Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: WqPYB4WKgKFteCXsJg8VdTCId9kWTscXmbexnVOSxsE=
Subject key identifier: 1C:43:6E:87:88:A4:9F:55:8E:B8:22:BC:01:A8:82:D7:90:15:F8:32
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 0199228CD4EA5641179AD676F8B67ACFB4E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0DE7
Signing time: Sun 07 Sep 2025 05:01:18 +0000
Manifest this update: Sun 07 Sep 2025 05:01:18 +0000
Manifest next update: Mon 08 Sep 2025 05:01:18 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: HyJtqiQJF49LKGkB+bugK7QXLypI+xrdi+ILUtf3aCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:d4:ea:56:41:17:9a:d6:76:f8:b6:7a:cf:b4:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Sep 7 05:01:18 2025 GMT
Not After : Sep 8 05:01:18 2025 GMT
Subject: CN=1c436e8788a49f558eb822bc01a882d79015f832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:76:45:57:76:3e:07:fc:7a:45:5a:39:e1:d9:
97:3f:1e:e3:1b:25:23:96:40:4a:73:d4:b9:8f:7e:
b1:f5:79:ae:5b:ea:0d:f5:1a:ae:80:84:35:87:04:
29:38:d0:9f:8d:b5:eb:d5:4b:7e:f1:ce:d4:49:7b:
2f:29:01:6a:f3:0d:df:83:f2:d0:a1:88:f2:0f:7e:
d5:82:6f:e9:41:85:4d:c3:cb:23:3c:d2:b7:84:73:
6a:ec:88:f3:ff:e0:7b:79:bc:ce:8a:8b:72:32:e5:
70:63:62:c4:c0:00:6e:c3:ae:19:6d:b1:d4:b6:37:
f8:98:48:d2:21:f2:25:26:26:d4:13:e6:8f:c9:ba:
23:d7:a6:86:89:ea:da:47:92:56:f4:b7:fe:2d:eb:
3b:96:84:72:ed:48:c5:f3:62:9d:af:e0:b2:18:3c:
36:ce:3e:33:1f:a5:a8:3e:c7:08:8b:52:dc:96:21:
01:a3:9c:f5:15:fb:f2:d7:4f:2a:60:ae:48:30:bc:
3c:a0:11:8b:b2:0d:6c:ce:ab:3d:78:84:49:df:7b:
fa:23:f9:2e:32:35:35:a3:2c:62:7c:03:ad:f1:47:
e8:8e:02:e7:62:91:86:4c:e0:76:e6:85:99:8f:f0:
18:8e:a8:29:8c:25:55:26:b1:c2:d4:c2:b2:d6:eb:
00:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:6E:87:88:A4:9F:55:8E:B8:22:BC:01:A8:82:D7:90:15:F8:32
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:04:01:e6:2b:03:0e:15:11:da:b2:c5:3d:d1:00:33:7d:
be:47:82:4d:57:12:b9:a0:7e:61:5b:7a:2d:0a:e6:a9:1e:44:
b5:95:3b:9b:0b:c3:5a:ca:d1:ff:94:3e:d1:eb:62:9d:7c:4b:
2e:72:a5:b8:1b:86:13:43:fd:d9:34:e4:53:dc:88:9e:be:96:
bf:d0:8c:a0:35:59:fa:d2:b2:d6:59:02:2b:63:95:5f:ad:20:
ca:5c:85:c3:c1:96:da:88:17:aa:a6:38:62:ea:f5:b8:d3:ef:
43:72:30:8f:8c:52:1f:9c:83:b7:60:e9:73:bb:46:de:85:bb:
5a:d5:72:28:a9:ba:dd:67:75:d4:80:5b:27:b4:7e:62:b3:ae:
00:0f:75:5b:b5:98:1d:9c:fe:ff:00:9d:34:28:0c:ef:99:df:
4c:05:31:3f:55:cc:7d:c0:d5:6c:89:2d:8c:7a:b0:f9:0d:75:
4e:18:cf:8c:44:14:2b:f4:b4:e2:4b:bd:84:d0:1a:6c:48:76:
ad:12:c4:90:74:19:ba:88:bf:79:d9:0e:79:50:6b:ce:02:f7:
8e:1a:cf:d8:bf:aa:09:7b:81:16:ed:d3:e7:fd:9d:69:8f:fd:
9d:f9:5a:51:fe:5f:a7:b9:f9:24:0d:49:08:a7:e3:73:ec:97:
3b:64:8d:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:23:10 2025 by rpki-client