Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: 5fGqcsY0lwWMBIT0JwIZfipaxMWCDLM7U5YYIPR7mUY=
Subject key identifier: C6:5D:CF:55:FC:83:EF:2C:37:AB:0B:3D:44:85:B8:29:D9:98:3C:C5
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 0199FC2199E6A229EFF77FCC8785A83CB690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 10FE
Signing time: Sun 19 Oct 2025 11:01:24 +0000
Manifest this update: Sun 19 Oct 2025 11:01:24 +0000
Manifest next update: Mon 20 Oct 2025 11:01:24 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: 3YLFiNz2FsFViYEKzQGiJhifk3ipAC+arQpQOOL8yfQ=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:99:e6:a2:29:ef:f7:7f:cc:87:85:a8:3c:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Oct 19 11:01:24 2025 GMT
Not After : Oct 20 11:01:24 2025 GMT
Subject: CN=c65dcf55fc83ef2c37ab0b3d4485b829d9983cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f5:80:5f:d7:db:b5:90:f5:89:27:de:98:c5:
97:5e:7f:8b:30:23:48:a6:21:ce:b0:0c:2b:80:32:
cd:98:5e:5a:b7:9e:90:e3:55:90:9d:b0:c6:a9:7c:
89:a0:02:9a:e9:fb:8c:68:81:81:d5:16:b9:86:86:
cf:a0:38:62:f6:dd:ad:6e:e3:ac:4d:b8:9c:4d:28:
99:ac:70:85:d4:b6:95:c8:89:00:3b:b7:09:7f:f7:
d5:43:ca:df:04:39:53:6e:18:80:8c:13:78:3f:25:
be:f9:c8:92:c1:12:05:b3:43:c7:1b:8b:05:78:44:
ab:01:a8:af:fe:85:32:cd:f5:0a:54:14:23:77:99:
41:28:0c:26:d4:64:7a:9e:c5:a7:1f:5f:bf:89:ba:
4a:9a:9b:e2:c6:1a:c7:21:b5:ce:96:b3:03:9d:99:
9f:aa:da:d3:93:5e:49:df:d6:f6:ae:42:be:1c:09:
f5:cc:25:56:08:df:6c:7a:50:6b:64:72:5f:f4:7b:
4f:65:56:c9:40:bd:4c:f7:b7:e2:72:dd:14:79:3a:
b5:0b:46:bf:85:7b:05:cf:7c:fa:04:d3:3a:01:24:
d8:3d:6a:34:f5:56:52:be:66:85:74:2e:ba:fb:36:
60:c4:26:40:34:f2:36:f4:46:cf:ba:1b:b4:09:8e:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:CF:55:FC:83:EF:2C:37:AB:0B:3D:44:85:B8:29:D9:98:3C:C5
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c1:a3:60:d5:00:bd:c0:af:dc:19:16:d7:5b:fb:ce:2a:b9:
ad:65:b4:db:d3:97:5c:8c:8e:5a:9e:ae:31:d6:76:aa:e6:16:
1d:b3:39:88:d9:50:48:9c:6b:0b:f2:a1:54:57:5c:3c:78:4c:
33:fb:8e:17:f8:ea:17:70:1b:01:2c:56:fb:1d:e7:82:05:e5:
e5:d9:8b:fe:70:cf:68:b1:65:80:54:d5:1b:4d:b9:15:fb:9d:
23:0d:ea:2a:21:96:52:d2:64:7f:6c:20:37:33:ef:2a:19:8b:
93:b0:d2:8b:ff:bf:e5:57:73:7a:d1:c4:10:6b:b3:fa:42:f7:
5b:bb:46:99:13:27:d1:e3:37:be:fb:c7:1e:90:86:ae:0c:8b:
27:12:9e:a3:99:d6:5f:28:be:45:21:39:85:24:a5:db:3b:27:
ba:4b:7b:2a:e8:d5:5b:90:6b:64:f0:14:9a:6b:3b:52:9a:90:
46:cc:a2:69:03:30:a3:48:8d:fe:14:6c:51:2b:7c:e0:e2:88:
c6:b0:12:f1:08:b6:35:c9:e8:c3:d4:5d:9d:53:57:f3:92:4e:
0a:ed:bd:d9:e0:06:77:01:56:6a:5d:38:ce:9d:f0:c8:1f:cc:
c3:7d:7c:0c:03:41:7f:39:61:b7:2b:32:79:19:e4:4e:17:ae:
78:52:51:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:29:56 2025 by rpki-client