Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: c7LmlfTWCDvbaO2KwjuiaAcVeQPmzJ/JxaWPTo50ESY=
Subject key identifier: 11:2F:FE:1F:C7:DC:C9:1D:BD:C5:7C:AA:5B:C9:FB:C5:76:83:17:55
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019A7225A37C6839D4AE96351AF8CD73C183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 09:01:00 +0000
Manifest this update: Tue 11 Nov 2025 09:01:00 +0000
Manifest next update: Wed 12 Nov 2025 09:01:00 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: 3Fh4/ZEsgLfvIyrxZP3YPAjonKyvVTFP2Wi+P6WPk9M=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:a3:7c:68:39:d4:ae:96:35:1a:f8:cd:73:c1:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Nov 11 09:01:00 2025 GMT
Not After : Nov 12 09:01:00 2025 GMT
Subject: CN=112ffe1fc7dcc91dbdc57caa5bc9fbc576831755
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cd:e5:1b:6b:c8:b3:a6:24:23:50:b2:31:63:
ad:67:54:d5:17:e2:20:86:d3:89:1c:44:44:0e:60:
ff:f6:34:18:33:11:a1:a9:64:74:56:b8:9b:71:98:
70:d8:df:ac:29:2a:dd:3c:d4:53:28:23:f7:f5:4a:
98:4d:68:96:f9:a6:fc:52:c5:f5:64:2e:48:cc:ae:
cb:8e:46:8a:b2:a0:e8:73:87:44:cb:7c:ba:b2:a2:
f9:85:8b:b1:43:26:0c:27:a5:c4:e4:d4:7f:ac:70:
78:90:6e:72:72:38:c6:dc:f5:3a:e8:14:f4:bc:49:
6f:06:6b:84:e2:a6:7e:94:7f:bd:dc:91:d4:b2:52:
f8:22:90:77:54:78:80:00:e5:60:0a:76:2b:4f:e5:
9c:44:85:3e:02:9e:80:6a:d6:da:0e:fa:94:5e:ee:
59:6d:5a:b4:cb:5f:21:ee:ec:4b:fd:84:e6:71:67:
f4:9c:0d:63:3d:e5:64:bb:ea:28:95:d0:99:e5:17:
5f:62:33:00:dd:68:04:f3:b2:80:c6:e2:8b:eb:e0:
9f:2d:c7:c1:d6:0d:21:e8:c7:b1:f1:08:c0:56:30:
c6:cc:a0:20:c4:19:cd:a2:11:4e:62:02:32:78:24:
0a:a9:e0:96:8f:69:8f:e0:ea:50:b0:8e:31:dc:a5:
3e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:FE:1F:C7:DC:C9:1D:BD:C5:7C:AA:5B:C9:FB:C5:76:83:17:55
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:77:ed:9e:b0:b7:df:ed:b4:4a:f7:e1:49:8a:1e:5a:b1:cb:
91:c9:be:1d:8a:d1:6f:a8:09:db:89:99:e8:19:1c:1b:7f:a1:
94:16:f9:c1:30:1a:c0:b6:ab:91:99:87:62:60:45:fe:57:c4:
36:3a:fb:d6:72:c1:88:25:a7:39:ca:2b:53:2d:82:c3:3f:01:
f1:86:97:dc:b4:f0:7c:24:1b:d5:02:76:32:2f:df:8f:0f:a8:
15:66:8c:31:3c:e6:8d:f2:e1:7f:35:83:7e:6d:a0:0e:4f:4d:
dd:ed:2d:5d:9e:27:64:17:40:47:10:b8:a0:57:38:1d:e9:2e:
04:e8:77:c1:17:e3:f1:f4:10:5b:cc:42:21:6f:f2:e4:e2:16:
a0:08:61:a1:4e:1c:44:66:fd:87:07:e8:bd:36:3b:ed:2f:40:
95:43:78:c1:a0:83:ce:c4:14:26:50:8f:d8:00:8b:53:1b:68:
67:73:dd:0a:f4:40:1c:98:db:7c:e4:11:2a:e7:3a:d8:16:a3:
6c:c1:6a:7d:98:58:d5:13:2b:88:a0:5d:e1:73:64:35:6f:f7:
07:24:f9:72:9f:6d:6d:78:fc:b3:86:b5:94:1e:3b:4e:94:85:
cc:d8:cf:f2:27:a5:47:53:bc:50:54:63:cb:15:0f:02:f9:f4:
c5:46:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:46:38 2025 by rpki-client