Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: ePyqcdYXEYhPsYA9fwTQqj7ftJjppGcnEAXGw35mBd4=
Subject key identifier: E6:D9:F2:24:E6:A9:8F:C4:27:56:05:77:72:81:4D:D3:B0:E0:E4:AF
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 0199FE475BCF0253FB1F3BA8FEFF11EF518C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 16E4
Signing time: Sun 19 Oct 2025 21:01:53 +0000
Manifest this update: Sun 19 Oct 2025 21:01:53 +0000
Manifest next update: Mon 20 Oct 2025 21:01:53 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: CZbz00yQolmBwiDpXPpMl3keawmcbT+cK6rD9J77BJI=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:47:5b:cf:02:53:fb:1f:3b:a8:fe:ff:11:ef:51:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Oct 19 21:01:53 2025 GMT
Not After : Oct 20 21:01:53 2025 GMT
Subject: CN=e6d9f224e6a98fc42756057772814dd3b0e0e4af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:24:b7:09:bf:bc:28:e7:8e:4a:5b:f7:28:58:
1b:2c:84:62:16:48:55:60:38:64:cd:66:9a:d2:0b:
a0:74:be:4a:d3:bb:b9:4b:66:a5:fa:fc:01:c4:39:
61:fa:8e:10:0c:30:c9:a7:e9:a1:52:ea:d0:08:2f:
0f:8e:54:76:dc:5b:1d:71:4e:bb:ee:99:f3:71:70:
af:5f:0d:8b:dd:a9:3f:63:d5:a0:66:4d:ad:fd:66:
71:85:e2:72:05:14:8e:13:48:9b:de:ee:79:0e:03:
02:51:9c:c7:b1:b7:fe:2d:02:18:1c:dd:97:b6:e5:
70:bf:d0:80:c7:4a:14:90:78:06:50:09:80:68:c1:
a1:c1:b4:bf:a3:16:75:2a:6f:a1:0f:9b:27:9d:5b:
fd:25:f0:66:2b:3e:59:a4:30:e9:cc:1d:e4:98:4c:
ab:fc:5e:d2:54:52:b3:49:3c:5b:27:2b:09:13:ec:
3d:38:dc:c8:12:45:05:82:06:ae:c3:31:7d:ff:6c:
e7:7e:6f:08:39:da:7b:e8:68:a7:9a:64:1d:4b:69:
94:2b:64:77:a9:32:0c:1d:0b:d9:05:3b:cc:ee:40:
ec:ae:d1:51:52:8a:5a:09:40:66:fc:ce:bc:f7:20:
53:c7:9b:b9:b7:96:19:74:28:79:f6:90:87:ca:c3:
12:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:F2:24:E6:A9:8F:C4:27:56:05:77:72:81:4D:D3:B0:E0:E4:AF
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b0:95:a5:c1:b4:6d:96:15:6d:cc:1e:4a:04:0e:26:7c:e8:
74:6a:34:e5:d1:20:7f:e3:97:9f:48:6c:91:08:b2:dc:d0:95:
5f:d6:23:83:79:a4:b5:83:42:7a:68:70:1f:13:1e:8b:41:f8:
b8:68:8e:0c:9c:83:ce:65:c6:55:fb:a2:f9:89:ef:27:38:18:
b9:af:ef:52:d8:c8:44:a0:11:3f:98:23:ef:3f:d5:ce:85:73:
a6:e7:ba:d8:ff:16:03:e6:99:73:2e:28:96:6d:b3:a7:4b:54:
ee:eb:1c:bd:58:52:22:2d:d0:10:76:aa:91:63:21:50:47:c4:
67:12:24:c0:37:ac:78:8f:9e:5a:2b:f1:09:99:49:69:7c:47:
32:1b:4a:4a:28:27:ef:88:96:46:79:f7:b6:f9:bb:d3:7b:9e:
26:60:c7:38:64:a8:40:0d:4b:28:61:aa:59:48:b5:e4:a4:bc:
ec:cd:eb:f8:6a:86:f9:9b:50:a6:7b:96:95:74:84:f4:5e:8f:
4c:23:f8:ec:6f:dd:56:d0:d2:f1:30:a4:ae:9f:2b:38:dc:f9:
0d:de:eb:63:2a:6b:89:3c:74:42:22:92:ba:7b:f1:45:d8:32:
ca:9d:06:65:89:4b:d4:89:22:a3:ea:77:0d:e1:0b:e0:92:07:
83:2a:6b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 05:20:50 2025 by rpki-client