Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: Hd6qiHOcGtdG1gzakTmGhqaliL5l287Oq+UVeoVEKAM=
Subject key identifier: 63:83:20:85:F7:E5:2E:35:6E:0A:84:F9:E1:B6:D5:D5:A9:23:DC:EC
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 019892FF57C5127E22A23F9D65A667EB00D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 1043
Signing time: Sun 10 Aug 2025 08:01:04 +0000
Manifest this update: Sun 10 Aug 2025 08:01:04 +0000
Manifest next update: Mon 11 Aug 2025 08:01:04 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: XCYA9CGC049B83T9sNZ76TT3NJPNxBVE9MpkECDFtWw=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:57:c5:12:7e:22:a2:3f:9d:65:a6:67:eb:00:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Aug 10 08:01:04 2025 GMT
Not After : Aug 11 08:01:04 2025 GMT
Subject: CN=63832085f7e52e356e0a84f9e1b6d5d5a923dcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:33:7a:83:7b:68:9a:1f:1c:84:4e:31:d0:c9:
8d:2e:b6:a7:35:17:c2:49:52:22:b8:23:70:c1:95:
75:e3:17:e3:7c:b0:21:07:6e:ae:cc:32:b1:5b:fc:
7c:a4:bb:e5:48:04:27:e7:cc:d6:0b:de:c9:5a:d0:
13:5f:de:49:2a:33:fc:bb:23:96:59:54:0c:e7:3d:
a2:77:b6:7b:4d:01:91:f1:af:2e:c5:e2:a7:d2:ee:
27:12:12:b4:0e:07:fd:49:7e:77:6e:db:3b:bf:3b:
4c:98:5b:d4:22:ea:35:06:b3:03:88:88:2d:d7:15:
33:c3:24:5d:07:df:55:d5:8e:fb:71:0a:c1:b7:2a:
0f:0a:39:79:41:93:d9:28:a0:30:ed:9a:20:b6:a6:
29:5d:a7:28:98:9b:89:73:6c:3c:6d:86:96:9a:bb:
b7:c1:3e:d0:8e:fc:34:30:79:bf:a2:fb:a3:40:1e:
5b:e1:07:53:4d:e6:2f:4e:27:cf:f3:d7:d1:55:b6:
83:76:9c:ff:e9:fa:29:b9:b2:f2:16:34:36:43:44:
8f:63:f8:19:d5:d0:70:74:b7:e6:64:46:b8:d2:bf:
0f:ea:51:16:93:fa:6e:76:be:a9:c3:d3:13:28:a5:
c7:38:e8:94:db:7b:da:8c:7f:7b:84:a4:0a:c9:46:
ae:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:83:20:85:F7:E5:2E:35:6E:0A:84:F9:E1:B6:D5:D5:A9:23:DC:EC
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8d:81:57:c2:9c:ca:23:81:21:6f:a6:b5:af:80:52:e6:d6:
4b:93:12:d5:aa:34:c5:ff:be:bf:8d:78:25:44:9a:54:d8:0e:
9a:0c:f4:56:ba:14:a7:e2:2f:69:44:ec:8c:c1:3f:5c:37:13:
4b:08:47:4d:9f:aa:29:d2:91:d0:f7:52:ec:66:47:c1:7e:38:
b1:04:7d:99:e8:a1:31:68:a3:7f:27:1b:d2:02:23:3b:61:75:
2c:18:e2:c5:ef:38:80:40:88:1e:0e:6b:f1:d2:19:a3:e1:82:
86:25:d3:5b:a2:4b:59:0b:79:d7:d4:75:6a:cc:5b:10:55:9a:
2f:05:04:4a:63:94:e7:97:4f:b9:86:32:7a:1f:32:fb:7f:a6:
2c:50:1d:28:0c:82:e4:d1:8a:d3:f3:8e:ba:e6:28:bf:19:bb:
36:46:73:21:8f:9c:5a:f4:2b:a3:45:2c:bf:b3:2a:9b:80:01:
0d:55:c6:ca:6c:bd:3b:b7:6a:af:bd:c7:7c:1c:17:32:7d:1d:
f0:9a:df:8a:b3:cb:4f:c7:2b:cb:88:95:1a:24:60:b8:a9:fb:
bb:b8:f2:32:6b:be:de:8c:02:16:48:73:6f:ea:0b:67:bf:08:
db:ea:df:4a:4f:fd:5f:99:63:14:94:62:f1:c9:d7:8f:15:e6:
83:1d:f0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:46:41 2025 by rpki-client