Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: WSHOs3l9m1d27f4hG+NljZAsEazVGRfBT5rGtyK7cAg=
Subject key identifier: E9:B2:88:CC:A5:A7:22:2A:32:82:8B:F8:B8:AC:59:1B:5B:77:8E:34
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 0198D65FD59C0957EDD29D9A238D4A56B2E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 0455
Signing time: Sat 23 Aug 2025 10:01:01 +0000
Manifest this update: Sat 23 Aug 2025 10:01:01 +0000
Manifest next update: Sun 24 Aug 2025 10:01:01 +0000
Files and hashes: 1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: gajh9bmMSqwsVnDYVCo2sOiCsqO7xg0+F2PpbcwzWXQ=)
2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:d5:9c:09:57:ed:d2:9d:9a:23:8d:4a:56:b2:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Aug 23 10:01:01 2025 GMT
Not After : Aug 24 10:01:01 2025 GMT
Subject: CN=e9b288cca5a7222a32828bf8b8ac591b5b778e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0a:95:a1:ae:88:45:11:3b:8d:cb:2a:cb:91:
6b:31:4e:c0:88:2b:cc:15:17:33:7a:e7:87:23:43:
29:0f:26:3a:7c:37:ab:13:54:a2:a1:bc:a8:70:d9:
13:bc:44:e0:2a:d3:59:2d:b2:65:64:af:bc:b5:60:
20:b0:88:73:4c:b5:8e:99:2b:dc:96:02:0f:d1:d6:
df:bb:8c:e8:86:66:0c:67:ba:fa:14:9c:92:e9:58:
46:92:6d:f0:0d:71:23:98:7d:0b:ac:cf:96:9e:e5:
e2:f1:fe:9b:6b:b0:3d:b2:eb:25:54:42:60:9d:ff:
4c:08:a0:46:8f:c7:e9:a9:d1:d6:03:a4:08:f9:4c:
72:b6:a0:d7:2f:30:43:6f:9d:4f:0a:ed:8e:e7:c7:
09:f3:ca:69:23:61:58:6e:46:e3:bd:ea:5c:80:d4:
42:4d:4b:ef:0a:11:74:e9:a1:01:df:f6:e7:f2:d3:
e5:af:42:48:89:d0:b9:ae:bf:c7:de:8c:88:04:13:
ff:c9:fa:1f:75:b3:03:04:c7:dd:2a:1a:09:a7:45:
1f:9a:b7:15:e5:1c:8d:fa:fd:5c:30:65:86:5f:2f:
81:bf:54:33:73:2d:97:0e:59:cc:7a:58:30:89:48:
4a:6f:c5:32:3b:15:0f:17:d2:d1:28:c7:5c:eb:ea:
dd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:B2:88:CC:A5:A7:22:2A:32:82:8B:F8:B8:AC:59:1B:5B:77:8E:34
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8b:db:2f:a6:8e:aa:5b:9a:61:d2:3d:cc:86:1b:aa:62:b6:
24:66:ad:37:2b:06:7c:da:86:31:a7:5a:f3:84:0a:e6:91:14:
f6:35:cf:d5:70:20:85:cd:14:de:91:16:08:52:72:53:0c:9d:
64:0d:84:ab:10:ef:4d:2c:6a:8d:3c:2c:18:3d:24:95:e9:a1:
8d:6a:7b:7c:b4:90:a2:49:8c:80:b5:2a:16:b3:92:61:46:6f:
95:12:46:e9:be:4d:e2:33:80:bb:76:c2:c0:22:71:68:5f:e8:
87:c5:0d:55:fe:b1:e8:ac:29:98:0b:2c:91:d6:26:d1:5a:f7:
75:58:76:49:c5:d0:37:05:8a:4a:04:2b:ff:eb:50:9d:39:54:
90:33:36:e8:b7:f8:23:d3:0b:05:c7:28:1c:ed:79:70:31:3c:
de:af:cd:1d:38:1b:ef:88:59:87:4e:da:2c:6c:a2:c7:93:23:
5c:77:5b:62:3f:5b:a4:f8:b9:92:e5:03:80:3a:1c:d3:5a:be:
57:56:bb:e3:15:c5:e1:c9:0b:72:0f:96:80:f4:b9:05:3f:b0:
c1:b0:a2:d0:74:6a:88:f2:70:4a:91:38:6f:34:a3:e5:72:d9:
2f:0c:3a:f4:5f:9c:98:73:05:f6:92:61:85:1b:65:0b:65:2b:
ee:3d:54:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:26:16 2025 by rpki-client