Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: mvpZ39C4Nz17Xy//LlRl64vaLZE7IgzeelNfqkDChok=
Subject key identifier: 1D:51:3C:A5:BD:01:75:CB:2F:86:FC:A6:2C:EF:7F:68:66:D7:77:4F
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 0198477780FFD27E643F055DB5E59A6DCC06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0CE7
Signing time: Sat 26 Jul 2025 16:01:10 +0000
Manifest this update: Sat 26 Jul 2025 16:01:10 +0000
Manifest next update: Sun 27 Jul 2025 16:01:10 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: 0ij1q0SXPbDOJfux7MyAjbly44Yqfzr1T0ATbWGYw3E=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:80:ff:d2:7e:64:3f:05:5d:b5:e5:9a:6d:cc:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jul 26 16:01:10 2025 GMT
Not After : Jul 27 16:01:10 2025 GMT
Subject: CN=1d513ca5bd0175cb2f86fca62cef7f6866d7774f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:c3:9b:a8:77:49:fa:f9:4b:10:f1:d9:22:
09:6d:88:38:06:5f:d5:b5:b8:b9:fc:ea:44:54:08:
5c:38:59:26:cc:7e:6f:b8:e0:c9:02:55:a0:c0:f8:
41:fa:2f:af:57:76:54:d5:fc:bb:9b:dc:dc:67:70:
86:7a:ef:35:27:a6:e9:e0:39:9d:55:c0:22:95:49:
86:42:e4:6e:aa:13:c6:82:e0:e9:79:3f:39:4b:02:
bd:0c:b0:d6:7b:21:b1:25:da:6f:98:2f:a8:87:9d:
29:1e:da:8d:6b:d6:de:c2:03:ae:b0:e7:c1:10:56:
6d:4b:e3:1e:65:de:35:e9:12:90:05:75:af:16:5c:
9b:30:48:a5:13:01:bd:51:6b:56:75:27:f7:75:88:
f3:a6:c5:e3:fa:e0:73:6c:31:d5:45:e1:03:2b:d5:
e8:96:61:ce:0c:e4:0c:86:5f:dd:fc:e4:fb:31:96:
b4:d3:99:7c:c1:2b:5f:25:d3:fb:61:4d:e4:03:0c:
4a:48:cf:96:78:58:67:87:ff:a1:43:43:1a:73:62:
2e:4b:b8:70:48:4a:a8:49:74:83:65:71:39:18:90:
da:bc:43:47:41:8a:00:22:df:90:0f:e3:9f:e7:fc:
bd:6b:71:13:5c:4e:ed:da:ea:a1:6c:2f:79:ad:bf:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:51:3C:A5:BD:01:75:CB:2F:86:FC:A6:2C:EF:7F:68:66:D7:77:4F
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:7f:4d:4e:81:14:9b:52:3d:7f:24:3c:f3:43:8b:1b:59:11:
2b:55:b3:8d:24:69:00:e5:9e:0f:8a:42:ff:a8:30:07:fa:ef:
4a:0c:61:87:ed:2f:f4:43:7f:ae:09:26:11:11:97:1c:72:1b:
74:c6:89:0f:c5:10:23:1c:fe:be:5f:96:aa:fd:52:f4:e0:c6:
2d:b9:6d:bd:82:29:21:b7:9d:7d:4f:41:7f:2d:54:75:06:77:
d1:86:fe:1b:b2:af:35:94:fc:2a:f1:13:3f:53:0b:42:f6:ad:
7d:eb:65:67:ef:1d:69:b9:b8:f3:44:27:15:19:3a:85:2c:94:
96:2c:1a:3c:0d:16:14:87:46:97:63:2e:6c:41:bc:de:52:8a:
95:91:5e:1d:c2:c4:31:a8:24:d1:48:1a:2d:da:82:45:55:1a:
bf:82:f4:f1:1e:ac:4c:99:60:f7:f9:ce:eb:b4:fb:bc:7f:cc:
9f:fd:d3:97:d2:84:9e:c1:65:b7:c5:5a:5a:ec:ac:b1:a3:ce:
a1:fd:43:ef:f6:ae:2a:c8:d0:fe:ca:76:29:18:a6:5e:e2:ea:
59:2d:c9:e7:81:41:ff:0d:3e:56:0f:94:b0:8c:a8:69:83:f8:
be:50:34:f7:8d:82:9b:c2:bb:d6:8a:10:ff:6e:57:29:12:b3:
f0:a9:b5:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:26:19 2025 by rpki-client