Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: /xWcfvArDEaiFQvyUt4dmViWDd5awqDWZfX531BoWMo=
Subject key identifier: 85:60:FF:E6:25:9C:A2:AF:2A:E3:C2:A4:56:A2:DD:FB:DF:99:C3:F8
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 019A4DE1EB550201103FF5562781E84BC409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0E82
Signing time: Tue 04 Nov 2025 08:00:42 +0000
Manifest this update: Tue 04 Nov 2025 08:00:42 +0000
Manifest next update: Wed 05 Nov 2025 08:00:42 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: dO5YWtHIguApqU/fWqezb9EDkaQ2QIRjRSkV1LyK0fs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:eb:55:02:01:10:3f:f5:56:27:81:e8:4b:c4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Nov 4 08:00:42 2025 GMT
Not After : Nov 5 08:00:42 2025 GMT
Subject: CN=8560ffe6259ca2af2ae3c2a456a2ddfbdf99c3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:c0:dc:c9:16:d8:f7:90:48:f3:fc:00:aa:
f0:35:26:50:d3:42:4c:ba:90:c9:28:ca:17:72:78:
a8:a2:06:6c:84:22:8e:9a:3c:86:e5:8e:f5:3e:45:
94:e9:bf:94:7b:d5:b0:6c:65:0d:68:39:7b:f8:66:
ab:cd:0b:34:b2:c4:53:d5:d5:04:92:6e:36:f8:2a:
f0:89:24:30:79:06:ed:b0:a1:f6:ce:86:98:38:54:
29:7f:4b:62:ab:7a:c6:f5:db:51:7a:b9:3f:6d:9b:
d9:84:d7:8d:33:f5:36:bb:27:df:ff:ca:eb:f8:60:
9f:17:7d:8b:bf:4e:81:33:06:fb:6c:a9:36:7b:75:
6a:b7:87:bc:11:8e:bb:d5:5f:2b:ce:45:1f:27:c6:
78:1a:b4:dc:39:e0:d9:86:c1:88:b4:67:4c:1b:31:
cb:5a:9b:86:38:40:8c:60:2b:1e:cf:25:58:32:f4:
1f:5a:ad:f6:35:22:9c:3a:19:79:15:df:0e:77:1e:
6e:ae:d8:03:2c:e8:73:c2:98:8a:73:f8:5a:61:fb:
d6:4b:6d:3a:91:d0:8e:27:ea:75:d6:d7:39:29:46:
7e:6c:9b:2a:1c:15:7b:5a:fe:6e:3d:c4:75:d3:3b:
c4:75:78:82:bf:be:2a:61:1d:02:47:80:75:63:5d:
73:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:FF:E6:25:9C:A2:AF:2A:E3:C2:A4:56:A2:DD:FB:DF:99:C3:F8
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:36:d6:15:2c:fb:39:44:04:c5:80:f9:b8:cb:4c:3a:9b:6e:
39:97:05:c3:96:7f:03:6e:f4:45:d6:b0:42:5a:78:db:90:a0:
13:08:d1:f8:ee:55:7b:7d:cc:8c:ee:9e:5c:91:29:47:21:62:
5b:9d:3c:4a:a2:2c:b6:da:9f:d9:d8:77:b4:f8:9c:e8:b3:a2:
7a:03:01:bc:c9:cc:d4:ab:fd:d5:67:73:07:3d:2e:63:42:49:
d7:7b:f1:70:84:a3:66:31:9a:29:db:b2:9a:d5:d8:25:40:04:
56:bc:ec:13:ea:df:e1:07:ef:37:05:e7:42:95:77:a9:53:40:
e1:3c:17:0e:06:77:5c:9d:4c:28:41:3b:e7:35:0d:cb:07:3e:
89:02:cc:78:21:e2:7e:9c:c6:7f:b0:40:4a:ed:e9:24:82:62:
d4:7c:ff:8c:7b:f2:c0:13:37:45:47:c4:4d:98:8b:52:86:f2:
85:cd:70:c0:12:e6:ed:73:e5:82:6d:c8:4d:e0:7f:aa:c8:de:
90:eb:c9:c6:f2:dc:d5:cc:b3:15:b7:c6:fd:16:04:c4:bc:05:
a3:0d:0e:f2:ba:0e:76:2d:32:b7:6a:13:10:d5:3d:82:ec:42:
bd:70:28:5a:48:06:9c:e0:d0:0a:3e:b7:90:91:93:76:8b:63:
55:6d:70:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:12 2025 by rpki-client