Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: gqAuEfXFhCe8+tSqYjxOBQR++O+xKtEuXH/BDX6D2OU=
Subject key identifier: AD:8E:D8:F0:98:47:5E:D1:3A:AF:30:70:D2:67:1C:C8:4B:6C:52:0A
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019A7293F3DDB26BECF35E639D381EA36952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0E95
Signing time: Tue 11 Nov 2025 11:01:30 +0000
Manifest this update: Tue 11 Nov 2025 11:01:30 +0000
Manifest next update: Wed 12 Nov 2025 11:01:30 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: p2z8zsA+mTjoBORB4OCaSjshEqmJTiErFOpaltU98SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:f3:dd:b2:6b:ec:f3:5e:63:9d:38:1e:a3:69:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Nov 11 11:01:30 2025 GMT
Not After : Nov 12 11:01:30 2025 GMT
Subject: CN=ad8ed8f098475ed13aaf3070d2671cc84b6c520a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:72:dc:91:cc:12:93:33:d8:d3:7a:ce:1c:aa:
f2:0c:27:dc:63:ed:48:4a:20:f6:6e:12:33:d4:3a:
20:b2:c4:d7:91:a5:be:0b:a9:15:3f:09:d6:88:f2:
f1:4c:72:99:ea:23:c9:e1:2a:59:d9:36:a1:20:b2:
41:83:2b:0a:7a:b4:b6:05:74:fe:e6:3f:49:38:85:
29:06:e3:e7:a5:df:97:2d:e2:a5:04:a5:e9:5c:07:
a4:7a:97:ca:94:d7:06:cb:6b:1e:98:ee:8f:61:7d:
f4:ce:2b:90:17:c5:0d:a0:c6:43:6d:d4:64:23:86:
c2:5e:0e:e0:e5:86:e7:66:33:dd:c5:15:85:5f:0b:
d7:54:52:cd:b0:31:37:96:82:65:31:7b:15:4d:34:
48:f9:24:36:ae:36:e1:53:6d:dd:41:ee:5d:f2:5c:
fb:cd:29:75:7e:e2:87:d3:ec:07:df:22:cf:92:11:
c2:90:78:56:64:e4:5a:ff:5e:71:76:6e:c5:48:66:
dc:ee:1a:5a:17:65:f5:60:87:88:12:12:b1:2d:f6:
6c:8b:91:29:83:ef:f4:8f:cc:6b:3a:1f:8d:36:27:
ca:bc:9e:46:aa:0a:0b:df:be:94:40:85:c0:e3:2d:
0d:f9:7a:af:35:39:98:5a:3e:a3:a8:3c:69:18:e7:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8E:D8:F0:98:47:5E:D1:3A:AF:30:70:D2:67:1C:C8:4B:6C:52:0A
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:78:13:71:76:e1:6d:95:73:2c:00:5a:0b:68:73:5b:95:9e:
fc:e3:1d:35:6d:f1:fa:13:de:db:ab:98:8b:24:a9:e0:1d:ca:
5a:cf:5d:80:d6:01:cf:9b:cc:94:57:9d:26:45:3f:d8:5a:46:
1f:a7:af:6c:88:a8:9f:e0:a2:56:81:04:11:db:98:1a:28:2c:
54:1d:09:9b:24:b0:c3:3f:e4:d8:70:ec:33:54:4d:34:7c:91:
9b:03:83:f2:a7:7c:61:e3:79:7a:b2:61:86:ac:64:22:1f:ef:
4a:a5:34:e8:98:3e:76:53:9b:fc:c2:84:8f:01:65:0a:f0:32:
31:8c:17:ba:44:79:c1:32:37:5d:c5:85:26:33:64:0e:2c:fc:
a8:f9:86:53:d3:30:da:4e:03:55:0b:0a:00:e2:00:66:a9:ad:
d8:1d:3a:89:97:f3:38:0a:4b:a7:2c:fc:22:42:d4:00:8f:fb:
11:6a:8a:e2:31:39:4c:1a:00:38:78:6f:a8:b1:fd:a1:19:b5:
5b:21:ed:9b:35:8e:1a:5c:4c:69:2e:49:5d:4f:60:c4:92:25:
17:5c:4e:4d:0e:43:84:09:ba:88:aa:1d:fc:65:f6:ab:e7:d3:
dd:55:1e:66:27:67:3d:41:a1:42:2e:67:65:08:c9:eb:4c:6d:
d8:d4:95:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpyk/Pdsmvs815jnTgeo2lSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMzc5ODIyMDdlNjJkZWQwNjkxZGNiMThlZjZlYTMyZDQx
M2YzZjYwHhcNMjUxMTExMTEwMTMwWhcNMjUxMTEyMTEwMTMwWjAzMTEwLwYDVQQD
EyhhZDhlZDhmMDk4NDc1ZWQxM2FhZjMwNzBkMjY3MWNjODRiNmM1MjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nLckcwSkzPY03rOHKryDCfcY+1I
SiD2bhIz1DogssTXkaW+C6kVPwnWiPLxTHKZ6iPJ4SpZ2TahILJBgysKerS2BXT+
5j9JOIUpBuPnpd+XLeKlBKXpXAekepfKlNcGy2semO6PYX30ziuQF8UNoMZDbdRk
I4bCXg7g5YbnZjPdxRWFXwvXVFLNsDE3loJlMXsVTTRI+SQ2rjbhU23dQe5d8lz7
zSl1fuKH0+wH3yLPkhHCkHhWZORa/15xdm7FSGbc7hpaF2X1YIeIEhKxLfZsi5Ep
g+/0j8xrOh+NNifKvJ5GqgoL376UQIXA4y0N+XqvNTmYWj6jqDxpGOenKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK2O2PCYR17ROq8wcNJnHMhLbFIKMB8GA1UdIwQY
MBaAFGo3mCIH5i3tBpHcsY726jLUE/P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYt
MjM1MzE2NTRlNTg5LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9iODExZDUtYmEzNS00MjNkLTg2MmYtMjM1MzE2NTRlNTg5
LzEvYWplWUlnZm1MZTBHa2R5eGp2YnFNdFFUOF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcngTcXbh
bZVzLABaC2hzW5We/OMdNW3x+hPe26uYiySp4B3KWs9dgNYBz5vMlFedJkU/2FpG
H6evbIion+CiVoEEEduYGigsVB0JmySwwz/k2HDsM1RNNHyRmwOD8qd8YeN5erJh
hqxkIh/vSqU06Jg+dlOb/MKEjwFlCvAyMYwXukR5wTI3XcWFJjNkDiz8qPmGU9Mw
2k4DVQsKAOIAZqmt2B06iZfzOApLpyz8IkLUAI/7EWqK4jE5TBoAOHhvqLH9oRm1
WyHtmzWOGlxMaS5JXU9gxJIlF1xOTQ5DhAm6iKod/GX2q+fT3VUeZidnPUGhQi5n
ZQjJ60xt2NSVBg==
-----END CERTIFICATE-----
Generated at Tue Nov 11 13:16:44 2025 by rpki-client