Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
File: AjJOaqWIMp6sepOPuYeNEy8qha8.mft (raw, json)
Hash identifier: CiAZ53OOjZfQn2GLJUIa8hAvDPoklNa7ZUNbWODdBec=
Subject key identifier: 32:B8:28:AE:3F:2D:A4:D8:72:BC:DF:38:BC:F5:5A:BF:2E:8B:70:8E
Authority key identifier: 02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
Certificate issuer: /CN=02324e6aa588329eac7a938fb9878d132f2a85af
Certificate serial: 01989F70E619A17BF727400122E90DCEC0B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
Manifest number: 0E5C
Signing time: Tue 12 Aug 2025 18:00:32 +0000
Manifest this update: Tue 12 Aug 2025 18:00:32 +0000
Manifest next update: Wed 13 Aug 2025 18:00:32 +0000
Files and hashes: 1: AjJOaqWIMp6sepOPuYeNEy8qha8.crl (hash: KREZxUsocDk9iPKFy9ZULYAR80mRbRAGUamGisEejG4=)
2: B0Hd0utXPhNTqlbRxXDwmF9KHjs.roa (hash: 1ceb7F8O/NW3RMAYN486oZsriG91e3FFu7flF4b5QpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 18:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:70:e6:19:a1:7b:f7:27:40:01:22:e9:0d:ce:c0:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02324e6aa588329eac7a938fb9878d132f2a85af
Validity
Not Before: Aug 12 18:00:32 2025 GMT
Not After : Aug 13 18:00:32 2025 GMT
Subject: CN=32b828ae3f2da4d872bcdf38bcf55abf2e8b708e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b5:c6:23:c1:0d:db:ac:8c:11:20:d1:b1:28:
56:b3:5d:25:55:2c:6c:92:2f:64:6a:f5:99:54:0d:
b6:17:96:d8:5d:6c:14:4b:d9:6f:3d:77:9f:24:d2:
45:e5:36:dd:a2:a1:fb:dc:46:4d:96:c4:27:09:db:
b1:59:2f:aa:df:dc:a2:7c:ed:4b:61:78:f8:a7:9f:
b4:bb:3b:03:6d:c8:07:ff:29:d8:ae:84:b3:6f:ff:
ff:f1:73:72:92:e6:39:58:16:9f:db:fc:a9:39:86:
02:27:c8:ae:ea:fa:97:4d:de:cf:58:fe:39:31:06:
1b:19:de:b4:37:9f:b3:23:dd:85:37:64:d1:d6:3b:
15:ea:ab:0c:72:50:51:09:7e:08:0e:de:55:8d:7f:
ac:89:62:db:83:c6:03:ca:bb:33:ec:28:60:55:2a:
d5:55:00:3a:f9:59:bd:7d:b5:d3:ba:1c:b3:de:41:
23:65:27:f8:09:90:fc:26:52:a3:c5:14:40:b8:34:
7d:35:c5:99:92:c3:af:00:28:f3:3f:c1:53:b7:c3:
8c:9d:3d:3a:e6:8c:1e:b1:ef:e1:ac:73:50:e3:85:
23:d5:84:9a:2c:5f:b1:8c:2e:6c:33:f4:18:61:e0:
30:a5:36:93:0a:88:78:3e:7c:8f:a6:6f:df:12:bc:
bd:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B8:28:AE:3F:2D:A4:D8:72:BC:DF:38:BC:F5:5A:BF:2E:8B:70:8E
X509v3 Authority Key Identifier:
keyid:02:32:4E:6A:A5:88:32:9E:AC:7A:93:8F:B9:87:8D:13:2F:2A:85:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjJOaqWIMp6sepOPuYeNEy8qha8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c23b96-aeb4-4934-a550-4db984e1c831/1/AjJOaqWIMp6sepOPuYeNEy8qha8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a0:9e:af:f3:99:39:e0:22:c1:36:0b:44:1c:97:06:c2:34:
30:04:2f:90:5a:02:56:2e:a0:5f:ee:3e:33:01:8a:dd:0b:8a:
06:f8:74:7b:f2:59:62:55:e9:32:90:57:d1:6b:ec:fe:52:64:
19:ab:af:87:91:cc:60:0a:e4:41:c3:57:19:79:d1:84:b2:cf:
e2:70:3d:91:74:28:be:8c:77:37:e8:d9:4c:e2:ca:c8:dd:89:
f1:f5:48:f8:6a:19:80:32:62:1d:9a:9c:4f:45:12:e0:ca:3d:
1f:ea:07:cf:60:58:66:7d:66:2b:e4:22:b2:fe:5e:a8:a4:cf:
17:f5:40:0d:2b:a5:42:01:f1:f5:7b:31:08:5e:18:51:bf:68:
b5:44:7c:16:23:86:ee:70:b0:49:8a:a3:61:86:55:bb:ab:54:
b9:e0:db:d6:69:18:37:89:84:2b:04:d3:65:6c:c6:bb:b6:3f:
59:4f:d7:68:f6:54:41:b5:9d:e3:a2:9a:76:aa:cf:2e:38:17:
c6:f6:4f:3c:19:9f:27:c4:68:61:7b:4d:d0:53:e1:95:4b:a2:
af:07:69:90:74:00:63:39:1e:e0:f0:67:16:da:3c:92:70:c5:
35:6c:3e:9a:04:95:5b:fe:00:2e:c9:5f:87:9e:05:21:82:50:
13:77:97:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZifcOYZoXv3J0ABIukNzsCzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzI0ZTZhYTU4ODMyOWVhYzdhOTM4ZmI5ODc4ZDEzMmYy
YTg1YWYwHhcNMjUwODEyMTgwMDMyWhcNMjUwODEzMTgwMDMyWjAzMTEwLwYDVQQD
EygzMmI4MjhhZTNmMmRhNGQ4NzJiY2RmMzhiY2Y1NWFiZjJlOGI3MDhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbXGI8EN26yMESDRsShWs10lVSxs
ki9kavWZVA22F5bYXWwUS9lvPXefJNJF5TbdoqH73EZNlsQnCduxWS+q39yifO1L
YXj4p5+0uzsDbcgH/ynYroSzb///8XNykuY5WBaf2/ypOYYCJ8iu6vqXTd7PWP45
MQYbGd60N5+zI92FN2TR1jsV6qsMclBRCX4IDt5VjX+siWLbg8YDyrsz7ChgVSrV
VQA6+Vm9fbXTuhyz3kEjZSf4CZD8JlKjxRRAuDR9NcWZksOvACjzP8FTt8OMnT06
5owese/hrHNQ44Uj1YSaLF+xjC5sM/QYYeAwpTaTCoh4PnyPpm/fEry9XQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDK4KK4/LaTYcrzfOLz1Wr8ui3COMB8GA1UdIwQY
MBaAFAIyTmqliDKerHqTj7mHjRMvKoWvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAt
NGRiOTg0ZTFjODMxLzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jMjNiOTYtYWViNC00OTM0LWE1NTAtNGRiOTg0ZTFjODMx
LzEvQWpKT2FxV0lNcDZzZXBPUHVZZU5FeThxaGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaCer/OZ
OeAiwTYLRByXBsI0MAQvkFoCVi6gX+4+MwGK3QuKBvh0e/JZYlXpMpBX0Wvs/lJk
Gauvh5HMYArkQcNXGXnRhLLP4nA9kXQovox3N+jZTOLKyN2J8fVI+GoZgDJiHZqc
T0US4Mo9H+oHz2BYZn1mK+Qisv5eqKTPF/VADSulQgHx9XsxCF4YUb9otUR8FiOG
7nCwSYqjYYZVu6tUueDb1mkYN4mEKwTTZWzGu7Y/WU/XaPZUQbWd46KadqrPLjgX
xvZPPBmfJ8RoYXtN0FPhlUuirwdpkHQAYzke4PBnFto8knDFNWw+mgSVW/4ALslf
h54FIYJQE3eXFQ==
-----END CERTIFICATE-----
Generated at Wed Aug 13 00:37:39 2025 by rpki-client