Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: 9gHVOb71cpA+BNK099qYvrbT4aHb9qFuzU6PucbcSUQ=
Subject key identifier: 9A:00:FC:E2:D8:C8:A6:C6:CB:E7:5F:DD:7A:5B:F8:29:52:FF:AD:4B
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 019A70DC1C2E4245F38A73AC59B19871935F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0F4D
Signing time: Tue 11 Nov 2025 03:01:04 +0000
Manifest this update: Tue 11 Nov 2025 03:01:04 +0000
Manifest next update: Wed 12 Nov 2025 03:01:04 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: wBWZM+3p270k5u3C+wm4ZWiUnsagv8UAumuneG3VfcI=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:70:dc:1c:2e:42:45:f3:8a:73:ac:59:b1:98:71:93:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Nov 11 03:01:04 2025 GMT
Not After : Nov 12 03:01:04 2025 GMT
Subject: CN=9a00fce2d8c8a6c6cbe75fdd7a5bf82952ffad4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:7f:8d:80:6b:0f:48:1c:b3:7a:53:4b:a9:
26:b8:22:9d:a0:65:84:99:26:09:68:5c:af:61:45:
23:19:d0:0a:02:d9:21:40:09:35:72:3d:24:f5:11:
41:95:93:cb:7d:6a:b6:75:79:ce:08:0c:47:57:85:
29:e1:94:7f:a8:66:ff:c3:2b:c7:0c:f2:5a:b3:6d:
e7:ee:55:9a:f2:a0:64:66:fc:94:24:6f:4e:f2:94:
ee:3b:fb:d4:e7:13:5c:c9:5d:2f:fd:a0:0b:f7:53:
a9:d4:82:a9:f9:5e:61:80:c6:85:2b:ab:da:d4:e0:
99:cf:9e:d5:c3:52:b3:a4:1c:eb:1c:b1:98:56:d9:
fb:4e:fa:42:59:56:85:1d:53:ad:c4:da:f3:bd:d8:
16:68:17:e1:97:16:f9:5c:50:bb:90:43:6b:72:fe:
72:56:d2:ea:c5:8d:df:df:39:93:88:8c:a8:24:06:
7c:22:59:a1:0d:d7:cb:f0:f0:6f:51:06:88:51:b7:
94:f2:dc:5d:fa:f5:bc:0a:46:c1:5f:6a:3e:e4:d4:
52:db:33:d1:10:60:bb:e6:5d:d3:c6:2f:cd:bd:1d:
e7:c9:71:d0:57:0b:06:1f:95:3e:59:82:89:8b:74:
84:a1:22:62:a3:b9:b5:c1:4e:23:c9:a7:d3:ff:05:
e6:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:00:FC:E2:D8:C8:A6:C6:CB:E7:5F:DD:7A:5B:F8:29:52:FF:AD:4B
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:fc:72:d0:ca:49:58:e7:74:5f:14:9c:9e:22:e2:00:65:31:
b6:d2:0d:f2:62:2c:d1:db:2e:58:f8:b0:8c:40:22:e0:03:cd:
69:15:c9:d0:fb:4b:93:cc:0e:9f:5f:63:f7:18:7a:10:cf:a8:
9d:22:e9:5f:fe:24:e5:33:fe:61:78:fb:fc:c8:b2:dc:d1:82:
f7:51:e1:59:0d:c8:4b:98:36:84:34:e8:cc:0c:69:78:b0:69:
0a:ae:15:93:5d:c3:7c:60:f8:1a:b5:85:58:a9:33:e2:d0:c6:
f0:62:42:c4:e4:bd:7b:19:57:40:46:15:39:89:ed:c0:d3:9c:
12:80:71:9a:62:2a:de:5c:4f:74:01:52:65:ca:ac:7f:6f:bc:
67:7e:bc:b5:ef:71:ae:bf:f7:84:3c:59:89:6d:99:c0:3b:b5:
bc:14:17:af:0f:9c:c6:31:6e:ea:0c:c6:42:50:2f:7b:dd:bc:
1c:0c:c1:c3:3a:55:21:a3:fd:33:c4:d0:c2:d7:2b:32:2d:99:
05:f1:f0:87:17:a5:25:91:a6:02:81:3b:9f:d9:64:56:7e:7b:
97:88:e2:7a:29:54:0b:ef:bf:d9:57:e6:ba:37:06:1f:27:b8:
6e:0c:6c:1e:99:6b:00:7f:64:e2:90:ea:3b:0f:ba:87:37:5b:
ae:a4:2a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 13:15:21 2025 by rpki-client