Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
File: aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft (raw, json)
Hash identifier: 61E64AWMI85wwfy8jQpr7rqpC52DKncQMAzTN8WSjzY=
Subject key identifier: 4E:54:BF:68:9D:C7:59:5E:2C:9D:16:BF:FC:CD:B4:BF:73:AD:EA:D6
Authority key identifier: 68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
Certificate issuer: /CN=6868f656805380ca86e79173789d668dc401d5b5
Certificate serial: 0199FF226471D56718EF3DB475676EC51176
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
Manifest number: 1518
Signing time: Mon 20 Oct 2025 01:01:07 +0000
Manifest this update: Mon 20 Oct 2025 01:01:07 +0000
Manifest next update: Tue 21 Oct 2025 01:01:07 +0000
Files and hashes: 1: HSyzFVthhSBBD96mxsl0scilpJU.roa (hash: q5u2KllVdiR/BqAy2dqAoFzSZ6PBl0fHr1yzfwddNTg=)
2: aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl (hash: qFcCNMN5Ob9RWQvJfnHF2/k6n0AqFgDz479jK1T2+LY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:22:64:71:d5:67:18:ef:3d:b4:75:67:6e:c5:11:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6868f656805380ca86e79173789d668dc401d5b5
Validity
Not Before: Oct 20 01:01:07 2025 GMT
Not After : Oct 21 01:01:07 2025 GMT
Subject: CN=4e54bf689dc7595e2c9d16bffccdb4bf73adead6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0f:ee:f9:57:69:bc:0b:fb:3a:30:2d:3d:c4:
1f:ce:38:14:a3:bf:e5:d0:a4:0c:ec:4e:da:05:02:
e5:3e:26:42:95:e8:4e:c0:3a:2c:3a:68:30:6d:4e:
b7:03:38:aa:b9:e6:8a:f6:2b:22:93:80:b9:7e:59:
83:e9:13:32:fd:a7:8f:98:19:48:cf:d4:0f:c8:95:
2e:9a:a0:c7:2d:c6:d5:c1:1b:a9:f1:ea:c9:fc:d1:
86:a7:2b:00:fe:ef:98:fc:a1:40:71:72:8b:97:b5:
c5:3c:c5:ef:6c:e3:53:e2:97:ed:8c:c3:a7:a0:ff:
86:f3:2c:3f:3b:5a:81:d1:db:42:85:0e:da:15:e0:
15:3d:d2:b3:f4:d3:c6:6c:7c:35:f3:2b:9e:8f:f4:
c7:0d:cc:26:e3:a0:c3:15:0e:9f:fb:a9:8b:39:9a:
b9:da:bf:9e:f8:5a:81:3e:1c:09:9b:b7:92:c7:cb:
ae:e4:a4:e1:d4:13:38:73:b6:8c:bc:8f:6b:4c:3d:
35:45:c8:ee:86:7c:d3:f8:cb:fc:a5:4d:a1:79:6f:
86:a3:2d:4e:48:de:17:2f:8b:49:95:da:c4:f1:de:
97:cf:7d:45:3d:4d:6c:f8:92:41:2b:cb:4f:52:be:
e9:df:a7:15:31:0f:1e:60:4b:1b:d8:af:7a:4f:4a:
d1:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:54:BF:68:9D:C7:59:5E:2C:9D:16:BF:FC:CD:B4:BF:73:AD:EA:D6
X509v3 Authority Key Identifier:
keyid:68:68:F6:56:80:53:80:CA:86:E7:91:73:78:9D:66:8D:C4:01:D5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aGj2VoBTgMqG55FzeJ1mjcQB1bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f23c1-043c-4956-bfb8-26c9f9932bbc/1/aGj2VoBTgMqG55FzeJ1mjcQB1bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a5:8b:4f:4c:2e:44:73:de:01:d6:81:9d:20:1f:b2:35:31:
4b:71:fe:fd:9f:f3:14:c9:e9:46:50:8a:99:27:fd:b4:46:84:
10:81:7e:4c:d5:cc:bd:f1:1f:8a:29:74:67:43:d9:36:c9:fa:
a4:69:9a:02:de:1d:38:2e:d0:b4:b2:b0:26:2b:73:df:82:e1:
43:06:69:b7:ce:d6:ce:f2:c8:cc:fa:de:3a:41:69:df:bb:cb:
a5:be:45:99:8d:32:14:8d:e5:c0:8f:8f:6e:56:e2:6d:32:62:
62:06:e5:73:51:7e:cb:62:c6:f7:5e:45:e1:b6:2e:2d:58:e6:
26:77:75:f3:37:f9:f5:64:e6:43:ba:08:cc:f5:5c:d3:c4:cc:
4c:75:9d:87:9e:a4:dc:3d:f5:13:78:27:bd:08:15:00:0d:35:
e9:e4:93:6c:4b:1a:b2:e0:54:3e:3e:78:5f:9a:11:3b:24:98:
7c:7c:90:54:28:d3:9e:14:fd:02:7f:8e:47:8d:a9:03:d2:3f:
bb:a1:bc:b6:22:bb:08:8c:11:04:94:fa:b6:e4:e2:2d:32:ee:
b5:cf:e7:be:00:7c:67:cb:2d:39:21:94:58:d3:8a:ec:d7:fb:
16:0f:09:66:94:e4:b2:e4:49:33:93:fb:ef:9b:de:a1:14:42:
ec:77:99:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn/ImRx1WcY7z20dWduxRF2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4NjhmNjU2ODA1MzgwY2E4NmU3OTE3Mzc4OWQ2NjhkYzQw
MWQ1YjUwHhcNMjUxMDIwMDEwMTA3WhcNMjUxMDIxMDEwMTA3WjAzMTEwLwYDVQQD
Eyg0ZTU0YmY2ODlkYzc1OTVlMmM5ZDE2YmZmY2NkYjRiZjczYWRlYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsg/u+VdpvAv7OjAtPcQfzjgUo7/l
0KQM7E7aBQLlPiZClehOwDosOmgwbU63AziqueaK9isik4C5flmD6RMy/aePmBlI
z9QPyJUumqDHLcbVwRup8erJ/NGGpysA/u+Y/KFAcXKLl7XFPMXvbONT4pftjMOn
oP+G8yw/O1qB0dtChQ7aFeAVPdKz9NPGbHw18yuej/THDcwm46DDFQ6f+6mLOZq5
2r+e+FqBPhwJm7eSx8uu5KTh1BM4c7aMvI9rTD01RcjuhnzT+Mv8pU2heW+Goy1O
SN4XL4tJldrE8d6Xz31FPU1s+JJBK8tPUr7p36cVMQ8eYEsb2K96T0rRZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5Uv2idx1leLJ0Wv/zNtL9zrerWMB8GA1UdIwQY
MBaAFGho9laAU4DKhueRc3idZo3EAdW1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgt
MjZjOWY5OTMyYmJjLzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy84ZjIzYzEtMDQzYy00OTU2LWJmYjgtMjZjOWY5OTMyYmJj
LzEvYUdqMlZvQlRnTXFHNTVGemVKMW1qY1FCMWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbaWLT0wu
RHPeAdaBnSAfsjUxS3H+/Z/zFMnpRlCKmSf9tEaEEIF+TNXMvfEfiil0Z0PZNsn6
pGmaAt4dOC7QtLKwJitz34LhQwZpt87WzvLIzPreOkFp37vLpb5FmY0yFI3lwI+P
blbibTJiYgblc1F+y2LG915F4bYuLVjmJnd18zf59WTmQ7oIzPVc08TMTHWdh56k
3D31E3gnvQgVAA016eSTbEsasuBUPj54X5oROySYfHyQVCjTnhT9An+OR42pA9I/
u6G8tiK7CIwRBJT6tuTiLTLutc/nvgB8Z8stOSGUWNOK7Nf7Fg8JZpTksuRJM5P7
75veoRRC7HeZlQ==
-----END CERTIFICATE-----
Generated at Mon Oct 20 06:31:27 2025 by rpki-client