Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
File: 1AjPCbarAFupM7KnpKbSfqa7cso.mft (raw, json)
Hash identifier: iU/snn3fPnlP5U6IrXHceOdzunDvy5FLkrfGABcvQww=
Subject key identifier: CA:AA:47:68:E9:C6:E4:F2:7B:E8:5D:51:40:AB:3E:46:63:96:33:B3
Authority key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Certificate issuer: /CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Certificate serial: 0199FE46FC2686EFE6BEA3850EC8AD1A2BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
Manifest number: 03FC
Signing time: Sun 19 Oct 2025 21:01:28 +0000
Manifest this update: Sun 19 Oct 2025 21:01:28 +0000
Manifest next update: Mon 20 Oct 2025 21:01:28 +0000
Files and hashes: 1: 1AjPCbarAFupM7KnpKbSfqa7cso.crl (hash: 2l53s9JGlWK/tM11ibr/OjgHqbfOgOXWGTDi5+ZmDb4=)
2: mjk_9mBIX2K41ASneFahi5WxQms.roa (hash: qL7nGWS3Awht9PmP0vDzSTXhKhc/jIpjX536PZtB9fQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fe:46:fc:26:86:ef:e6:be:a3:85:0e:c8:ad:1a:2b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Validity
Not Before: Oct 19 21:01:28 2025 GMT
Not After : Oct 20 21:01:28 2025 GMT
Subject: CN=caaa4768e9c6e4f27be85d5140ab3e46639633b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ec:b2:a8:97:fd:49:37:40:aa:f4:eb:93:1e:
5c:fd:f2:7b:c0:46:d7:d7:03:b6:ab:ba:c4:dc:7f:
10:d6:88:55:88:fd:44:ac:ea:60:b1:64:46:45:53:
cf:5c:5d:53:f6:7d:37:e0:21:9b:ff:a1:ff:f8:48:
46:96:64:16:37:8a:93:4d:8e:50:13:0c:f8:bb:a2:
5f:c1:1c:cb:06:7e:f8:a3:d5:07:04:29:15:8b:47:
bb:20:f9:9f:cb:6c:11:4b:06:a2:5f:5c:ef:3b:9d:
9e:97:dc:3d:3c:f7:a0:0d:ce:7a:8b:f9:fe:43:5c:
2b:9a:01:49:56:f5:17:9f:8c:3f:a4:81:75:94:dc:
69:c5:fa:1b:df:f1:f3:1b:02:cc:9d:82:c0:a3:b3:
43:5f:45:39:cf:7e:f0:31:c9:76:97:ec:19:57:06:
11:de:f8:d1:7d:0a:77:4d:32:b7:bb:71:96:8b:2c:
ce:aa:3b:3a:4c:e6:3e:89:58:26:10:30:bf:40:00:
86:91:94:10:80:c0:d3:33:3d:36:5b:35:7a:d1:e6:
5e:b1:d5:68:d4:bd:8f:28:6c:92:10:89:13:60:10:
42:74:10:d8:c7:c1:f4:5a:3c:2c:62:89:ee:4b:7c:
a5:30:78:95:53:f1:26:30:36:43:9a:c3:19:05:b8:
a2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:AA:47:68:E9:C6:E4:F2:7B:E8:5D:51:40:AB:3E:46:63:96:33:B3
X509v3 Authority Key Identifier:
keyid:D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:76:dd:46:5d:3b:bd:01:43:99:44:1c:68:94:0e:2a:20:79:
cc:18:aa:7e:0c:56:37:88:e5:fe:17:af:32:51:d8:cf:02:6d:
9a:38:cc:80:87:14:fa:d4:f7:0d:1d:09:64:7e:15:a9:8b:31:
bd:22:0d:b2:0b:3c:cb:ac:24:83:1e:27:3c:d4:56:03:9b:5b:
d7:45:e0:f8:7e:ab:60:56:aa:23:06:ba:85:21:20:a3:24:57:
bf:58:bb:20:0d:15:bc:7c:0c:73:9d:d7:48:51:1a:52:51:15:
b7:a4:62:53:11:ef:05:d3:cc:da:94:a9:6e:5a:29:1f:1a:f8:
80:4e:d7:cc:62:a5:d0:ac:f7:80:8a:1a:a6:26:a9:85:34:1d:
12:05:40:dc:ff:35:19:d1:dd:cb:93:61:1e:fa:b7:c4:f9:17:
99:fd:a7:7d:a1:fb:81:20:b1:37:17:b9:c8:33:e0:24:f2:84:
fa:2f:61:fc:50:48:9b:11:ac:66:69:31:36:32:95:ce:e3:a3:
b4:fc:2b:94:49:63:13:7f:9b:f3:97:28:ad:5a:36:1b:8d:1a:
f2:80:f1:5b:f3:67:98:6d:ad:6b:3e:bf:22:45:68:b1:62:b3:
5c:c4:0b:f3:29:66:21:d2:34:e5:ff:b1:53:6f:40:ba:d7:0f:
f9:60:96:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZn+Rvwmhu/mvqOFDsitGivkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0MDhjZjA5YjZhYjAwNWJhOTMzYjJhN2E0YTZkMjdlYTZi
YjcyY2EwHhcNMjUxMDE5MjEwMTI4WhcNMjUxMDIwMjEwMTI4WjAzMTEwLwYDVQQD
EyhjYWFhNDc2OGU5YzZlNGYyN2JlODVkNTE0MGFiM2U0NjYzOTYzM2IzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+yyqJf9STdAqvTrkx5c/fJ7wEbX
1wO2q7rE3H8Q1ohViP1ErOpgsWRGRVPPXF1T9n034CGb/6H/+EhGlmQWN4qTTY5Q
Ewz4u6JfwRzLBn74o9UHBCkVi0e7IPmfy2wRSwaiX1zvO52el9w9PPegDc56i/n+
Q1wrmgFJVvUXn4w/pIF1lNxpxfob3/HzGwLMnYLAo7NDX0U5z37wMcl2l+wZVwYR
3vjRfQp3TTK3u3GWiyzOqjs6TOY+iVgmEDC/QACGkZQQgMDTMz02WzV60eZesdVo
1L2PKGySEIkTYBBCdBDYx8H0WjwsYonuS3ylMHiVU/EmMDZDmsMZBbii7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMqqR2jpxuTye+hdUUCrPkZjljOzMB8GA1UdIwQY
MBaAFNQIzwm2qwBbqTOyp6Sm0n6mu3LKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmIt
ZDY1MjM2ODI5OWQ1LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9hNmQxMjQtMDRlNi00ZGVmLWExNmItZDY1MjM2ODI5OWQ1
LzEvMUFqUENiYXJBRnVwTTdLbnBLYlNmcWE3Y3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZnbdRl07
vQFDmUQcaJQOKiB5zBiqfgxWN4jl/hevMlHYzwJtmjjMgIcU+tT3DR0JZH4VqYsx
vSINsgs8y6wkgx4nPNRWA5tb10Xg+H6rYFaqIwa6hSEgoyRXv1i7IA0VvHwMc53X
SFEaUlEVt6RiUxHvBdPM2pSpblopHxr4gE7XzGKl0Kz3gIoapiaphTQdEgVA3P81
GdHdy5NhHvq3xPkXmf2nfaH7gSCxNxe5yDPgJPKE+i9h/FBImxGsZmkxNjKVzuOj
tPwrlEljE3+b85corVo2G40a8oDxW/NnmG2taz6/IkVosWKzXMQL8ylmIdI05f+x
U29AutcP+WCWRA==
-----END CERTIFICATE-----
Generated at Mon Oct 20 01:09:04 2025 by rpki-client