Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: T1xXECdsIc2M3fH72icWLPMpcXuEYLEnFMMwco1+Mpg=
Subject key identifier: 82:D6:5B:95:D6:BD:97:86:CE:64:DD:CB:D7:E5:FB:99:9A:84:93:E8
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 0199FA6A2DD38DCDFE8241F39E3FF906D59A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 134D
Signing time: Sun 19 Oct 2025 03:01:26 +0000
Manifest this update: Sun 19 Oct 2025 03:01:26 +0000
Manifest next update: Mon 20 Oct 2025 03:01:26 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: oKUhoYgvW2m4Ai2t+wpZAepH6iPwqlJcb4e/qsfRsmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fa:6a:2d:d3:8d:cd:fe:82:41:f3:9e:3f:f9:06:d5:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Oct 19 03:01:26 2025 GMT
Not After : Oct 20 03:01:26 2025 GMT
Subject: CN=82d65b95d6bd9786ce64ddcbd7e5fb999a8493e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:13:b7:be:34:69:b9:c4:6b:95:89:4d:23:70:
72:1b:c8:eb:f7:9d:13:03:14:66:10:45:47:c7:e4:
75:0d:9f:e0:3c:4c:89:56:50:95:48:27:cc:6a:c5:
5c:9a:90:c2:d8:56:0f:83:d5:f2:e3:a3:4c:9a:69:
17:7b:6f:5d:bd:6f:7a:19:54:c5:4a:73:f3:46:a9:
1c:e8:7a:4d:97:70:94:03:fa:0e:35:e2:d2:3d:9a:
d7:af:60:11:f1:67:09:0b:b2:79:6d:eb:6f:31:65:
3a:de:19:b3:6f:b8:23:ac:ec:21:68:d6:77:7e:c2:
d4:16:cf:25:33:b3:99:08:cf:51:7b:13:0e:96:f9:
27:97:26:05:9e:89:0d:65:51:1b:94:de:5d:8e:b3:
67:5c:88:fd:b8:8c:a3:f8:61:a8:06:40:2f:50:92:
ef:4a:ce:8c:0b:ad:f6:50:b6:15:15:7d:3f:40:d3:
9f:0d:d2:c0:1c:b8:5e:06:bb:dc:69:c9:1f:62:d0:
4f:58:aa:a3:4c:23:86:b2:53:ed:cd:6a:de:05:be:
9c:17:c6:84:4c:84:35:58:de:3b:d2:b0:b1:a3:1f:
08:2b:b2:35:49:61:2f:c5:7c:08:98:b1:af:94:7f:
3e:c9:9b:f1:01:d6:11:0c:4d:96:37:fe:66:24:21:
0b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:D6:5B:95:D6:BD:97:86:CE:64:DD:CB:D7:E5:FB:99:9A:84:93:E8
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a2:0a:2e:f5:40:1e:51:f5:db:b4:4f:ac:49:c8:7b:65:59:
c7:93:fa:15:5c:f0:64:d0:8f:fc:db:a1:29:ba:92:97:1e:ab:
5a:24:11:96:e0:74:f9:10:0a:5e:68:1e:ed:f0:45:95:25:7f:
75:28:f6:a2:c7:22:36:ec:41:1b:d4:99:d5:00:6e:53:37:25:
9a:8b:d8:7d:cb:af:94:dd:1d:ef:91:ed:26:1a:a2:24:56:c4:
c7:88:2e:dc:09:ba:84:16:14:81:ff:d5:1b:34:81:c8:9d:42:
7f:f2:47:e6:8f:7c:6a:ef:74:67:c1:b8:9a:e0:b4:c6:d3:fe:
ac:cd:d7:ba:3b:a1:ad:2c:1f:00:e8:7b:d1:31:42:6f:dd:df:
55:2d:7b:1a:fc:95:aa:39:6f:e5:84:f5:0a:d1:35:d8:7b:77:
0c:e8:d7:96:a2:c1:bb:0f:a9:1e:9b:fd:13:0d:68:b1:8b:20:
13:c2:91:23:1f:7f:43:6f:c5:49:c9:8d:40:96:b1:90:93:26:
e8:4d:f4:57:65:7b:49:d9:97:62:c3:d8:5a:68:0e:6c:c7:43:
7d:55:57:87:b5:35:cb:9f:e2:bd:94:0b:ef:50:9a:9c:c1:5d:
cb:b0:58:00:68:3d:e8:ed:cb:87:c8:3d:95:fa:93:43:e8:76:
1f:bf:b1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:57:31 2025 by rpki-client