Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
File: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft (raw, json)
Hash identifier: iXonAmteEKlyDDl/JVZ1GtWOAu/ecdZz6EYwhHoxz7g=
Subject key identifier: B6:B0:4C:94:3F:4F:0F:E9:F2:AB:56:56:81:EE:9B:28:E1:3D:C8:05
Authority key identifier: 02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
Certificate issuer: /CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Certificate serial: 0198D4E07BEF616642484A2C0A012E75FCC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
Manifest number: 12B5
Signing time: Sat 23 Aug 2025 03:02:18 +0000
Manifest this update: Sat 23 Aug 2025 03:02:18 +0000
Manifest next update: Sun 24 Aug 2025 03:02:18 +0000
Files and hashes: 1: Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl (hash: mI9Ir2mosnteZOeD5BtV/W9T/GRs7EKKFYVSPdeC3E4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:7b:ef:61:66:42:48:4a:2c:0a:01:2e:75:fc:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023c397109340b767bcb324515f6d1f82c8cc7cf
Validity
Not Before: Aug 23 03:02:18 2025 GMT
Not After : Aug 24 03:02:18 2025 GMT
Subject: CN=b6b04c943f4f0fe9f2ab565681ee9b28e13dc805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bc:43:37:4c:19:28:c3:63:2e:22:d0:41:0e:
54:e5:5b:2b:76:65:a8:3e:e8:c4:07:e2:3a:bc:64:
a0:7d:69:c4:23:ef:44:d5:0a:c6:4f:22:e6:09:d6:
cc:cb:d0:e4:1d:5d:89:a9:3a:a1:0d:c1:53:fe:d5:
8f:45:34:a1:5b:db:88:62:d8:5e:6d:8f:b1:9e:3a:
e1:82:a9:e5:f9:76:9d:3a:d4:00:ab:9f:cc:4f:04:
da:07:32:ce:b7:84:ed:75:b0:4d:61:32:b4:e6:0c:
75:57:d1:46:7a:56:be:fa:41:d9:0c:97:7d:7b:84:
f9:4c:a9:72:cf:ac:55:56:36:a2:31:34:79:22:54:
4e:76:66:3a:c7:b8:ec:e1:59:c6:08:e7:ec:0f:c2:
51:48:f1:e7:29:a1:db:5a:28:cc:49:24:59:3a:43:
df:3e:d4:bc:17:f9:ad:73:8d:5a:f4:4d:e0:9d:30:
48:af:1f:48:e6:16:43:7d:63:68:78:fe:63:ab:a5:
2f:a2:56:0a:e1:0d:71:28:70:c5:8b:d5:15:52:48:
c1:f8:83:66:d9:a1:47:35:4d:19:b1:87:08:27:11:
6c:b2:0c:66:9c:3b:00:97:c9:27:26:ac:0e:5c:1d:
bd:b3:78:01:3b:a8:f3:2f:d4:a5:c2:f6:36:64:38:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:B0:4C:94:3F:4F:0F:E9:F2:AB:56:56:81:EE:9B:28:E1:3D:C8:05
X509v3 Authority Key Identifier:
keyid:02:3C:39:71:09:34:0B:76:7B:CB:32:45:15:F6:D1:F8:2C:8C:C7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/a55935-52bf-4d6f-8b90-e90eefdb3ac5/1/Ajw5cQk0C3Z7yzJFFfbR-CyMx88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0c:36:e5:d4:7e:ab:38:63:9e:7b:d9:74:18:14:bf:7b:aa:
74:b8:6f:46:10:e2:20:b1:65:32:a3:22:3e:af:be:c3:ba:b9:
60:a9:3c:85:1c:1b:3c:dd:84:2a:84:e6:82:dc:71:77:49:d7:
59:d6:27:bb:9c:e4:26:28:7a:5f:47:6f:08:1e:ac:60:02:32:
4e:c7:13:08:90:66:28:c8:bd:d1:01:58:73:45:39:8a:3a:59:
cf:ec:29:b5:88:f3:db:c3:74:3c:32:b7:f5:1a:fa:69:48:97:
8f:16:32:80:17:8d:c8:14:4e:4c:a4:de:17:07:9c:7a:96:c2:
dd:b3:54:32:53:24:bb:1f:e0:ad:29:18:c4:b1:ff:0b:23:1e:
6f:fd:7a:8f:05:dc:d4:c0:a0:cd:15:d9:20:e2:21:5a:0a:65:
a3:f8:56:f1:4d:94:fa:be:dc:c4:d3:5c:e2:a7:4b:b4:7f:c1:
72:30:b1:60:d4:40:2b:dd:04:3e:a9:a6:6d:6c:de:fb:f7:0e:
dd:cc:c6:08:e3:ac:8a:f7:4e:45:1d:e8:e3:a4:03:e8:9f:ca:
7e:a9:ba:0d:00:38:bf:15:fa:e7:d6:7e:cb:ac:b2:c5:ee:51:
94:68:be:b4:85:66:50:0c:2c:3c:a8:2a:c3:49:2b:be:72:f3:
34:2c:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:59 2025 by rpki-client