Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: DdjiSobxOc2q8X2O+3WJC75zZ2aOpJHk1onCQbpXWAs=
Subject key identifier: 2D:68:08:4E:FA:72:F8:25:B4:0D:90:4F:88:D7:DB:60:18:B7:03:E9
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 0197B6A0F48C39D4E54035571F9DCAD038D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0C9C
Signing time: Sat 28 Jun 2025 13:01:31 +0000
Manifest this update: Sat 28 Jun 2025 13:01:31 +0000
Manifest next update: Sun 29 Jun 2025 13:01:31 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: KhVQAuc0x4nkxBcq51QO6U9D6iyLzNopLqJ1DF6hXu8=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f4:8c:39:d4:e5:40:35:57:1f:9d:ca:d0:38:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Jun 28 13:01:31 2025 GMT
Not After : Jun 29 13:01:31 2025 GMT
Subject: CN=2d68084efa72f825b40d904f88d7db6018b703e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b5:54:01:c9:58:5d:39:a8:86:fe:f5:ea:cf:
fd:3e:f0:ff:9e:fb:9d:a2:7c:5f:85:49:f1:e4:88:
b3:d7:9e:cd:87:cd:67:c9:2e:87:21:d4:9e:a2:10:
89:e8:d8:78:e0:3d:6b:e1:65:d9:8c:07:3d:dd:5d:
b2:53:13:35:de:6e:af:d1:ac:a7:dd:70:c2:59:c2:
44:69:5a:ac:91:d9:c3:57:3a:fe:c0:b0:55:e4:35:
d2:9f:ba:2e:cd:5d:fb:4d:76:e2:d0:a4:59:cf:c8:
4a:8d:f2:64:c9:cb:2a:62:ba:3c:91:12:e5:0a:3b:
41:db:f1:72:70:e4:6e:f9:9e:cd:91:df:ac:d2:ed:
b0:57:69:fd:34:c7:58:22:5c:ac:23:41:a1:88:99:
a1:6c:e9:24:a5:40:39:61:43:a9:6f:a4:40:ff:20:
ce:02:5f:a0:b6:18:d1:f3:88:8d:34:ac:81:3b:9b:
94:57:71:02:90:2e:c7:f8:f3:69:e2:49:c7:b2:5a:
66:cb:44:12:bd:74:ea:18:cd:c9:15:2c:45:a8:04:
5b:4b:26:f9:a7:05:76:ff:d4:05:b2:4b:47:96:01:
df:2a:65:03:79:9d:ed:60:de:07:a6:cb:35:38:93:
44:59:38:1c:50:9b:a7:ed:d3:21:5e:36:c7:1f:5b:
9a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:68:08:4E:FA:72:F8:25:B4:0D:90:4F:88:D7:DB:60:18:B7:03:E9
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a1:a2:b7:1b:2b:58:93:df:a6:5e:b0:68:0a:c3:f4:b1:74:
ba:27:29:73:12:2a:a9:dc:b7:52:33:89:3f:d3:35:dc:e2:7f:
0e:65:b9:cf:80:9c:3a:31:7b:43:df:81:24:cf:77:c7:f9:c3:
a6:63:74:14:36:c5:e1:bd:10:e6:4b:52:d5:7d:fb:fb:ab:f6:
d2:1b:40:d9:8b:48:08:3f:87:fb:51:19:1b:ac:d7:00:87:12:
64:19:3b:03:16:ee:30:33:b3:3b:90:18:11:48:9b:e2:9e:78:
c1:1b:06:cc:4b:56:d9:f1:5f:20:fb:45:2b:33:3a:88:23:aa:
d9:75:0a:d2:e9:25:09:36:c9:38:e4:1f:9e:ec:b0:6e:8c:ed:
e8:37:f7:2f:08:ab:a2:da:a1:0a:e7:ed:11:b3:43:2c:e4:15:
a6:54:e2:88:27:39:74:fe:1b:32:44:56:46:a0:0f:e7:28:1b:
6e:ad:08:cc:5a:b4:10:c7:91:fe:22:a0:5d:2b:a5:17:f5:d7:
4d:47:6d:23:b4:84:70:bd:07:75:0c:9e:8d:43:6f:bf:9d:a2:
29:93:ef:f5:1a:9d:f0:0d:25:84:aa:ff:5f:1d:e7:5b:1f:89:
23:8d:fc:69:9b:7c:fd:ef:08:3f:56:0c:87:20:b8:f5:25:35:
46:cd:c6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:51 2025 by rpki-client