Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: lbFm7rTvchguPBFPdOkhl/M1rWRLo/t1923DaVDngu8=
Subject key identifier: C6:B9:0D:2C:82:E9:65:B5:49:31:03:7A:CD:1D:C2:2F:BC:57:F0:B0
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 019936813FD5D599B2523699D1000991A860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 1681
Signing time: Thu 11 Sep 2025 02:01:04 +0000
Manifest this update: Thu 11 Sep 2025 02:01:04 +0000
Manifest next update: Fri 12 Sep 2025 02:01:04 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: FY+FvRMui2EX57bRd4/wcfKVBXWJVxmyMyP4epNZxU0=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:81:3f:d5:d5:99:b2:52:36:99:d1:00:09:91:a8:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Sep 11 02:01:04 2025 GMT
Not After : Sep 12 02:01:04 2025 GMT
Subject: CN=c6b90d2c82e965b54931037acd1dc22fbc57f0b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f4:b0:64:56:b8:eb:23:b8:b8:53:2a:73:83:
de:07:0a:73:03:df:c3:91:7f:e9:16:89:50:f2:05:
40:0a:d0:f7:5b:93:d4:51:82:f4:1d:53:2a:cd:2d:
e0:97:03:a9:97:68:c3:a0:86:91:ff:97:2e:e3:e8:
52:43:e2:c5:e8:61:22:c6:bd:f5:79:ec:a9:d3:b4:
84:da:3b:b7:e2:08:f3:8d:18:65:0e:88:f7:65:46:
2c:3a:e7:ab:ff:a6:94:27:7e:d4:da:47:de:aa:47:
22:a4:97:82:30:28:5e:a6:8f:9c:ef:af:a7:78:72:
2a:a8:b3:51:b7:01:27:14:67:c9:56:ed:8e:67:ea:
ff:5f:9d:40:c2:14:54:96:a9:15:8e:d2:2b:34:88:
f4:f5:50:b2:74:a3:bc:b2:9e:5d:a9:be:0e:98:c9:
cd:4c:b1:29:9b:3b:4c:43:8b:90:be:b6:a0:15:2c:
58:8e:39:bd:af:da:39:16:78:01:e3:90:50:7f:99:
97:a7:66:d4:e4:e3:ae:b6:8e:50:0a:5b:91:1f:a6:
66:c2:ba:4c:4f:e5:28:6e:fd:94:dd:1c:83:9f:1e:
0f:b1:7e:30:4f:8c:67:9d:b5:e2:64:1c:cc:ea:e5:
8f:0f:34:b3:9c:b7:e4:5e:ae:00:71:00:d6:65:eb:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B9:0D:2C:82:E9:65:B5:49:31:03:7A:CD:1D:C2:2F:BC:57:F0:B0
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:3e:f5:dc:0a:29:a6:9a:d2:9a:5f:3d:c1:a7:35:bb:28:3d:
e4:a0:ca:ab:ce:6b:3b:06:89:f9:4e:ab:89:e2:68:e7:df:54:
1b:f6:5d:4a:11:11:80:08:e4:84:f5:cf:dc:f2:16:85:59:34:
dc:2f:ff:c7:b6:e9:d6:05:c6:57:52:06:de:dc:ca:c1:b3:5c:
04:dc:bf:fd:f9:4a:6f:3c:8d:fb:95:7c:22:fb:a4:b6:10:6c:
ef:c8:36:f1:6b:89:80:6c:8a:6c:25:f0:82:5e:d1:2b:70:27:
c6:89:58:39:81:72:d4:ef:0b:83:d1:0a:8c:de:c6:13:fa:05:
66:07:dd:c5:d8:e0:e7:f3:7d:13:54:b5:cf:89:57:ec:d3:ae:
05:94:de:f2:e0:08:88:ef:e8:06:b5:0f:88:33:34:2f:72:91:
99:b3:e4:0e:95:43:c7:d6:8c:1b:98:9f:f4:75:cd:5d:32:a5:
93:ca:ff:7f:23:1b:a2:18:74:22:58:94:ad:2e:e3:21:df:03:
2d:6a:67:4f:71:d8:15:30:7a:76:89:38:4b:e5:8c:6b:a0:99:
0e:8a:f3:05:17:d0:b9:4b:f9:e9:aa:97:97:e1:58:98:52:cc:
ab:6d:65:1e:af:28:62:92:bb:37:6d:d9:70:e8:53:c3:2f:79:
38:b8:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 10:06:53 2025 by rpki-client