Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
File: AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft (raw, json)
Hash identifier: ABeTlz0CcwxCXEDIH1TS93bAEmBnzVr132ek+SkH7BU=
Subject key identifier: 8B:EB:D7:4D:70:0B:F9:BE:FE:5D:95:AE:61:50:11:C1:76:8E:4D:0B
Authority key identifier: 02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
Certificate issuer: /CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Certificate serial: 019A50E330A0EEFF9F9F49A413C2442AAFF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
Manifest number: 0DF5
Signing time: Tue 04 Nov 2025 22:00:57 +0000
Manifest this update: Tue 04 Nov 2025 22:00:57 +0000
Manifest next update: Wed 05 Nov 2025 22:00:57 +0000
Files and hashes: 1: AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl (hash: GWsHO88sa2xsXcYYTmbA1f4nBIYdSqRyG/czLMbKYo0=)
2: epNs1frSSHg0k8RApfvyiS1o3e4.roa (hash: EqfynGitiIuAYCHQvy1uEOFIiGIwRJnEdzdFNRHUcpQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:30:a0:ee:ff:9f:9f:49:a4:13:c2:44:2a:af:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=023ad6c4458fe69f4591faccb56bdc331af6b4cd
Validity
Not Before: Nov 4 22:00:57 2025 GMT
Not After : Nov 5 22:00:57 2025 GMT
Subject: CN=8bebd74d700bf9befe5d95ae615011c1768e4d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:15:a4:e6:e2:9c:25:d1:14:51:5d:a1:ff:9e:
5f:49:ae:6d:93:08:f6:12:6f:0f:31:a4:8b:c9:ad:
85:f6:71:af:03:d9:c4:b8:8f:5b:77:4b:a8:4f:f7:
6a:25:5f:0c:26:ac:69:d3:cc:84:e4:6b:3f:f5:82:
cf:a9:62:73:d3:85:00:0a:68:64:56:38:8d:38:96:
ef:02:4d:ef:96:9c:a0:bb:fc:73:97:c4:f5:c9:29:
0a:8b:25:0c:76:7d:12:50:79:47:2c:af:e7:9d:47:
a2:a7:42:3b:1b:1f:78:c3:f4:28:8f:e5:68:07:bf:
87:e8:4c:fc:e5:e7:86:d5:b7:8e:c8:87:2e:44:ea:
42:84:33:d2:f0:df:54:66:4a:58:d6:bb:c9:c2:cf:
25:69:c3:49:41:4d:23:53:f8:59:a2:0f:d6:42:2f:
ef:82:24:23:3f:87:af:94:17:2c:8f:c0:cb:51:cf:
79:3c:a7:c1:07:c8:34:e3:51:57:39:6d:9a:9f:c5:
d3:e8:f4:16:70:1d:b8:02:2a:fa:2a:bd:64:9f:89:
03:d5:2e:9f:14:ff:c7:a2:c0:5f:45:1b:2d:9d:ff:
94:f0:7f:cc:be:0e:77:13:70:84:b4:4c:5e:5e:40:
d7:08:aa:5d:f3:7a:13:c7:ab:bb:64:b1:5b:e5:1e:
fb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:EB:D7:4D:70:0B:F9:BE:FE:5D:95:AE:61:50:11:C1:76:8E:4D:0B
X509v3 Authority Key Identifier:
keyid:02:3A:D6:C4:45:8F:E6:9F:45:91:FA:CC:B5:6B:DC:33:1A:F6:B4:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjrWxEWP5p9FkfrMtWvcMxr2tM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5d7b3-2305-4e2e-bead-24f287c9a5f4/1/AjrWxEWP5p9FkfrMtWvcMxr2tM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b2:b4:26:f8:7c:73:9c:7e:cf:fc:ee:a3:61:55:b2:0e:24:
4f:74:76:96:47:77:0a:76:05:fb:af:8a:fd:65:4d:7e:0a:b9:
63:42:dd:93:d0:57:e3:19:46:02:55:a0:f7:df:86:9e:a3:d9:
61:f3:13:4b:e9:dc:71:6d:de:a4:93:20:22:f9:df:e1:fe:05:
57:74:b0:4c:53:6c:7c:14:97:c1:4e:9e:71:f6:8a:12:d1:db:
42:fd:35:57:f1:a7:4b:4c:0f:d4:8d:76:dc:90:0a:08:f6:dd:
bc:1b:d6:66:9f:11:fb:ee:ca:aa:b9:e0:66:17:e4:b9:2d:83:
8a:4f:1f:5d:5b:74:44:e7:e9:55:1b:33:d4:b6:ea:4b:43:fa:
16:d2:cc:88:48:45:da:f8:85:8f:f3:e8:73:6d:04:fc:0a:75:
df:5e:cc:0c:8d:0d:c7:31:31:c4:2e:0d:8c:7d:03:05:83:7b:
7f:6b:ee:1d:05:01:22:83:c1:8a:dd:18:24:b7:3e:12:81:cb:
1a:d8:99:72:17:b1:0a:e0:48:8f:b1:a6:a1:9b:3d:4f:e5:10:
3e:26:ff:26:1d:ed:7e:13:c0:58:06:99:54:44:52:26:ef:62:
37:63:b1:b7:3c:c2:30:f7:0b:72:b1:e7:8a:5a:08:dc:d1:97:
05:47:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:54:59 2025 by rpki-client