client