Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
File: agyGfJeYccetsJ98Yhm6WwZFkxw.mft (raw, json)
Hash identifier: censjvrpm5mwAMZ5KNBRGvH31B77aTMCt2WmYUM6oIM=
Subject key identifier: B1:73:01:A9:FE:5B:4E:FD:38:49:10:7B:3C:CA:84:54:B8:22:27:ED
Authority key identifier: 6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
Certificate issuer: /CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Certificate serial: 0199FA6A8F8B73ED885894B54E6E7C0F3810
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
Manifest number: 0E98
Signing time: Sun 19 Oct 2025 03:01:51 +0000
Manifest this update: Sun 19 Oct 2025 03:01:51 +0000
Manifest next update: Mon 20 Oct 2025 03:01:51 +0000
Files and hashes: 1: 25mILoXp0OOdl2rnLxiFEgTLBos.roa (hash: uQI0/c4okxi/fENqO0Cr333fQlKXmmFVWtIJpko2Z/I=)
2: OcEbn_XmC6O6gZW7SE3MnKGMWjc.roa (hash: Fe9Ge8j9ipTZxLe40zNMZ4cZEJGLX2F8Cq4Mb+IDII4=)
3: agyGfJeYccetsJ98Yhm6WwZFkxw.crl (hash: eATE4E2d01EDPWUJSXhSzfvELhturVy+CAamfXnAohQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:8f:8b:73:ed:88:58:94:b5:4e:6e:7c:0f:38:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0c867c979871c7adb09f7c6219ba5b0645931c
Validity
Not Before: Oct 19 03:01:51 2025 GMT
Not After : Oct 20 03:01:51 2025 GMT
Subject: CN=b17301a9fe5b4efd3849107b3cca8454b82227ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d0:8f:0e:01:46:7e:59:af:65:1a:8e:e8:f2:
23:26:0f:b6:34:40:de:f9:be:dd:12:bd:80:31:cf:
f2:6d:cb:19:da:00:88:05:5d:83:fa:b6:3b:d0:92:
fe:d4:81:6e:51:d7:26:20:93:82:3f:17:95:9b:db:
8c:53:a9:bb:a6:d4:4d:3d:5a:f3:5c:a5:e7:48:18:
01:1f:c9:45:80:16:96:56:c5:97:09:16:a0:5e:3c:
59:d5:67:7b:94:e6:df:92:b3:d6:50:42:49:92:07:
ef:5d:7a:7c:b8:0a:09:9b:a8:db:56:e4:70:7c:ac:
c8:5c:9b:4c:03:fe:95:29:5c:67:30:02:81:aa:31:
ad:28:50:fa:77:fa:d1:36:63:19:b9:5c:cc:46:29:
71:75:0a:c6:af:a9:40:1c:f5:fe:4b:3d:be:3b:4a:
96:48:fe:cd:03:3c:09:81:6b:41:fd:83:5a:18:31:
f2:0c:64:ed:36:18:75:59:ef:b5:c1:82:e7:72:ae:
24:83:ab:9d:1c:d8:5a:77:dd:df:58:ec:43:bd:87:
e5:eb:0c:ce:0c:00:a2:b0:c7:7e:94:fc:2c:bb:64:
84:6a:99:0e:b8:62:e8:1b:b0:09:4e:1b:2c:ef:7e:
1e:e5:9b:44:26:90:36:96:d1:1c:f7:37:3e:17:f6:
ed:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:73:01:A9:FE:5B:4E:FD:38:49:10:7B:3C:CA:84:54:B8:22:27:ED
X509v3 Authority Key Identifier:
keyid:6A:0C:86:7C:97:98:71:C7:AD:B0:9F:7C:62:19:BA:5B:06:45:93:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/agyGfJeYccetsJ98Yhm6WwZFkxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/1e01d2-1a1d-4dc1-a8d5-e45863eac2b4/1/agyGfJeYccetsJ98Yhm6WwZFkxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:92:fa:24:b1:88:12:7f:bd:7a:05:79:ba:f6:9a:3a:75:6a:
3b:dc:44:bc:81:52:a4:b2:59:2d:03:09:26:53:79:50:c8:ed:
8a:ed:1b:81:51:73:28:50:2c:cf:b2:9b:5f:21:b7:7f:4b:86:
66:74:9e:00:e7:ff:f0:cb:09:f7:de:d6:f0:11:c8:7a:56:84:
e2:7e:f5:e8:0b:23:0a:ee:40:88:ed:aa:23:cb:c4:52:eb:7e:
d4:26:3d:81:d9:35:12:f9:8d:d8:5b:87:dd:fb:b3:02:5d:00:
f6:d6:b9:33:26:6c:a1:e7:51:c6:ee:63:89:dd:9c:0c:6e:43:
1f:43:7a:50:e2:4e:04:28:9e:30:bd:00:ca:18:bc:b4:7e:6a:
22:99:ae:d5:90:0f:27:a6:50:d2:b6:a8:83:86:9e:ad:53:40:
7f:41:8a:f6:c8:e3:b8:63:9f:70:e0:3f:bf:c9:0f:2c:6b:14:
0e:7b:3f:e2:e5:fd:1b:b1:f1:b6:28:bf:17:68:4f:b2:c4:50:
62:cd:95:96:0f:ae:ab:a9:5e:e6:f5:ed:36:c4:ce:65:a0:f1:
c3:1b:5e:ec:be:cc:76:82:bc:68:c5:9c:5d:10:83:a0:b7:f9:
81:ee:e4:b5:a6:b2:ec:79:7b:f9:9c:ad:42:36:15:6f:aa:98:
07:6e:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:51:37 2025 by rpki-client