Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
File: ajZv38qiDoDov8MwpNixvn3modA.mft (raw, json)
Hash identifier: 2GqmWLwE6aMeIaXJQYfs/ASzqMrKbhfj2P3kUabvlC8=
Subject key identifier: C0:64:96:B4:06:99:A1:C5:CB:39:2E:34:43:50:4B:DB:BF:5A:13:F7
Authority key identifier: 6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
Certificate issuer: /CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Certificate serial: 019A4D73A98805B8DAD59914602592243735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
Manifest number: 1714
Signing time: Tue 04 Nov 2025 06:00:16 +0000
Manifest this update: Tue 04 Nov 2025 06:00:16 +0000
Manifest next update: Wed 05 Nov 2025 06:00:16 +0000
Files and hashes: 1: ajZv38qiDoDov8MwpNixvn3modA.crl (hash: NcE/DYNF20BsRt2/5VgcDORT3wfr+esUd+gjOdkM1tM=)
2: vtQmEnQvCzTxgKx6eoQDleSryN0.roa (hash: X99pd7WPnymxRoUriny009KnFNB5G5RPTZ3dWOg4RYg=)
3: zfevDRWTI9ElP_0JFPWcB5eiL-A.roa (hash: xu09TmX2/se2qxFKlwHjNcmA2dSMzqNt9raj3MmhER4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 06:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:73:a9:88:05:b8:da:d5:99:14:60:25:92:24:37:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a366fdfcaa20e80e8bfc330a4d8b1be7de6a1d0
Validity
Not Before: Nov 4 06:00:16 2025 GMT
Not After : Nov 5 06:00:16 2025 GMT
Subject: CN=c06496b40699a1c5cb392e3443504bdbbf5a13f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:80:f1:1e:d5:5a:ac:f3:33:c2:b0:c2:a6:
3d:ce:a1:6b:9a:e5:8b:f2:fa:9e:fe:4a:e6:a8:fc:
17:eb:fb:e1:74:b0:9d:59:3b:7b:d9:9b:35:ab:30:
77:c6:e3:a8:d5:4e:cd:5a:31:23:52:dc:9a:62:35:
eb:7a:56:0e:7b:0c:1d:fe:9b:b8:25:32:3f:e3:21:
84:49:fd:eb:74:5d:a7:f5:3c:e7:5e:55:2c:f6:7d:
20:3e:e3:cb:8b:0d:7a:d3:70:84:0b:5d:14:96:f7:
0e:12:e8:29:c4:4e:e2:53:09:92:0b:a8:e9:58:06:
10:18:13:9f:2e:76:ed:f7:d0:16:c5:2f:f6:18:41:
68:b4:77:db:1f:76:8e:a0:ee:6b:c5:d0:58:29:91:
38:8b:ec:4a:12:82:e6:8e:f6:33:8e:a4:ef:f1:75:
0b:b5:f7:a2:a0:bd:70:f4:f5:f6:29:a7:28:ca:0e:
05:d4:23:55:de:b7:84:b3:b0:fd:da:ee:67:c8:81:
b8:91:7b:21:45:ab:97:a5:b2:96:8d:af:b6:47:e6:
92:49:30:c8:b1:8a:d6:5b:45:8b:d5:ce:b6:0f:aa:
f3:73:5e:6b:5e:c5:5a:7d:2b:80:5f:4c:c8:87:4c:
85:ab:88:12:b9:67:60:9f:20:a6:11:96:19:a3:f3:
70:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:96:B4:06:99:A1:C5:CB:39:2E:34:43:50:4B:DB:BF:5A:13:F7
X509v3 Authority Key Identifier:
keyid:6A:36:6F:DF:CA:A2:0E:80:E8:BF:C3:30:A4:D8:B1:BE:7D:E6:A1:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ajZv38qiDoDov8MwpNixvn3modA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8c4ec4-d637-4d3f-9de8-05559c1f5915/1/ajZv38qiDoDov8MwpNixvn3modA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6c:49:a0:9e:36:c7:38:6a:23:6a:33:27:06:26:85:aa:d8:
76:4b:7e:0f:e4:5d:03:b0:6e:a6:fd:a0:3f:58:61:4c:46:3c:
c4:6b:f0:48:ae:a9:71:47:16:96:f5:fd:51:c2:cf:8e:74:ea:
b1:13:c0:25:16:19:96:d6:01:be:7a:2d:08:96:7a:26:34:f6:
3b:99:5e:b4:9b:6a:47:a3:60:17:d7:9c:c6:63:5f:4a:88:d0:
83:26:8d:74:a8:73:ee:7c:19:7b:a3:81:96:56:54:d7:3e:86:
dd:e1:5d:0e:04:a8:a2:5e:bd:d6:7f:cd:34:45:da:97:44:f8:
86:9e:61:4e:47:a3:f9:c7:c2:49:0d:7e:9c:a1:24:3b:a9:1c:
67:c4:5d:d1:20:33:00:95:6c:19:f5:43:5d:34:31:42:9b:78:
b2:f0:97:b6:78:3d:cf:54:4e:36:d2:f0:61:1f:98:7a:d1:42:
69:78:c5:6e:e1:9f:e3:20:9b:a6:56:24:eb:0f:c3:5e:f8:dc:
ad:75:9f:9e:dc:7c:94:9f:f2:af:f9:c2:57:f2:3e:74:9f:32:
48:c3:a7:a7:65:a9:9d:3a:e3:9d:93:c8:58:65:46:ed:30:60:
1d:03:cd:59:4f:1a:3d:d3:7b:1e:4d:af:9d:39:fe:1a:37:9f:
d5:cc:3f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:47:39 2025 by rpki-client