Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: /P+Kfo9JeZQ7fP1FlbiCC0oVVgPQ+Na8IG1OpeVLKbQ=
Subject key identifier: CD:AB:7C:01:39:62:25:3D:02:B9:0A:46:E7:AD:81:D8:47:39:DD:B5
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 019A72260C30A311388D68FD5D6A14E4B78B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 138B
Signing time: Tue 11 Nov 2025 09:01:27 +0000
Manifest this update: Tue 11 Nov 2025 09:01:27 +0000
Manifest next update: Wed 12 Nov 2025 09:01:27 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: LCUA9sMaERJareo3xYSrDISn6+/yMTUlRX45glK0Jz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:26:0c:30:a3:11:38:8d:68:fd:5d:6a:14:e4:b7:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Nov 11 09:01:27 2025 GMT
Not After : Nov 12 09:01:27 2025 GMT
Subject: CN=cdab7c013962253d02b90a46e7ad81d84739ddb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5d:15:56:09:8b:bd:97:44:cc:db:70:d4:70:
95:61:31:25:07:f6:ce:cd:3a:b0:46:db:d1:d5:3b:
af:98:c7:f6:57:96:7e:0d:91:12:72:d9:b6:16:d4:
0f:5a:4e:1a:76:44:2d:7d:31:9d:09:4d:60:d1:71:
82:7c:58:f5:c1:b7:20:b1:70:66:7c:b4:3f:f6:2a:
15:0f:99:6e:f6:50:30:29:75:7c:a9:aa:d0:2b:43:
23:56:13:15:ab:8d:30:d6:cc:dd:5d:bd:ed:e6:0c:
22:3c:04:06:00:c3:2a:8c:f6:5a:ae:bd:ea:02:6b:
f1:3d:bc:e6:ae:6f:fe:94:5b:a2:e9:7f:9f:43:95:
19:29:bf:ce:12:3e:47:12:9b:37:cd:3f:9b:35:ed:
44:1b:5c:13:dc:b3:4d:84:8d:0c:4a:63:05:e7:eb:
d4:1e:85:44:4b:70:23:78:c3:1a:cb:bd:9c:97:b4:
91:d3:1b:f5:8a:36:bc:fa:96:3e:ff:85:46:0b:8f:
de:e9:b8:d5:39:d9:d4:cd:2b:08:20:32:c0:a7:3d:
60:93:5f:73:a1:a1:f2:7e:c6:cb:d5:e9:09:17:e7:
dd:02:f9:20:9a:5d:c2:4f:bb:91:be:b5:40:06:9e:
c5:3e:8d:7e:9e:36:d7:26:31:d1:16:70:ab:84:a5:
e8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:7C:01:39:62:25:3D:02:B9:0A:46:E7:AD:81:D8:47:39:DD:B5
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:75:96:ee:1a:69:6f:0f:15:92:1b:4e:9f:56:55:4d:ea:ee:
ce:b5:2b:15:8f:d3:30:5f:b8:bf:96:f8:5e:9f:cc:82:01:f6:
eb:72:5c:ba:a7:1b:b4:e4:4c:4a:9e:10:0f:e9:37:28:8b:0a:
f8:2f:f5:79:72:bd:54:d6:a6:d5:28:0e:aa:3f:31:a6:5f:eb:
c2:51:48:01:65:c3:09:40:85:d8:ed:b9:96:d7:80:c0:71:da:
1f:4e:b9:3f:e1:0f:7c:00:ad:ae:a1:16:3e:39:98:eb:d1:1e:
03:c7:b7:d5:9c:6f:2a:2c:c8:c7:ab:e7:ba:ea:49:a3:b1:69:
d3:b4:63:9d:fe:f9:45:ce:c0:89:7c:a8:7a:b3:27:51:01:fd:
7f:c3:4d:94:6b:92:bf:ca:ea:ec:00:f9:6f:26:d0:89:ff:3b:
5e:30:db:34:e3:ac:9c:cd:55:16:8e:51:dd:b0:18:fe:47:1f:
49:5a:b5:d5:d8:11:06:12:c0:62:3d:cf:f8:98:3b:e3:12:d5:
5f:8b:0e:92:a9:a7:06:cc:13:a2:e3:58:7e:4c:8e:28:8c:c3:
85:6b:34:ed:4b:f3:53:18:cc:7b:c1:ae:7e:61:ad:61:9f:86:
1c:5a:45:34:f3:04:c7:77:7f:0e:e3:1b:bf:b5:bd:33:e9:43:
99:d7:53:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:35:17 2025 by rpki-client