Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: Fbvk2aPjq/KKHm3q/0bKcu8DPZsnF18f2n9VuLSSkZI=
Subject key identifier: 8C:39:6B:90:8F:6F:C5:9D:C0:C5:76:24:47:21:E9:74:3C:64:6F:64
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 0199221E69B5F513549D2A852A83F504796B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 03:00:42 +0000
Manifest this update: Sun 07 Sep 2025 03:00:42 +0000
Manifest next update: Mon 08 Sep 2025 03:00:42 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: S8jIgRNQC+x+deTc+z3qJ5QrnH3d0xRTyOqEM319ZVc=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:69:b5:f5:13:54:9d:2a:85:2a:83:f5:04:79:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Sep 7 03:00:42 2025 GMT
Not After : Sep 8 03:00:42 2025 GMT
Subject: CN=8c396b908f6fc59dc0c576244721e9743c646f64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3a:b5:8e:e5:b2:74:f2:a0:34:6c:0b:10:fd:
cb:cf:54:24:24:c0:d3:a4:3d:81:78:81:45:97:5b:
75:63:9a:ba:28:91:4c:3f:23:d9:b6:82:d0:06:39:
bd:39:37:8b:2b:f1:20:68:0e:43:ca:4b:c7:20:43:
83:b9:7f:e6:f6:e0:53:27:f5:c2:2e:64:29:81:a1:
25:60:6a:b0:23:6c:4a:9c:68:77:83:a9:fc:53:53:
a9:30:9b:ae:d7:c0:68:7d:12:e5:85:31:87:80:e7:
de:ff:93:71:f9:70:73:b8:86:fe:a0:d4:4e:75:4b:
81:9b:8e:6a:11:c1:8f:6b:9b:2a:b5:57:3c:25:95:
c1:d5:5f:73:2a:8e:a4:85:e8:32:cc:89:ee:6b:a4:
1f:c6:6c:f5:ee:5c:4e:9b:b8:24:73:55:ed:a3:e3:
c4:b3:d0:6c:72:ca:cb:98:a2:15:41:e2:c4:5c:0e:
07:91:56:5f:0c:cc:8b:b1:ef:a9:7f:70:2b:d2:ed:
d2:af:99:7d:11:ef:19:ac:40:6c:23:10:a2:d8:5e:
a7:8c:f3:69:60:de:91:d6:2b:5e:70:63:ad:b5:6e:
e2:67:db:d6:04:0e:1c:56:5b:6d:bf:a8:da:1e:a1:
95:09:0c:8e:7d:4c:00:c5:c2:58:a0:5f:dc:60:84:
ad:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:39:6B:90:8F:6F:C5:9D:C0:C5:76:24:47:21:E9:74:3C:64:6F:64
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:99:5a:3e:19:f8:a3:81:31:07:cb:aa:28:65:dd:63:a4:59:
59:15:2d:e1:29:22:1c:98:b4:2c:0e:e0:0d:69:bf:30:fe:d3:
7b:77:3b:8a:c4:bf:bd:58:28:c0:18:ca:73:af:8b:8b:aa:40:
43:53:64:22:54:d5:cf:b2:b4:28:17:61:4f:71:93:cd:23:12:
75:94:74:16:68:d4:9d:55:cf:08:76:8b:87:ac:18:e6:b1:81:
8b:6e:73:0c:91:8d:db:99:4b:e4:26:56:37:10:3d:16:38:e0:
47:a7:03:16:2b:1b:5f:c4:d7:de:fd:a8:a9:45:c8:43:77:74:
a3:d1:a1:f9:5f:7e:98:1c:40:96:34:1a:da:4d:7b:ed:d5:29:
27:6a:88:06:69:84:dc:f7:85:5b:6c:ec:8a:b7:8f:e4:04:20:
6b:70:2f:6d:36:f8:ee:20:d2:f4:5d:bc:7c:43:80:65:50:00:
5f:65:be:d0:f3:0c:ec:22:a4:09:ea:23:33:0d:cc:54:10:3b:
24:9b:1b:ec:08:9f:0e:3b:72:c8:b5:cf:28:1a:54:d1:ea:12:
78:88:a7:e1:c2:e0:a6:d5:ef:b3:96:23:65:f5:13:0e:5e:14:
4b:5b:4c:a4:36:69:83:cf:9f:ac:f6:97:f3:76:99:8f:ff:ff:
e6:26:65:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHmm19RNUnSqFKoP1BHlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwOTExNzc5Yzc2N2QyMzY0ZTg2ZjRlMjdlZjhjNWZlOWJi
MDEwOTAwHhcNMjUwOTA3MDMwMDQyWhcNMjUwOTA4MDMwMDQyWjAzMTEwLwYDVQQD
Eyg4YzM5NmI5MDhmNmZjNTlkYzBjNTc2MjQ0NzIxZTk3NDNjNjQ2ZjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Tq1juWydPKgNGwLEP3Lz1QkJMDT
pD2BeIFFl1t1Y5q6KJFMPyPZtoLQBjm9OTeLK/EgaA5DykvHIEODuX/m9uBTJ/XC
LmQpgaElYGqwI2xKnGh3g6n8U1OpMJuu18BofRLlhTGHgOfe/5Nx+XBzuIb+oNRO
dUuBm45qEcGPa5sqtVc8JZXB1V9zKo6khegyzInua6Qfxmz17lxOm7gkc1Xto+PE
s9BscsrLmKIVQeLEXA4HkVZfDMyLse+pf3Ar0u3Sr5l9Ee8ZrEBsIxCi2F6njPNp
YN6R1itecGOttW7iZ9vWBA4cVlttv6jaHqGVCQyOfUwAxcJYoF/cYIStFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIw5a5CPb8WdwMV2JEch6XQ8ZG9kMB8GA1UdIwQY
MBaAFACRF3nHZ9I2Tob04n74xf6bsBCQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYt
NjJjMWIxZmYzYTI2LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8yNTlmYmUtMjg1NS00ZTE5LTkxOGYtNjJjMWIxZmYzYTI2
LzEvQUpFWGVjZG4walpPaHZUaWZ2akZfcHV3RUpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtZlaPhn4
o4ExB8uqKGXdY6RZWRUt4SkiHJi0LA7gDWm/MP7Te3c7isS/vVgowBjKc6+Li6pA
Q1NkIlTVz7K0KBdhT3GTzSMSdZR0FmjUnVXPCHaLh6wY5rGBi25zDJGN25lL5CZW
NxA9FjjgR6cDFisbX8TX3v2oqUXIQ3d0o9Gh+V9+mBxAljQa2k177dUpJ2qIBmmE
3PeFW2zsireP5AQga3AvbTb47iDS9F28fEOAZVAAX2W+0PMM7CKkCeojMw3MVBA7
JJsb7AifDjtyyLXPKBpU0eoSeIin4cLgptXvs5YjZfUTDl4US1tMpDZpg8+frPaX
83aZj///5iZlZQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:27 2025 by rpki-client