Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: R7qzJY7G+z3dX+NskVd3W0zuz0Z3blV4MYWGBpvNGBg=
Subject key identifier: 69:68:21:A0:21:65:39:E9:D4:89:24:F9:9A:49:A5:C3:BE:C6:C9:E7
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 0199C5D7ED76440327C561C608B30D7AE775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 04D1
Signing time: Wed 08 Oct 2025 22:01:26 +0000
Manifest this update: Wed 08 Oct 2025 22:01:26 +0000
Manifest next update: Thu 09 Oct 2025 22:01:26 +0000
Files and hashes: 1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: Rg12hYSvgBPixToA8+oVQSbhbA2FDXyksWRyKtug/+o=)
2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Oct 2025 16:33:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:c5:d7:ed:76:44:03:27:c5:61:c6:08:b3:0d:7a:e7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Oct 8 22:01:26 2025 GMT
Not After : Oct 9 22:01:26 2025 GMT
Subject: CN=696821a0216539e9d48924f99a49a5c3bec6c9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:46:49:91:8a:1b:dd:41:e3:bc:3a:35:d9:e2:
fd:57:f0:b7:b9:63:a1:d5:63:dd:2c:63:c8:fb:13:
1f:bf:2b:72:d7:4c:2d:9b:f6:a8:43:bf:ac:22:ac:
4d:ba:6f:95:79:2d:a9:69:a5:e1:5a:52:30:ab:05:
63:9f:a1:3b:89:a1:91:f2:a5:29:6c:c4:97:ae:ce:
4e:14:be:6a:60:86:7c:cb:31:fe:e8:f3:6f:8c:ad:
dc:dd:df:96:44:3b:9e:35:fc:82:97:5a:49:76:b4:
4f:4c:af:45:27:d6:cf:7c:e5:7a:0e:39:f9:c3:a9:
db:e0:84:0b:c5:0c:d3:fc:6a:a6:7d:6b:fc:b3:16:
67:fb:a0:f8:d6:83:08:d5:49:c2:a1:a0:39:0e:ad:
80:51:7c:10:6a:62:66:c0:59:ff:89:b9:05:0c:95:
11:bb:d5:50:53:12:7d:c0:85:8d:32:53:fb:c6:9c:
56:30:49:a3:79:b6:75:c5:91:38:b4:ca:49:5a:cb:
58:14:26:ce:4b:c1:7e:1c:9b:13:27:36:c9:2e:71:
eb:3e:de:2b:01:06:f0:44:21:ed:87:0a:cc:c6:70:
5b:21:aa:a2:54:b3:a6:e2:a7:9b:47:2f:63:85:02:
18:d5:96:39:79:50:34:b9:8b:43:49:52:54:f1:f6:
3f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:68:21:A0:21:65:39:E9:D4:89:24:F9:9A:49:A5:C3:BE:C6:C9:E7
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:25:ca:cd:0e:3c:b1:e4:60:95:51:1d:82:bb:99:6f:b3:
d2:c1:b4:87:3d:67:34:38:19:91:c5:47:0a:41:f5:04:87:95:
82:ff:88:09:e0:aa:1d:00:d6:9b:cd:a6:e4:35:42:2d:9c:0a:
f7:48:c9:6e:3c:0f:79:7a:80:fa:b5:33:da:62:0d:d0:45:34:
cf:3a:a5:1e:9f:87:b8:e0:0d:9c:e5:49:2c:d2:10:e2:73:54:
27:d0:50:18:88:4d:db:27:78:32:be:c1:d6:27:2c:43:4a:2a:
ee:ef:42:79:16:7b:f4:28:bb:c5:d1:c4:1f:61:da:58:33:31:
28:db:84:51:c1:dc:47:2d:4b:14:88:3f:a1:49:c6:02:ef:ad:
77:c3:8e:86:46:38:b5:40:70:1d:25:21:27:a5:7d:03:e9:ee:
7e:90:1c:00:52:0c:ce:58:22:89:1c:be:2f:1b:a8:99:4c:88:
ce:78:67:ef:b1:db:1c:28:7a:86:f6:29:28:35:0e:71:d8:4b:
f6:9c:81:4e:82:3d:f7:e0:94:b3:15:fc:e1:a0:ef:e9:a8:c6:
41:38:6a:b6:59:dd:83:56:ec:ba:f0:c1:37:4d:57:fc:b5:12:
ac:41:cd:6e:cd:f7:f1:c2:27:25:2b:03:1e:59:41:00:ff:13:
2c:2e:b3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 9 01:36:52 2025 by rpki-client