Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
File: AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft (raw, json)
Hash identifier: NNuwGTqkVIK92paB1sLzre0S8pqUVr31ejEd+uHXdEY=
Subject key identifier: 63:A5:83:79:83:C5:E1:07:7E:4D:23:67:D5:1A:F6:09:A7:85:8E:D8
Authority key identifier: 02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
Certificate issuer: /CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Certificate serial: 0199FD6ACD4DA826CEEFAA30814F24A0BEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
Manifest number: 16E8
Signing time: Sun 19 Oct 2025 17:00:58 +0000
Manifest this update: Sun 19 Oct 2025 17:00:58 +0000
Manifest next update: Mon 20 Oct 2025 17:00:58 +0000
Files and hashes: 1: 7Ns-2cBnKCoAvvMfhajIUsqOfRM.roa (hash: xGbT8/8kQTWGMRGlRdu/Jth3qb8PIWWDn9MA5RF+54k=)
2: AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl (hash: zoPZzQwKWTILbW8k/kfdVAT468AHGmBx6pci+p20C6k=)
3: aElB0_w7iL_LUpRU29R2Y75Dhrc.roa (hash: 1LiV/+sY4qGsrVLFK70gELnTzz3VangyIqPY1yxftrc=)
4: hAKkzIf2oiJNVc7cq9BOLAqtAwk.roa (hash: 3RbNRO/4bn+lvyxkoMHSxqNiv9S4Xn+bWprhvyyRHQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6a:cd:4d:a8:26:ce:ef:aa:30:81:4f:24:a0:be:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02339402c42b3f84995c4d58ef670e8d16c2afe2
Validity
Not Before: Oct 19 17:00:58 2025 GMT
Not After : Oct 20 17:00:58 2025 GMT
Subject: CN=63a5837983c5e1077e4d2367d51af609a7858ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:74:9e:9a:04:de:76:51:8f:93:9c:33:c0:4b:
7d:6e:c1:16:90:f9:43:6c:cd:39:c1:46:b0:24:82:
b0:a4:ca:c4:22:2f:ae:a0:8d:35:6b:97:c8:11:e7:
69:e9:3c:be:65:b8:ea:57:54:1d:60:16:f1:d9:8e:
4e:6a:5e:69:37:86:cc:6b:9d:a5:16:ff:1c:52:38:
16:28:26:3f:ae:c3:12:18:42:90:31:a6:b0:ca:58:
0a:ae:b6:b7:8a:b9:69:71:ac:47:17:df:14:c0:e8:
cc:7a:93:19:17:1e:0c:3b:f1:89:e7:42:4f:06:d0:
e3:49:67:fb:23:99:7a:3d:ce:bd:82:be:dd:ea:96:
45:ed:82:0a:63:37:2c:bd:fb:81:26:58:ac:83:99:
f2:8c:0d:87:36:3c:35:5f:ed:42:8c:4c:fc:60:f8:
6d:0e:2c:49:da:4e:08:1a:8e:3e:04:21:07:47:8b:
bc:f1:fc:47:84:e2:e0:79:e2:72:30:5e:a2:ac:86:
d3:cb:32:ff:78:04:19:91:85:d0:3b:f6:ba:d6:77:
ef:7a:84:7e:0c:26:2e:b0:86:69:82:a4:be:79:ca:
ea:29:f8:90:5f:69:2b:1f:fe:84:7a:29:cc:63:05:
f9:47:f6:fc:1f:14:07:06:d1:50:21:ec:d8:80:b3:
25:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A5:83:79:83:C5:E1:07:7E:4D:23:67:D5:1A:F6:09:A7:85:8E:D8
X509v3 Authority Key Identifier:
keyid:02:33:94:02:C4:2B:3F:84:99:5C:4D:58:EF:67:0E:8D:16:C2:AF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjOUAsQrP4SZXE1Y72cOjRbCr-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/eb877c-929e-41b6-b9cb-fc64bfc3d2f9/1/AjOUAsQrP4SZXE1Y72cOjRbCr-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ac:4f:d2:93:42:a7:13:4d:18:62:2f:ee:94:5e:1a:29:bd:
b1:ea:26:29:5c:b5:98:fe:be:63:f4:55:65:e8:0f:2b:c4:8c:
b5:45:2c:0b:52:b1:31:33:cd:f5:f4:f8:9d:38:75:08:93:0a:
4a:31:1e:18:f9:36:26:c6:40:46:39:a4:fa:19:96:65:ee:39:
aa:27:0a:c4:ed:fe:7b:73:29:8d:44:3b:7f:43:db:b2:be:2c:
2c:35:34:a2:39:c0:c6:37:ee:cc:f8:18:85:18:9d:56:e5:bf:
55:59:40:8a:60:45:43:5a:63:4c:40:5d:2e:53:3a:b2:e4:d8:
c5:af:01:57:e2:3c:a1:f0:9f:7a:99:11:cf:04:bf:70:8d:ef:
b6:11:2e:d2:76:e6:98:9f:1f:53:3d:2f:44:7d:45:5b:f4:71:
77:b4:df:8f:5c:27:8c:6c:32:15:5b:ee:a2:2b:99:08:93:ca:
6c:a4:ff:ee:e7:88:08:70:0e:f1:ab:b3:67:90:71:0a:e4:32:
b5:1a:43:1a:fa:57:7c:98:45:02:60:20:07:ce:80:bb:ab:90:
4d:5d:8f:ba:55:ff:44:1a:16:e4:bf:74:67:2d:52:4c:de:3b:
bf:ce:cf:fa:94:9b:11:90:1d:2e:d0:96:d9:7b:91:31:c2:4f:
83:d5:79:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:31:29 2025 by rpki-client