Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
File: AJEXecdn0jZOhvTifvjF_puwEJA.mft (raw, json)
Hash identifier: ltFlqeunbOcbbHlGSAqRr/GBiD9q+/6OWq4kQZeCL7M=
Subject key identifier: E5:BD:11:01:56:02:1D:F6:5C:00:49:B8:CD:EF:31:12:8E:17:43:A6
Authority key identifier: 00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
Certificate issuer: /CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Certificate serial: 019A4F6223DDE0BFDA4A2E6AC320ABC93269
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
Manifest number: 170E
Signing time: Tue 04 Nov 2025 15:00:23 +0000
Manifest this update: Tue 04 Nov 2025 15:00:23 +0000
Manifest next update: Wed 05 Nov 2025 15:00:23 +0000
Files and hashes: 1: AJEXecdn0jZOhvTifvjF_puwEJA.crl (hash: KQqtUnJvHWGVcdCkCCyDXeFdhKeDnJpI0hwgBeH0epA=)
2: PuRCtZYS1zb-l6-lSbqSBFwnqhM.roa (hash: AbBVF9kyhgAnkvzoIY9J9QbGE309UtyTbrK9vyLj9EM=)
3: sAkyj21t8-IWELVSrcuIx5gPSVk.roa (hash: iR95lFASykLAMl0dgv405uAOE69TMGevQ+/+DeWufdg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:23:dd:e0:bf:da:4a:2e:6a:c3:20:ab:c9:32:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00911779c767d2364e86f4e27ef8c5fe9bb01090
Validity
Not Before: Nov 4 15:00:23 2025 GMT
Not After : Nov 5 15:00:23 2025 GMT
Subject: CN=e5bd110156021df65c0049b8cdef31128e1743a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c1:d7:53:f8:9a:bb:05:52:c5:be:07:b5:7f:
96:3c:61:00:9e:3f:1c:49:7c:a5:fa:49:a5:1b:a9:
f1:eb:48:5a:51:de:3f:34:dd:e6:04:a0:e2:9d:9c:
96:8c:2d:50:6c:e6:48:2a:5a:d9:b4:bd:94:f9:6d:
21:ed:2e:60:0a:d4:31:9f:93:0f:0f:79:45:23:66:
67:b1:5c:02:a8:ad:05:7c:ea:03:af:f2:dd:94:ed:
d5:7a:90:9d:ce:ef:86:4e:1d:c9:6e:1b:36:36:4c:
47:e0:c8:38:85:2e:2e:0b:86:6f:13:f1:74:94:74:
9d:ba:80:95:6a:e4:7f:ef:1b:24:47:aa:5d:ef:e5:
ba:a8:8e:88:0d:c0:e1:d9:f4:49:e0:0e:04:41:f6:
a7:cf:cb:fb:d2:a2:94:31:16:b8:5d:ad:78:95:8e:
51:51:d2:5c:47:44:d7:f9:92:b2:14:b6:68:d0:dd:
55:94:44:91:bd:a7:a3:83:28:f9:7d:e0:07:46:51:
32:3b:9e:ba:62:0e:28:b4:e1:91:b7:87:db:11:f1:
b7:d5:f4:54:fb:07:78:d9:6f:46:02:02:ff:36:c0:
7c:19:83:ee:aa:a6:65:c8:3a:f7:e3:47:35:b0:5a:
07:af:b0:03:9e:e9:77:f5:27:bd:0d:dc:37:96:45:
fc:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:BD:11:01:56:02:1D:F6:5C:00:49:B8:CD:EF:31:12:8E:17:43:A6
X509v3 Authority Key Identifier:
keyid:00:91:17:79:C7:67:D2:36:4E:86:F4:E2:7E:F8:C5:FE:9B:B0:10:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJEXecdn0jZOhvTifvjF_puwEJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/259fbe-2855-4e19-918f-62c1b1ff3a26/1/AJEXecdn0jZOhvTifvjF_puwEJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f6:9b:62:a7:dc:28:d6:14:3e:49:c2:34:58:1a:c1:9b:50:
cc:29:79:a1:4d:74:19:7d:d6:e0:c7:39:33:52:98:5c:9f:ec:
5f:be:92:3d:8f:5d:6c:9b:de:9c:8d:b2:02:34:71:02:a4:97:
cc:c0:4f:8d:5a:fd:1d:c5:8c:1f:f4:4c:7c:6e:b7:80:c0:f5:
0c:88:a8:f7:c5:13:a2:b7:e0:09:0e:19:eb:20:23:29:20:77:
cb:b5:79:bb:83:45:b4:ea:e5:b3:bb:38:b3:e4:16:79:26:c7:
42:1a:be:58:b1:ad:d1:61:71:5a:2f:e7:0b:a3:a0:8c:ea:90:
59:cf:ad:2b:bc:91:a4:aa:8e:94:10:ac:e3:e5:06:7a:ab:c1:
8d:19:68:bf:9e:3e:78:77:02:a2:b6:56:70:41:b8:80:b0:1b:
5c:50:01:cf:c3:39:fd:1f:93:99:91:21:51:25:75:86:16:c6:
e2:4f:8c:09:67:94:68:05:3e:f7:2f:c6:1c:b7:6f:c4:e6:ac:
dc:13:67:ac:ec:fe:a7:12:2b:5a:b5:09:8d:44:a4:12:2f:68:
40:8c:fa:61:16:fe:1e:17:23:13:23:fd:67:8f:e3:d7:b4:11:
01:f3:3a:e7:93:f4:2d:08:d5:3f:3a:ee:d4:66:a8:6a:7c:4d:
df:51:83:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:20:25 2025 by rpki-client