Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: 8BtPgOJANWmB2/f88zUkOK8F8dHi4fZUxcum61SSeRI=
Subject key identifier: 22:F0:44:57:36:9A:6A:64:86:A7:08:84:D9:FE:8D:84:52:3F:59:89
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 019849D3601B90FD60979FCB4B9E3C45FA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 03:00:46 +0000
Manifest this update: Sun 27 Jul 2025 03:00:46 +0000
Manifest next update: Mon 28 Jul 2025 03:00:46 +0000
Files and hashes: 1: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: T0owmEd+AoEaRf9HRRFdudsXtV2hlEJFDco1kDu9quI=)
2: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
3: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (hash: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:60:1b:90:fd:60:97:9f:cb:4b:9e:3c:45:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Jul 27 03:00:46 2025 GMT
Not After : Jul 28 03:00:46 2025 GMT
Subject: CN=22f04457369a6a6486a70884d9fe8d84523f5989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:53:90:83:d2:0d:2e:a5:5c:f9:85:a2:91:e0:
a0:5f:df:1f:92:f6:13:d6:bb:4e:ed:58:3b:6e:10:
57:c0:45:2f:47:50:54:99:a0:3a:52:fb:50:00:79:
fe:19:66:5f:55:27:70:e8:2f:88:54:15:72:52:86:
24:af:6f:44:6d:ef:1a:5f:10:34:11:eb:bc:33:e3:
66:a3:c4:c8:b4:8e:f7:07:0c:5b:b8:c5:64:e4:f8:
a2:99:29:31:9f:2a:33:41:ff:90:f3:94:63:c2:12:
ee:03:82:e2:a9:a9:22:6b:54:9b:0b:b8:b9:2d:06:
85:a0:e5:71:55:a7:4c:c7:2c:45:bc:72:58:4c:eb:
25:3f:cc:4e:ec:99:89:9a:67:e9:85:be:c5:85:70:
e6:0e:1c:ee:4a:2c:9e:5f:3b:97:fd:11:de:3c:57:
cd:66:62:c9:fc:fa:7e:85:08:09:67:a4:f5:1b:99:
01:0c:93:dc:df:4a:81:a2:55:a0:c8:6a:83:29:86:
2e:19:75:42:79:7f:1b:02:9c:22:2f:09:94:2b:34:
3d:62:04:8c:1e:d0:55:c2:38:ec:6a:03:1c:2c:8c:
9a:55:e4:9a:31:59:37:6b:e5:22:ce:16:67:e3:56:
2c:dd:9e:bb:f6:96:76:3a:c2:e6:df:7f:81:19:a1:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:44:57:36:9A:6A:64:86:A7:08:84:D9:FE:8D:84:52:3F:59:89
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:a3:aa:7c:82:c2:90:29:66:19:63:36:b6:7a:6d:2b:6b:da:
bb:d0:c1:6a:28:07:39:9c:38:05:5d:8f:e4:26:4d:c1:18:6e:
c2:51:76:4a:dc:3c:91:73:61:6f:d7:ce:26:47:35:fa:40:37:
85:d2:cd:f7:fe:52:eb:d9:64:44:76:dc:37:d5:7f:2e:99:02:
0a:1a:de:46:49:2f:81:fa:08:35:a2:33:97:aa:d2:2a:a1:e2:
49:0e:08:76:bc:26:af:71:55:07:e6:95:fa:e7:a5:38:29:d1:
c2:c8:c6:00:47:2a:f9:3b:ee:da:8d:bb:23:2a:fd:47:88:6d:
c5:94:81:36:51:27:9b:8c:e9:8a:c3:b0:0d:65:ac:22:e6:d5:
dd:13:40:a7:4a:68:3f:ea:bd:3d:c6:1c:1a:10:5d:bc:28:98:
f6:1f:88:bd:3d:46:66:f4:57:d7:82:3a:2c:53:11:f3:18:2c:
d0:84:a5:cb:18:12:86:6b:37:06:3f:8a:4c:10:c8:99:a1:3e:
24:4e:de:70:9e:28:2a:b3:07:23:53:73:9b:18:d0:19:0d:a6:
d4:e8:b1:81:66:a1:d5:2c:e8:05:48:f1:76:41:e0:8c:e5:25:
6e:5f:9f:1f:3f:9e:cd:2f:f6:be:8e:fe:d7:2d:06:2c:62:c2:
fd:78:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:59:19 2025 by rpki-client