Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: NYbTOJ1oSwr52iZZIF8f3a18lTB/RDzngSsCs0VjLvI=
Subject key identifier: CE:0E:5A:B3:00:18:27:23:88:8C:9C:B1:1B:0B:59:CD:0D:31:41:D9
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 019A7225F0EC2018E875B7C964EA828F60D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 1727
Signing time: Tue 11 Nov 2025 09:01:20 +0000
Manifest this update: Tue 11 Nov 2025 09:01:20 +0000
Manifest next update: Wed 12 Nov 2025 09:01:20 +0000
Files and hashes: 1: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: OrMNxRns8XDRHPtaMGq2EcTHaJidqBKG4xgduQVuQZs=)
2: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
3: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (hash: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:25:f0:ec:20:18:e8:75:b7:c9:64:ea:82:8f:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Nov 11 09:01:20 2025 GMT
Not After : Nov 12 09:01:20 2025 GMT
Subject: CN=ce0e5ab300182723888c9cb11b0b59cd0d3141d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:af:59:f5:3b:3d:85:4b:e9:eb:93:22:a9:3e:
d9:2e:cf:61:0d:b8:4a:19:28:3c:e6:c9:2d:6d:fd:
75:f6:fa:b6:00:3a:21:85:2a:da:0a:11:56:ad:0c:
cd:77:70:79:f2:a6:8e:72:9a:86:7c:ce:48:67:0c:
1f:16:7f:97:a3:29:bd:c6:df:71:22:3f:44:16:32:
9a:9e:a8:bc:ca:83:c3:b2:aa:cc:cb:af:4c:db:d0:
ce:5d:92:6d:cc:a9:d7:0f:04:19:eb:4a:87:e6:a0:
58:e9:72:0d:38:ae:f1:42:06:db:cd:90:8b:01:86:
26:9d:1b:4c:bb:31:45:b5:50:e7:bb:02:1e:bf:ac:
30:7c:b0:48:f3:78:6d:bc:af:eb:93:54:a2:37:22:
b4:ae:a5:f5:b6:6b:75:01:dc:84:3b:24:3c:8d:08:
54:14:60:01:c3:1c:38:fe:46:46:ba:b9:b5:fe:0e:
78:5a:a0:96:85:29:d6:10:58:5b:89:ef:b9:31:75:
48:ef:2b:2a:cc:2f:28:1e:7b:13:fd:74:bb:2e:34:
ea:71:e9:58:0a:ef:1c:66:8a:3c:24:b9:7f:7b:75:
fb:4b:01:d7:0c:52:2d:04:06:76:e3:50:2e:a6:89:
dd:51:20:a9:5c:89:c3:5e:ea:dd:e1:77:40:d8:d6:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0E:5A:B3:00:18:27:23:88:8C:9C:B1:1B:0B:59:CD:0D:31:41:D9
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:a9:df:6e:da:cd:a1:13:1e:c1:88:d0:ab:79:35:d1:c6:18:
e6:8e:34:73:80:0d:34:e8:b2:a9:03:cd:c1:e4:71:51:ee:ac:
d5:fb:8b:3b:6b:bf:e1:0a:36:f5:00:4f:5b:80:ab:f6:fb:1f:
c0:08:dd:d2:1f:b4:6b:89:d0:0f:94:f5:26:c2:12:f9:21:74:
fe:cd:0f:24:69:a9:0a:57:60:a9:46:3c:8d:39:9f:6c:65:9a:
f5:ae:8d:c7:91:c6:81:73:d2:d8:0b:81:fb:05:80:0d:ec:4f:
5b:37:41:fd:5a:e4:53:2f:7e:b7:57:5d:3a:df:d6:24:a1:b1:
20:35:2b:d8:f3:4f:1c:3b:9e:52:19:40:02:2c:35:fc:55:c5:
01:8a:f7:34:56:f4:17:08:d7:0c:01:f3:03:a6:65:41:13:44:
c7:8b:b1:64:ed:d5:8a:f1:96:ea:84:2c:38:ca:56:fc:82:e8:
a5:6a:d1:85:aa:de:96:f3:69:f5:c9:b2:dd:6f:70:ee:44:fe:
cb:d6:ac:06:41:85:f8:6d:11:18:c4:9c:7d:3f:cd:40:ba:97:
42:15:d2:2b:e3:aa:21:a1:d2:72:a4:04:b1:ca:f1:80:c9:65:
b3:60:dc:8d:f1:88:45:db:c6:38:cd:ff:dc:fb:c2:55:50:b7:
06:40:7f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:08:41 2025 by rpki-client