Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: x4wPiRdv8EMWEJbOjWp7Xvf4ZyS62uGpk24EyXNlbPo=
Subject key identifier: 88:72:09:7F:22:96:3C:70:B8:3A:27:D8:C2:85:38:77:A6:77:A3:EA
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019A71B9304CE9DE556DC20B3DFE37BAD33A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0E06
Signing time: Tue 11 Nov 2025 07:02:33 +0000
Manifest this update: Tue 11 Nov 2025 07:02:33 +0000
Manifest next update: Wed 12 Nov 2025 07:02:33 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: jQzu7zs5M7xWA/A7PJ9spzYCS89pfaogXhLfLN6Tp7w=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:30:4c:e9:de:55:6d:c2:0b:3d:fe:37:ba:d3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Nov 11 07:02:33 2025 GMT
Not After : Nov 12 07:02:33 2025 GMT
Subject: CN=8872097f22963c70b83a27d8c2853877a677a3ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b3:da:5d:6e:3c:46:61:b4:43:92:35:0c:1b:
f4:67:e6:b3:96:0c:98:3f:f1:ac:e3:4a:98:33:f7:
7c:39:22:33:93:35:68:2f:39:6d:2d:8d:7d:2f:3a:
31:47:bf:c1:e3:ef:fd:80:de:1b:3c:94:3a:e6:86:
5b:80:f0:8a:f7:41:15:fa:24:54:aa:86:d4:9b:ff:
c4:51:2d:32:c0:c6:42:5b:7c:3c:e4:79:30:95:f0:
18:50:43:97:d8:1e:db:51:00:bd:d8:9e:aa:07:df:
a6:50:60:a7:8d:dc:67:78:e1:b7:8f:0b:19:1f:de:
4a:82:f1:b5:15:97:d1:e2:48:fe:57:59:fb:27:7e:
80:95:5c:59:10:2f:e3:25:6a:2f:d3:64:70:b4:ae:
9b:44:79:48:ea:43:5e:d0:26:d5:e3:a4:45:f7:c3:
0f:c6:de:f7:c0:38:6f:b0:07:6b:41:66:3b:0c:7c:
98:ea:2b:b3:be:b6:9b:af:38:97:12:d5:94:a1:f4:
7c:0b:0a:0f:1d:44:a9:9f:ef:14:b6:19:17:39:63:
71:80:f4:9a:ce:b0:1b:64:28:c7:32:10:da:74:f1:
ee:9e:3a:b5:90:4e:40:a2:60:66:c5:39:7d:dd:2e:
96:20:32:8f:ae:7f:1c:1f:ae:2b:21:2e:c9:6e:10:
4b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:72:09:7F:22:96:3C:70:B8:3A:27:D8:C2:85:38:77:A6:77:A3:EA
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:2e:31:73:c0:95:91:38:3f:56:49:f1:4b:d9:8d:01:14:00:
e6:1b:52:8e:f4:f2:0b:de:93:9e:63:4a:8b:ea:2d:c0:29:4b:
de:6c:4f:14:31:bb:2b:1e:40:68:7e:54:3f:ad:1b:16:d7:45:
8e:d5:41:72:8a:27:d5:3e:fe:97:01:b4:d0:4a:5e:66:32:dd:
6a:30:b3:0e:12:e3:ff:c9:a8:47:03:63:bf:e1:47:2d:49:17:
e9:ee:d5:8f:0a:4d:93:58:34:6b:83:81:72:ac:17:fd:f5:cc:
68:b8:af:2e:81:67:58:a9:52:cd:c6:83:19:cb:b8:18:55:9f:
92:d1:94:7d:75:3e:db:e2:fe:b1:16:67:77:7c:08:c0:08:de:
9d:76:ea:68:77:bd:f3:01:3a:7f:d9:dd:36:7b:5e:00:bf:f6:
3b:0d:06:6f:eb:f0:51:9b:89:dc:22:be:3b:58:9c:d8:7e:4a:
52:19:b5:65:14:b0:3f:69:ee:7b:d9:c4:0f:e4:b1:d6:94:f9:
65:c8:42:76:6e:27:ab:14:8c:2f:82:a5:ad:1a:e9:a0:7d:8b:
84:c3:25:17:1e:93:52:f0:7d:bf:0e:bb:bf:fe:4a:f0:29:6b:
01:95:77:77:c0:2b:66:25:ef:83:90:e9:e7:4b:5c:ca:77:e8:
59:d3:0f:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuTBM6d5VbcILPf43utM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2FkNmM0NDU4ZmU2OWY0NTkxZmFjY2I1NmJkYzMzMWFm
NmI0Y2QwHhcNMjUxMTExMDcwMjMzWhcNMjUxMTEyMDcwMjMzWjAzMTEwLwYDVQQD
Eyg4ODcyMDk3ZjIyOTYzYzcwYjgzYTI3ZDhjMjg1Mzg3N2E2NzdhM2VhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7PaXW48RmG0Q5I1DBv0Z+azlgyY
P/Gs40qYM/d8OSIzkzVoLzltLY19LzoxR7/B4+/9gN4bPJQ65oZbgPCK90EV+iRU
qobUm//EUS0ywMZCW3w85HkwlfAYUEOX2B7bUQC92J6qB9+mUGCnjdxneOG3jwsZ
H95KgvG1FZfR4kj+V1n7J36AlVxZEC/jJWov02RwtK6bRHlI6kNe0CbV46RF98MP
xt73wDhvsAdrQWY7DHyY6iuzvrabrziXEtWUofR8CwoPHUSpn+8UthkXOWNxgPSa
zrAbZCjHMhDadPHunjq1kE5AomBmxTl93S6WIDKPrn8cH64rIS7JbhBLgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIhyCX8iljxwuDon2MKFOHemd6PqMB8GA1UdIwQY
MBaAFAI61sRFj+afRZH6zLVr3DMa9rTNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQt
MjRmMjg3YzlhNWY0LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWQ3YjMtMjMwNS00ZTJlLWJlYWQtMjRmMjg3YzlhNWY0
LzEvQWpyV3hFV1A1cDlGa2ZyTXRXdmNNeHIydE0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAny4xc8CV
kTg/VknxS9mNARQA5htSjvTyC96TnmNKi+otwClL3mxPFDG7Kx5AaH5UP60bFtdF
jtVBcoon1T7+lwG00EpeZjLdajCzDhLj/8moRwNjv+FHLUkX6e7VjwpNk1g0a4OB
cqwX/fXMaLivLoFnWKlSzcaDGcu4GFWfktGUfXU+2+L+sRZnd3wIwAjenXbqaHe9
8wE6f9ndNnteAL/2Ow0Gb+vwUZuJ3CK+O1ic2H5KUhm1ZRSwP2nue9nED+Sx1pT5
ZchCdm4nqxSML4KlrRrpoH2LhMMlFx6TUvB9vw67v/5K8ClrAZV3d8ArZiXvg5Dp
50tcynfoWdMP2g==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:42:47 2025 by rpki-client