Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: +fLG29duy84sckkOtAkknV3DXqaY4mxC6DY5FZubEvw=
Subject key identifier: BF:1B:84:70:15:AA:6D:DC:7E:AE:40:1C:17:D8:F9:EA:F7:F1:28:B0
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 0198D6605F7EC1132A6831FA7248B33CF308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0D31
Signing time: Sat 23 Aug 2025 10:01:36 +0000
Manifest this update: Sat 23 Aug 2025 10:01:36 +0000
Manifest next update: Sun 24 Aug 2025 10:01:36 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: r1/lKTebJj/bOyhUSMK6l3YEWORoQomPv3Jse7nBiDw=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:5f:7e:c1:13:2a:68:31:fa:72:48:b3:3c:f3:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Aug 23 10:01:36 2025 GMT
Not After : Aug 24 10:01:36 2025 GMT
Subject: CN=bf1b847015aa6ddc7eae401c17d8f9eaf7f128b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:07:2a:34:d3:08:2b:21:4f:aa:a3:ac:99:
80:c6:85:29:b7:bd:18:9f:89:2d:fe:bf:a2:db:46:
86:f1:96:28:83:0b:24:65:2d:6b:08:3d:51:3e:e2:
35:ea:97:44:87:cb:71:9b:29:62:f3:a3:14:40:dd:
c4:1c:5c:35:f5:bd:b0:66:77:0d:97:7e:6a:80:70:
a9:64:10:2e:5f:4f:fa:30:03:d6:1c:1e:a5:13:bf:
fa:48:cf:39:6f:58:5f:d3:0e:68:c0:ea:59:3b:37:
99:55:5e:cd:0d:da:63:0b:eb:05:a4:cb:f0:0b:c9:
43:bc:68:8a:0b:7c:b8:33:c1:69:34:ee:b1:bb:7c:
67:a0:36:b5:15:0d:55:7b:44:e3:b1:c9:81:ff:d5:
16:33:8f:9d:3a:99:46:74:de:71:a4:a1:a9:23:85:
65:7a:28:16:15:63:e0:87:9a:2b:32:08:84:08:87:
2e:79:cb:c8:0f:38:05:cb:a7:81:0e:35:70:a6:1f:
59:6c:49:64:f2:4c:69:80:06:7e:0c:78:4b:8c:8b:
d8:88:e8:a1:96:93:9c:a2:17:41:ad:c2:3c:05:83:
b6:55:e1:2e:21:35:22:cc:aa:91:45:50:de:95:ad:
ca:9c:68:83:fb:61:fa:d3:13:7c:26:e9:36:47:8d:
81:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:84:70:15:AA:6D:DC:7E:AE:40:1C:17:D8:F9:EA:F7:F1:28:B0
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:21:45:4c:01:33:1c:b6:96:28:bf:5a:8b:2f:e5:59:79:a9:
73:de:32:f2:2b:76:17:4a:1d:50:9d:cb:c9:1c:fc:3a:eb:31:
35:b2:ea:fd:85:c2:7f:b7:76:d3:74:54:6a:79:8c:9c:50:e5:
66:69:36:1f:23:39:eb:aa:72:44:bc:0d:25:f3:de:cc:da:10:
08:2b:75:c4:d2:b2:96:2d:c1:2d:b6:8d:db:f6:c5:da:0f:df:
58:ea:c9:76:73:3f:50:73:93:38:45:b5:02:e9:53:23:71:44:
88:21:61:80:0c:6c:cd:4b:35:16:55:cd:db:e5:2e:bd:35:3b:
70:ef:48:92:ec:0e:3b:d0:14:67:1e:79:f8:8a:45:3c:c9:ed:
b9:0d:e0:b7:0c:f8:6c:78:92:82:11:59:70:fe:4a:bd:a6:7e:
b3:08:76:bc:3f:d9:45:96:4f:75:f2:9f:e0:3c:e8:b4:ad:80:
ea:82:a4:43:e8:da:e6:79:f0:de:0b:56:37:8b:2a:8d:22:96:
09:47:98:b8:cc:50:ea:18:28:07:25:52:0e:27:0a:de:8a:63:
b0:bc:fe:8e:97:aa:9f:04:3d:e7:12:8f:f5:02:c2:24:b3:dc:
ff:09:7e:08:ac:27:41:c7:f1:2d:d3:ba:c7:77:f4:c1:79:87:
fc:8a:71:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:10 2025 by rpki-client