Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: OhvLKkD9+WdcFedCL9lfdSqG/ZPrQvBkTSE+UDS4+5U=
Subject key identifier: 8F:24:4F:F3:4F:6D:AB:BA:05:65:49:E5:EE:ED:0E:22:03:FF:F8:05
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 01989712E1878663E0B448CA82D96D741BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 03:00:53 +0000
Manifest this update: Mon 11 Aug 2025 03:00:53 +0000
Manifest next update: Tue 12 Aug 2025 03:00:53 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: bnmi3JZKbbS4D7/wSUlyzIWLNZDvVorWHbfilAlJKG8=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:e1:87:86:63:e0:b4:48:ca:82:d9:6d:74:1b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Aug 11 03:00:53 2025 GMT
Not After : Aug 12 03:00:53 2025 GMT
Subject: CN=8f244ff34f6dabba056549e5eeed0e2203fff805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9d:a6:0f:fd:27:42:14:47:70:8e:89:67:6b:
9a:cd:4c:06:1a:c1:0d:b2:86:91:e6:1b:0b:f5:7a:
ee:14:f1:ce:4f:37:c7:63:66:0f:61:51:cc:26:f2:
9d:c9:92:d0:c7:1f:89:84:b4:bd:1d:08:52:77:17:
47:d6:41:8d:24:df:47:fa:b6:21:f3:9b:53:c0:9a:
ea:37:05:2c:28:dd:e5:a6:0d:1e:c8:ec:e2:82:7d:
3b:70:f0:b9:78:81:40:5f:c5:2c:65:e3:e6:1c:4b:
38:b5:ed:b6:92:b3:13:1a:ef:66:45:96:29:6b:f8:
30:9c:80:3a:31:2f:2a:bb:7a:c0:a1:42:bf:52:df:
71:43:8c:f7:5a:ad:8c:d3:f3:ef:98:6b:82:60:a0:
23:e3:3d:e8:4a:eb:0a:f9:f6:3c:4a:62:ad:19:ce:
84:fc:fe:b9:ea:02:74:e8:75:12:95:04:4d:02:d8:
dc:f7:5e:55:d6:35:b7:f9:df:ed:04:fa:1b:2d:01:
d2:11:ff:7f:90:cf:3a:f5:04:8f:f1:26:29:45:11:
68:0e:6f:ee:6f:5c:3b:82:47:af:fd:e3:f1:55:50:
be:28:50:d1:45:d8:ea:30:a5:d3:57:2d:7f:20:8f:
d7:51:3d:ca:87:ba:e7:b2:b0:fa:9e:8c:cb:37:08:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:24:4F:F3:4F:6D:AB:BA:05:65:49:E5:EE:ED:0E:22:03:FF:F8:05
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b5:22:69:b0:7e:e7:b0:70:ac:a9:d9:ff:54:d3:76:b3:fe:
f8:70:10:41:f6:98:42:32:7a:31:3a:59:c2:36:c6:d3:86:60:
1b:cc:60:23:97:22:99:99:ad:86:62:71:67:7f:5f:c0:e3:4f:
6a:de:99:00:65:c1:a0:24:49:b4:f1:32:92:60:ea:8e:ee:93:
bd:ae:f9:98:0a:f9:65:e0:16:80:59:2f:5b:5d:21:f6:44:3d:
8d:70:88:a7:89:10:b2:83:c1:73:64:88:b5:d1:51:22:3a:d6:
64:70:31:30:7a:ce:c1:9d:b8:4e:70:f2:f6:1f:df:2a:97:02:
f7:cd:6c:da:d6:f6:fe:e5:0b:f8:94:3d:7c:f6:d4:23:55:0f:
00:3a:8f:da:4e:5c:05:10:08:50:3d:25:fc:c8:62:58:9e:a0:
e5:10:71:8e:8f:12:8a:05:a8:9c:db:e3:6e:c9:19:ba:ca:ad:
c6:e0:b4:ff:a2:c4:d3:73:ba:e5:6a:6a:95:61:ae:ed:c8:3e:
41:2b:d4:aa:7f:06:ca:82:5d:50:33:f5:ea:02:21:0b:94:57:
67:29:f9:bf:1e:89:0d:55:c6:54:b9:e8:f9:3d:a9:ce:7a:ca:
84:1d:1c:6f:d8:05:ca:ff:f4:c3:13:df:e1:35:8e:6d:f6:5f:
86:63:3e:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 05:52:33 2025 by rpki-client