Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
File: AgNhbKL5rvpww5FMzpDc4JcGz7s.mft (raw, json)
Hash identifier: wLMjQtJaO6UT7MLoR3eTOcu13s5pmK+CFv0QA1HsfNk=
Subject key identifier: A8:33:2A:11:51:1C:24:9B:FB:4B:84:01:0B:7B:A7:56:BA:BB:EC:FA
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 0198D54DC04F00B9DA4C6D5AF86B34AB402C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
Manifest number: 10B9
Signing time: Sat 23 Aug 2025 05:01:39 +0000
Manifest this update: Sat 23 Aug 2025 05:01:39 +0000
Manifest next update: Sun 24 Aug 2025 05:01:39 +0000
Files and hashes: 1: AgNhbKL5rvpww5FMzpDc4JcGz7s.crl (hash: tzXgLDY4EOkO2ksGUHxatGyI9XcT8vgqFgSY4xtIBXY=)
2: mzTTUqHywuBobPS3UeYVNsDUJ_k.roa (hash: hsMBTi8GspJP9sz8q6TgdiXZybDG1BQNlqbzOxmeAmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:c0:4f:00:b9:da:4c:6d:5a:f8:6b:34:ab:40:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Aug 23 05:01:39 2025 GMT
Not After : Aug 24 05:01:39 2025 GMT
Subject: CN=a8332a11511c249bfb4b84010b7ba756babbecfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:43:9d:25:ef:6d:28:fe:79:39:9e:92:53:0e:
7e:17:96:fe:1a:3b:ae:3b:ad:14:81:29:78:b5:e4:
33:92:c8:18:90:b3:2f:e7:3b:94:a4:bf:2f:6d:59:
b0:c7:e7:98:3a:77:04:e2:c6:31:30:d2:d9:60:39:
cc:a5:37:fa:06:89:47:22:a2:22:cb:fa:69:d2:3e:
97:53:0f:7b:94:6c:c8:29:f2:70:29:05:18:40:ae:
71:d8:6e:b0:4c:04:eb:81:70:1c:89:04:46:12:ec:
3e:6e:b6:90:63:2c:44:cc:90:4a:93:60:fc:bc:10:
d8:58:4d:30:bb:b1:61:d5:12:03:4a:e7:e7:25:79:
b5:07:7f:46:c4:03:19:27:8f:f1:4b:12:0c:ea:09:
0d:55:5a:f6:bc:f8:7c:c2:1d:13:20:04:c0:54:15:
85:7f:ad:3e:54:43:13:03:72:7b:63:3d:df:36:23:
4c:59:89:dc:b1:03:1e:f5:d7:5c:09:5c:95:b6:c9:
5c:2e:19:a0:73:49:ee:05:19:58:7a:82:c9:89:41:
f0:95:d3:3c:22:05:bc:8b:0c:63:55:36:f3:eb:4c:
f2:73:fc:30:1d:cf:9c:d1:d9:ba:90:ef:3c:29:e0:
f0:5f:b5:48:99:c6:07:fa:9e:3c:1a:b8:ec:ae:f5:
fc:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:33:2A:11:51:1C:24:9B:FB:4B:84:01:0B:7B:A7:56:BA:BB:EC:FA
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cc:26:24:c1:7e:04:ac:66:f5:58:53:5b:c4:4e:2b:e5:8a:
f4:ac:99:ea:e3:b1:0e:47:79:9a:bf:e3:27:20:30:b4:98:78:
98:b7:78:16:b0:e3:8e:31:5c:75:e4:d9:c4:8e:f5:6e:e1:77:
46:e2:39:8f:6e:f0:16:0c:c6:90:60:b7:46:3d:12:91:a9:8b:
43:11:31:d8:7c:02:4b:38:c2:69:40:3d:d1:c8:2c:8d:33:b3:
f5:11:e9:28:00:f2:cb:b9:c4:dc:d8:f6:86:55:36:f2:e9:6b:
7e:6e:3a:84:c1:38:de:5c:f2:9f:4d:82:88:14:bb:01:e8:72:
f1:21:78:83:b3:5c:87:7d:bb:1a:be:a0:1f:58:0a:39:eb:20:
48:bf:f3:3a:87:33:9a:ee:88:e0:f5:34:6f:c3:f6:82:00:a1:
ca:1e:e8:66:8b:27:8b:55:e5:1b:97:25:01:67:9b:04:d6:0e:
3e:7e:53:0f:5f:73:8c:e1:fb:af:c1:1d:de:bf:c5:5c:5a:e1:
77:e9:10:d3:91:4e:1d:5f:04:99:dd:36:33:e7:cc:60:e9:a9:
1e:ee:c2:73:71:a2:e2:85:bb:4c:28:17:aa:e5:69:6e:a2:db:
f4:75:53:c5:69:67:f6:5d:a8:a8:4c:b8:c4:41:50:35:ac:96:
e8:f1:3f:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTcBPALnaTG1a+Gs0q0AsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMDM2MTZjYTJmOWFlZmE3MGMzOTE0Y2NlOTBkY2UwOTcw
NmNmYmIwHhcNMjUwODIzMDUwMTM5WhcNMjUwODI0MDUwMTM5WjAzMTEwLwYDVQQD
EyhhODMzMmExMTUxMWMyNDliZmI0Yjg0MDEwYjdiYTc1NmJhYmJlY2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUOdJe9tKP55OZ6SUw5+F5b+Gjuu
O60UgSl4teQzksgYkLMv5zuUpL8vbVmwx+eYOncE4sYxMNLZYDnMpTf6BolHIqIi
y/pp0j6XUw97lGzIKfJwKQUYQK5x2G6wTATrgXAciQRGEuw+braQYyxEzJBKk2D8
vBDYWE0wu7Fh1RIDSufnJXm1B39GxAMZJ4/xSxIM6gkNVVr2vPh8wh0TIATAVBWF
f60+VEMTA3J7Yz3fNiNMWYncsQMe9ddcCVyVtslcLhmgc0nuBRlYeoLJiUHwldM8
IgW8iwxjVTbz60zyc/wwHc+c0dm6kO88KeDwX7VImcYH+p48GrjsrvX8mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgzKhFRHCSb+0uEAQt7p1a6u+z6MB8GA1UdIwQY
MBaAFAIDYWyi+a76cMORTM6Q3OCXBs+7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEt
Yzg3Y2E5ZjJiOTVmLzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9lYjg3NGEtODkyYy00YzkzLTk4NGEtYzg3Y2E5ZjJiOTVm
LzEvQWdOaGJLTDVydnB3dzVGTXpwRGM0SmNHejdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQcwmJMF+
BKxm9VhTW8ROK+WK9KyZ6uOxDkd5mr/jJyAwtJh4mLd4FrDjjjFcdeTZxI71buF3
RuI5j27wFgzGkGC3Rj0SkamLQxEx2HwCSzjCaUA90cgsjTOz9RHpKADyy7nE3Nj2
hlU28ulrfm46hME43lzyn02CiBS7Aehy8SF4g7Nch327Gr6gH1gKOesgSL/zOocz
mu6I4PU0b8P2ggChyh7oZosni1XlG5clAWebBNYOPn5TD19zjOH7r8Ed3r/FXFrh
d+kQ05FOHV8Emd02M+fMYOmpHu7Cc3Gi4oW7TCgXquVpbqLb9HVTxWln9l2oqEy4
xEFQNayW6PE/+Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:00:41 2025 by rpki-client