Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: pBwlsTHzgKyhZ8i3cPBsR5bl8aZoR6fimFhYoOIkNPU=
Subject key identifier: D6:9A:32:61:4F:9E:D4:D9:7F:AE:B5:6A:3A:FC:95:CF:CF:61:AE:9B
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019A221B6611392121377AC1CC58C366E420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 16FB
Signing time: Sun 26 Oct 2025 20:00:12 +0000
Manifest this update: Sun 26 Oct 2025 20:00:12 +0000
Manifest next update: Mon 27 Oct 2025 20:00:12 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: vomoGQQ18sHT5+UAPO1c3ZlGh6ktmGWo3aB1AryUo4k=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 20:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:22:1b:66:11:39:21:21:37:7a:c1:cc:58:c3:66:e4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Oct 26 20:00:12 2025 GMT
Not After : Oct 27 20:00:12 2025 GMT
Subject: CN=d69a32614f9ed4d97faeb56a3afc95cfcf61ae9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:77:cf:8c:94:23:f5:60:99:de:94:40:b4:3e:
6f:0c:7f:a2:f6:ee:4c:7c:88:f7:1a:bf:65:ea:81:
28:35:6b:a8:b9:bb:29:05:08:39:50:82:17:ea:8a:
1a:e2:18:b0:2d:23:bd:27:d2:08:3d:87:d9:f9:71:
70:bc:12:4c:c6:81:54:f0:a7:ae:f6:c7:51:2c:68:
57:f3:72:b1:c4:41:48:d0:5d:3a:a9:40:80:53:57:
11:a2:fc:b0:12:2e:57:4c:95:89:b3:4d:54:94:21:
af:4f:86:b2:51:1d:eb:94:c7:18:11:69:78:a8:8a:
d7:cb:bb:83:16:f5:07:c6:e5:c4:4c:0c:e0:a7:d6:
6c:a9:1f:16:f3:dd:2c:4c:1c:5a:cc:83:35:ef:42:
a3:c1:58:00:f6:fb:58:64:d4:37:b1:90:74:d0:9d:
ec:bb:0b:bb:8b:ca:d4:06:2c:7c:6e:27:1b:35:4d:
a6:1e:8a:b6:a1:73:be:99:2b:1c:74:15:3a:97:3d:
4e:98:d7:74:97:85:4a:ce:02:a1:7e:04:75:7c:b3:
c0:a2:23:86:fa:d1:8a:89:4e:1c:f7:17:3a:af:e2:
41:3c:d9:7a:5e:bd:b2:86:85:b4:bb:85:4c:13:f6:
0d:e4:e4:57:40:19:dc:db:cc:58:ce:97:6b:a9:c9:
25:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9A:32:61:4F:9E:D4:D9:7F:AE:B5:6A:3A:FC:95:CF:CF:61:AE:9B
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b7:64:a6:88:54:58:0a:e9:d7:04:31:cf:e6:a8:1e:cf:9c:
4d:1f:3d:9b:de:6a:12:8f:95:fe:7b:bc:85:72:40:e7:e8:47:
35:57:13:ee:bd:e9:f8:12:a2:16:de:69:3d:3e:ef:61:49:50:
4f:47:6f:1a:16:bb:e1:52:7b:1e:41:d6:11:20:ae:55:89:92:
7d:39:2c:64:ec:e5:77:c9:2c:a8:f0:13:35:64:74:3f:06:99:
84:03:40:a7:d3:12:18:14:f5:70:e1:af:ee:e9:62:6e:9a:8e:
44:ca:30:d2:71:69:48:9c:2d:f1:4b:6a:b2:98:06:a2:5e:82:
0b:b2:be:5e:80:d8:6f:73:09:6c:75:f5:97:1f:1c:a6:d9:95:
c9:3d:26:eb:90:8f:a4:aa:e5:c3:5b:e4:dc:2b:1a:c4:1e:4d:
f3:b5:a5:f7:17:76:16:de:ba:21:cf:e5:2d:76:9d:2f:8b:00:
22:3a:45:63:27:e9:de:00:47:5b:9f:45:fc:5d:ec:5e:f4:22:
f0:38:93:19:56:45:cb:27:c8:d9:e3:a8:97:3c:7a:d4:c6:b4:
05:04:02:0a:88:3b:d0:78:83:a6:91:27:2a:b7:f1:69:8c:48:
cf:63:8d:b6:7d:81:41:de:a1:e2:45:81:06:f0:22:d2:e6:46:
f8:05:6b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 06:34:03 2025 by rpki-client