Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
File: ajqLdK1O1nN5ep9rd0nCI0VpedA.mft (raw, json)
Hash identifier: HdsttdNu9esl7YYa3ceUYbpIikKjLAMP8G0A40MPI30=
Subject key identifier: A3:E2:8D:A2:8C:E4:68:81:C9:88:DE:7A:CF:62:22:8A:82:02:F3:47
Authority key identifier: 6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
Certificate issuer: /CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Certificate serial: 0198D474459CFCBED6EC220F9149037560FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
Manifest number: 150C
Signing time: Sat 23 Aug 2025 01:04:06 +0000
Manifest this update: Sat 23 Aug 2025 01:04:06 +0000
Manifest next update: Sun 24 Aug 2025 01:04:06 +0000
Files and hashes: 1: ajqLdK1O1nN5ep9rd0nCI0VpedA.crl (hash: WmAzxqxySAjhjpmVrA1Pos4f+r/sX35LU4fJbRPL6lM=)
2: jkQdp6EX7jHh6f31YxZYZhR0C8U.roa (hash: FmayEZ/+k7yvcImZRXEurVZdNlGpk+kZM2DFLPiqTu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:45:9c:fc:be:d6:ec:22:0f:91:49:03:75:60:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a3a8b74ad4ed673797a9f6b7749c223456979d0
Validity
Not Before: Aug 23 01:04:06 2025 GMT
Not After : Aug 24 01:04:06 2025 GMT
Subject: CN=a3e28da28ce46881c988de7acf62228a8202f347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:52:46:6a:c3:a0:2b:d4:4c:76:8b:6a:f1:b7:
bd:86:8a:96:6f:24:cd:1e:95:93:e2:07:ce:e7:d8:
19:f8:33:72:6d:1f:67:2d:3e:f7:71:ff:92:59:0e:
a5:cb:24:27:0e:bf:de:66:67:3b:d2:bd:cb:28:67:
2a:64:04:63:3f:6f:6f:68:11:9a:d4:b9:88:9e:29:
f3:51:46:cf:86:19:a2:45:7f:f4:f0:6b:8f:ac:e7:
f4:f6:54:f2:20:a3:fe:4c:00:6d:b4:b1:4f:ff:a1:
49:d1:07:89:13:06:94:09:c2:28:a2:0a:53:29:d6:
96:9c:ef:dc:95:7c:e2:34:db:f3:af:f3:4d:ad:48:
45:62:2e:82:bf:13:2b:15:fd:ae:3c:05:2a:fb:c8:
b3:e1:47:97:76:94:ba:88:b1:12:64:e6:9d:26:d5:
89:ee:9e:f6:46:c4:9f:9b:76:5a:76:f8:ea:da:f8:
35:69:b6:89:ba:d0:a9:04:f5:96:41:3a:c3:11:66:
4a:05:82:70:de:2f:69:18:e6:d4:83:31:f8:8b:e3:
fa:80:c5:54:64:1e:54:46:c9:0e:e0:a0:40:ec:e9:
84:f6:e0:67:6f:0c:87:ff:04:27:ae:39:6f:82:af:
38:93:fc:ca:1c:66:ac:a9:75:1b:9e:e3:0e:c6:9b:
76:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:E2:8D:A2:8C:E4:68:81:C9:88:DE:7A:CF:62:22:8A:82:02:F3:47
X509v3 Authority Key Identifier:
keyid:6A:3A:8B:74:AD:4E:D6:73:79:7A:9F:6B:77:49:C2:23:45:69:79:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajqLdK1O1nN5ep9rd0nCI0VpedA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/53aca2-e888-421c-b59a-c958bf4f8991/1/ajqLdK1O1nN5ep9rd0nCI0VpedA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:a1:f5:bf:e8:52:ae:5b:31:66:a7:17:cb:25:42:17:a7:d1:
fc:20:fa:c7:86:79:67:f9:25:6e:a5:e5:f2:0c:78:1d:41:ba:
65:82:8b:6a:8d:ae:3e:c4:94:cb:12:7c:3f:37:79:eb:1b:35:
df:70:8d:60:f9:cd:1b:fe:cf:00:31:55:1f:c4:9b:56:40:b6:
fa:23:00:fc:72:ff:4e:ab:4f:07:92:c7:46:dd:67:6f:1a:0b:
ba:cd:e2:3f:24:ba:b8:d3:0a:79:0c:e3:41:bb:4d:47:57:67:
56:d1:01:63:15:4c:a0:50:9f:c2:1e:4d:62:64:e0:a1:e7:a6:
50:f7:dc:93:c5:16:76:0a:38:c4:18:f5:d8:32:35:57:0f:59:
fe:f0:68:31:73:b6:c1:c0:ac:60:22:b1:a1:ab:99:ff:29:be:
e8:62:79:93:92:97:c7:8a:ee:da:bd:66:e4:ab:c1:4e:ad:00:
ae:83:a5:38:09:22:af:34:99:48:93:65:38:9e:ff:ee:68:38:
e5:21:0e:f7:7d:07:a3:71:d7:b6:47:53:46:12:f3:fb:c6:85:
f6:2c:cd:b5:cb:2c:06:6c:4d:f5:19:12:b8:ea:70:95:3e:b6:
7b:9e:78:e8:a5:78:f3:3a:55:44:b9:c3:7d:2b:54:d8:27:74:
4b:9f:0a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:55 2025 by rpki-client