Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
File: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft (raw, json)
Hash identifier: iHp2H1j6S3a1QK6ZcLtiN/bBdZqV3dRDR3nMfW0m3x8=
Subject key identifier: E1:5C:DB:85:B9:42:55:F2:D7:E2:DE:95:25:F5:5A:7C:2F:DD:9F:D9
Authority key identifier: 6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
Certificate issuer: /CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Certificate serial: 01989D4BDB5935866B083388DDFBC1710A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
Manifest number: 0DA2
Signing time: Tue 12 Aug 2025 08:00:50 +0000
Manifest this update: Tue 12 Aug 2025 08:00:50 +0000
Manifest next update: Wed 13 Aug 2025 08:00:50 +0000
Files and hashes: 1: RqntMWBDTAuHkvxXJRUQlBHvO0Y.roa (hash: rHf6WPLDzEiSy2rPCd2fdO2Jo+GQGQFkoNjCSTwwLww=)
2: ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl (hash: YPKdcnYcMcSpkQye3Pqi6/Ds3o5kqbFuY7LnXLx5I70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9d:4b:db:59:35:86:6b:08:33:88:dd:fb:c1:71:0a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a37982207e62ded0691dcb18ef6ea32d413f3f6
Validity
Not Before: Aug 12 08:00:50 2025 GMT
Not After : Aug 13 08:00:50 2025 GMT
Subject: CN=e15cdb85b94255f2d7e2de9525f55a7c2fdd9fd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:19:a3:ab:39:19:3d:2b:8b:ad:ce:9e:57:ca:
09:d9:b4:60:c3:d4:7c:9e:c5:86:22:11:bf:18:45:
7f:5f:8f:ee:91:b0:a3:48:77:f1:f5:04:e5:a7:dc:
c5:82:e7:3e:6c:f2:e3:20:88:a7:cc:78:15:5c:db:
71:ec:6b:ee:38:11:32:31:e2:44:63:33:b6:cc:34:
43:69:14:8c:c1:f2:a0:ef:db:03:47:70:85:71:b3:
26:90:ca:99:0f:43:89:91:f8:3e:4b:ec:18:df:e6:
c3:60:8b:99:74:8e:69:8e:9b:c6:af:ec:56:3c:49:
19:45:3a:73:24:36:59:69:1c:68:5c:65:92:b6:39:
cf:1e:2c:f7:83:7e:83:dd:53:fc:71:43:f1:ad:99:
ee:d4:f7:17:b4:ca:5e:bc:45:ea:90:68:ba:9f:8c:
e7:df:03:42:2a:ce:89:ef:be:59:41:4f:ae:e7:49:
64:ff:2f:31:04:fe:76:7c:89:41:a7:c3:2a:9e:24:
10:91:14:d2:37:44:5f:37:3c:6f:cf:6f:c8:39:62:
9d:f4:4d:2b:bf:82:a9:22:4e:af:b6:0c:39:d9:8a:
40:51:21:84:4a:75:aa:d8:f9:22:d6:3c:77:2d:1f:
d9:60:33:f2:fb:62:dd:e0:4a:60:5a:f0:23:29:47:
ec:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:5C:DB:85:B9:42:55:F2:D7:E2:DE:95:25:F5:5A:7C:2F:DD:9F:D9
X509v3 Authority Key Identifier:
keyid:6A:37:98:22:07:E6:2D:ED:06:91:DC:B1:8E:F6:EA:32:D4:13:F3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/b811d5-ba35-423d-862f-23531654e589/1/ajeYIgfmLe0GkdyxjvbqMtQT8_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:a0:bd:fc:e9:be:fc:e8:52:35:3f:c2:c7:98:52:ae:12:80:
30:36:97:98:cf:b1:52:9e:48:54:5c:e1:29:ce:34:57:7d:c0:
10:9f:10:30:85:ea:d1:85:9f:93:ae:f1:00:88:da:a1:ca:b2:
c4:2d:79:38:9f:a8:e7:11:9c:c3:98:67:33:87:4a:57:13:71:
ea:12:a5:7d:85:79:18:7f:76:75:97:46:b0:9e:04:66:de:fc:
53:50:c1:37:5a:26:5f:eb:0c:39:3e:6f:0d:3e:7a:46:d8:61:
13:8d:f7:45:26:dd:c2:59:00:e3:b0:4b:da:15:f7:87:2a:74:
ec:9b:f6:b0:9c:c2:1c:11:fe:7e:90:60:32:2b:56:4e:46:8a:
f0:8b:e0:1f:e4:5f:4a:11:a8:71:56:16:57:b2:38:76:e6:67:
a0:b8:33:47:ec:45:63:57:62:26:1c:22:3c:2e:76:ac:1f:cc:
08:4f:a4:21:b3:d5:5e:be:a0:8c:77:4e:45:29:1f:2b:0f:f5:
13:82:b7:4e:0b:79:b1:26:0b:09:63:a6:22:56:60:1c:81:03:
91:3d:44:09:26:77:70:0d:fe:ee:76:a9:b7:8f:01:80:6b:5b:
67:93:42:ce:7e:55:4b:37:1e:c5:4d:a4:b3:5d:23:27:0b:b0:
d6:64:d4:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 13:52:31 2025 by rpki-client