
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
File: Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft (raw, json)
Hash identifier: lkShrmXfAcqiTP9Devqqmys3dCi31VZ1op5eyHxh2f0=
Subject key identifier: 23:D5:E8:9D:E2:AA:1D:E1:FA:D6:F1:35:3F:94:33:FC:CD:0F:A9:F1
Authority key identifier: 02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
Certificate issuer: /CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Certificate serial: 0199FBEC0C75A892F6DD28C6B672C9E9F955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
Manifest number: 04ED
Signing time: Sun 19 Oct 2025 10:02:54 +0000
Manifest this update: Sun 19 Oct 2025 10:02:54 +0000
Manifest next update: Mon 20 Oct 2025 10:02:54 +0000
Files and hashes: 1: Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl (hash: hfVerHE6YhsM8GQ5PqdICpcyQHP3l59dqi5xsbHoyZw=)
2: q-0tOhbXBE8z7Hlp7AMLHyIkH0o.roa (hash: clCq9CQNeepLFI/InJwVfW2jsbdMuqRrXN6npNkjGNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:0c:75:a8:92:f6:dd:28:c6:b6:72:c9:e9:f9:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023f63fb2bfc631c44f4bb6d94bdf28b3ec9dff7
Validity
Not Before: Oct 19 10:02:54 2025 GMT
Not After : Oct 20 10:02:54 2025 GMT
Subject: CN=23d5e89de2aa1de1fad6f1353f9433fccd0fa9f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1f:8a:2d:08:c8:ee:f3:34:bf:0d:d8:ac:83:
ba:a3:07:ed:0c:3e:1a:2a:8d:a7:46:b4:d4:dc:61:
85:94:94:4d:8b:95:2d:8d:18:f2:69:59:90:ad:fd:
5e:ba:7e:cc:b1:cb:d4:c4:7b:be:3e:39:9d:44:e6:
2f:33:52:2f:26:ea:09:65:1e:52:cc:6d:b6:0a:05:
dd:d2:bc:1e:d0:57:dd:0d:2d:39:4b:3d:64:a9:62:
a6:93:5d:0e:22:48:8a:86:31:15:06:9d:08:d3:ea:
9d:ae:63:a8:a2:99:b4:72:60:74:f8:29:f8:45:25:
17:0c:ec:c7:da:a4:82:02:1e:87:7a:c2:be:02:fb:
87:82:0e:36:ef:27:b3:2f:2d:32:ae:8a:3c:d9:65:
ee:ab:6e:7d:e2:21:87:4e:32:4a:f0:a3:41:70:7b:
b3:e3:64:67:ad:64:8a:ce:b2:22:35:eb:7a:70:15:
38:df:19:be:19:78:9c:73:bf:6f:86:9b:6b:d0:fe:
1c:7f:a4:bc:98:51:91:a6:a4:58:0d:88:48:77:c2:
be:2c:a6:39:3e:77:36:d4:a5:54:60:67:c5:49:b0:
ca:5c:b0:70:9f:47:3b:9d:2b:fd:b6:75:8e:29:20:
6c:f0:af:28:5a:1b:0a:59:c8:36:52:fb:44:c5:2f:
f3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:D5:E8:9D:E2:AA:1D:E1:FA:D6:F1:35:3F:94:33:FC:CD:0F:A9:F1
X509v3 Authority Key Identifier:
keyid:02:3F:63:FB:2B:FC:63:1C:44:F4:BB:6D:94:BD:F2:8B:3E:C9:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Aj9j-yv8YxxE9LttlL3yiz7J3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cf11b4-797b-4820-bfea-53cd91b28c4f/1/Aj9j-yv8YxxE9LttlL3yiz7J3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:5f:1e:cb:d5:5b:7d:5c:9f:84:b7:0e:78:a1:3a:ef:c9:
40:e8:5f:7b:5f:92:6f:51:3d:15:e0:82:94:eb:c2:b8:d2:3c:
e8:4e:ec:7c:b4:9c:25:4f:66:f3:11:9a:81:33:5d:75:05:27:
38:db:87:6b:23:a5:d3:c9:2d:2b:f7:a6:73:a5:53:a3:8a:28:
08:37:77:64:f2:31:61:77:43:89:f6:4f:b3:34:34:8a:da:57:
f3:7b:41:98:71:25:7a:91:fb:2e:65:9a:dd:40:c3:a8:b4:99:
77:35:3d:8d:e5:8b:1a:21:01:c3:62:f4:a9:bd:05:1b:6c:e4:
89:b2:af:8e:3b:95:ad:51:3a:3d:7e:70:fd:21:84:10:de:34:
e0:01:cb:5f:7c:8c:47:4d:a6:5d:04:27:25:16:39:ac:4b:81:
1f:1f:1b:dd:d3:00:3e:f9:9c:fa:5c:e4:46:44:e0:56:29:08:
78:fc:30:ef:12:08:bf:4c:37:a0:9d:ce:19:3b:e1:9a:7a:60:
ed:61:13:d8:db:72:4f:c1:04:4e:71:b6:42:d3:7d:22:91:65:
c6:09:26:14:56:22:cb:1c:95:63:ba:c8:4f:73:a9:6a:04:30:
e2:80:34:19:c2:9c:52:19:40:46:11:25:a7:06:fb:f9:85:40:
52:3c:21:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 19:57:44 2025 by rpki-client