Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: PUH5PvFoDfVk2TBAkwXjFM374G6Lo5epeOQYjL3BMpg=
Subject key identifier: B7:20:D1:80:EE:AE:49:8F:3A:E2:75:6E:86:72:92:D3:4E:49:61:37
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 0199221E7FC03DB95B5C973CE97CA0CD03AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 12DD
Signing time: Sun 07 Sep 2025 03:00:47 +0000
Manifest this update: Sun 07 Sep 2025 03:00:47 +0000
Manifest next update: Mon 08 Sep 2025 03:00:47 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: NvyvYsHl2nEpc+QOu7Mo9MxjO1hq7keOc88CWADL0Yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:7f:c0:3d:b9:5b:5c:97:3c:e9:7c:a0:cd:03:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Sep 7 03:00:47 2025 GMT
Not After : Sep 8 03:00:47 2025 GMT
Subject: CN=b720d180eeae498f3ae2756e867292d34e496137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:d9:ec:3e:dd:e2:ba:8e:32:c7:bd:84:fa:
43:2a:2e:59:f4:4b:43:9f:c4:e2:eb:9b:6e:85:1b:
f6:b5:34:a3:11:93:8e:c4:7d:3d:be:bc:0e:52:a6:
ec:07:0b:dd:c5:81:97:a4:8a:41:69:ab:66:ab:c4:
d3:48:d0:7e:0e:7b:61:4b:e3:32:1f:af:de:58:2f:
84:51:0f:50:46:e1:3d:95:d2:34:bd:1c:eb:ba:cc:
69:fb:16:01:22:18:4f:e6:cc:8f:72:ad:06:21:5c:
26:1a:91:f4:0a:1a:0d:43:0f:4e:7d:bd:e4:33:bc:
a7:9b:97:75:cb:89:0b:b6:20:32:3f:00:66:19:49:
72:f6:ed:3a:a8:c7:61:b3:4e:70:b9:f7:ed:41:dc:
0a:22:64:16:27:50:21:02:1a:43:98:6f:c7:8d:11:
9e:22:9d:72:d5:c8:60:6a:15:fb:12:28:6c:e3:b1:
2f:5c:d5:aa:58:b5:0d:fa:58:60:6c:d6:fb:fc:5f:
8b:ad:b1:3a:79:92:13:c7:d6:c3:17:09:69:cf:d2:
5c:6b:75:b1:2d:c5:a7:5b:26:2f:3f:8f:7b:69:c7:
b8:a5:62:fb:0d:04:f5:63:4f:d1:58:74:2f:27:13:
1e:ba:bb:02:9f:07:1d:73:55:35:7b:73:65:fe:e0:
1b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:20:D1:80:EE:AE:49:8F:3A:E2:75:6E:86:72:92:D3:4E:49:61:37
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:69:19:12:1d:dd:34:6b:2d:db:2a:2f:ac:e9:ea:66:6e:ed:
83:43:0c:d2:5b:3e:f0:40:de:2b:00:9e:bf:b8:60:13:63:6f:
0a:d7:61:f4:fe:3c:3f:b2:16:52:dd:6a:44:6f:e3:f4:7e:37:
50:e7:48:60:e0:d3:f2:7f:c3:aa:b1:e8:99:bb:dc:58:e4:c4:
8b:10:a4:c3:5b:78:70:30:de:79:b0:4c:11:11:93:a6:28:10:
be:d3:77:b2:cb:06:4b:a4:1b:87:e7:ae:d0:09:4f:31:f1:6e:
d8:aa:ec:10:7d:b9:b2:e8:84:10:f2:e9:60:30:58:77:a7:a4:
64:54:88:0e:d7:2e:63:c8:a2:d5:c6:e8:90:9b:20:f1:89:da:
a8:df:26:09:81:2d:5c:dc:ea:be:ec:3a:63:5d:1e:5a:5e:f9:
eb:9e:2d:e6:68:fc:42:28:69:c9:70:f2:ed:9f:18:c2:b9:34:
ca:f9:b1:e0:df:13:08:79:b2:5c:0c:87:2b:e1:be:6c:6f:0e:
ce:26:08:f2:78:4e:67:54:d5:81:12:5f:5a:4f:9d:26:ba:d2:
55:53:d6:e2:3c:70:cd:a7:ea:e1:5c:ef:87:f2:c4:d2:be:84:
78:ba:19:72:14:ec:eb:59:ff:7e:ad:f7:9b:17:63:62:fd:01:
60:f0:3f:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkiHn/APblbXJc86XygzQOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyM2MzOTcxMDkzNDBiNzY3YmNiMzI0NTE1ZjZkMWY4MmM4
Y2M3Y2YwHhcNMjUwOTA3MDMwMDQ3WhcNMjUwOTA4MDMwMDQ3WjAzMTEwLwYDVQQD
EyhiNzIwZDE4MGVlYWU0OThmM2FlMjc1NmU4NjcyOTJkMzRlNDk2MTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMLZ7D7d4rqOMse9hPpDKi5Z9EtD
n8Ti65tuhRv2tTSjEZOOxH09vrwOUqbsBwvdxYGXpIpBaatmq8TTSNB+DnthS+My
H6/eWC+EUQ9QRuE9ldI0vRzrusxp+xYBIhhP5syPcq0GIVwmGpH0ChoNQw9Ofb3k
M7ynm5d1y4kLtiAyPwBmGUly9u06qMdhs05wufftQdwKImQWJ1AhAhpDmG/HjRGe
Ip1y1chgahX7Eihs47EvXNWqWLUN+lhgbNb7/F+LrbE6eZITx9bDFwlpz9Jca3Wx
LcWnWyYvP497ace4pWL7DQT1Y0/RWHQvJxMeursCnwcdc1U1e3Nl/uAb6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcg0YDurkmPOuJ1boZyktNOSWE3MB8GA1UdIwQY
MBaAFAI8OXEJNAt2e8syRRX20fgsjMfPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAt
ZTkwZWVmZGIzYWM1LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9hNTU5MzUtNTJiZi00ZDZmLThiOTAtZTkwZWVmZGIzYWM1
LzEvQWp3NWNRazBDM1o3eXpKRkZmYlItQ3lNeDg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG2kZEh3d
NGst2yovrOnqZm7tg0MM0ls+8EDeKwCev7hgE2NvCtdh9P48P7IWUt1qRG/j9H43
UOdIYODT8n/DqrHombvcWOTEixCkw1t4cDDeebBMERGTpigQvtN3sssGS6Qbh+eu
0AlPMfFu2KrsEH25suiEEPLpYDBYd6ekZFSIDtcuY8ii1cbokJsg8YnaqN8mCYEt
XNzqvuw6Y10eWl75654t5mj8QihpyXDy7Z8Ywrk0yvmx4N8TCHmyXAyHK+G+bG8O
ziYI8nhOZ1TVgRJfWk+dJrrSVVPW4jxwzafq4Vzvh/LE0r6EeLoZchTs61n/fq33
mxdjYv0BYPA/4w==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:25:06 2025 by rpki-client