Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: BsHQ1pqnpUdmc16PA2iBQ3FKW6UpP5zKkD300acRbjw=
Subject key identifier: 26:FD:8E:14:EF:2D:CA:58:93:F2:1F:6B:1B:46:39:52:2F:A3:EC:6D
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 01987D8B3EBF8FDCD23889164B5998A7CD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:02:14 +0000
Manifest this update: Wed 06 Aug 2025 04:02:14 +0000
Manifest next update: Thu 07 Aug 2025 04:02:14 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: Ummkq5EA4Pidn4zqHJze7y76vLx1EToyZUevQpXDunA=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:3e:bf:8f:dc:d2:38:89:16:4b:59:98:a7:cd:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Aug 6 04:02:14 2025 GMT
Not After : Aug 7 04:02:14 2025 GMT
Subject: CN=26fd8e14ef2dca5893f21f6b1b4639522fa3ec6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8b:0a:eb:b8:22:98:3a:da:cc:61:88:5d:a6:
b3:91:45:9f:84:60:8c:3e:7e:b2:92:07:d3:ea:3a:
f6:fd:ab:e3:7f:2c:59:87:30:34:bd:be:bd:c4:24:
e7:c2:a2:31:de:77:07:1c:b2:4a:a8:ca:4f:25:c9:
52:78:1c:db:0c:43:57:cf:3a:7a:3a:d4:cd:12:ec:
6d:2f:d8:38:4d:1a:46:62:ee:01:80:9f:82:f6:50:
b0:d3:8a:5b:a1:ca:eb:50:cc:e2:56:e3:f5:fa:63:
b3:1b:ab:2e:b8:7f:77:43:48:e0:47:1f:cf:7c:45:
74:df:86:f0:15:ec:91:89:37:0c:f3:fa:ae:ce:9a:
57:3b:34:6e:44:ee:dc:83:d8:eb:c3:4b:71:67:1a:
af:db:06:a6:9d:17:92:81:35:1d:7c:99:63:32:ec:
7d:3f:c9:79:8b:b8:8a:b8:e7:dd:33:ee:32:e5:f2:
c5:71:ae:a1:bc:8d:a1:26:6f:4d:d3:c5:d8:3a:4d:
a7:18:4d:10:c7:66:24:52:db:1d:ec:c7:6a:f0:1d:
6e:8e:54:59:67:31:c9:be:d2:99:c7:24:46:82:fc:
03:98:dc:22:da:dd:64:03:6e:97:79:02:ab:43:ad:
85:f3:b0:a1:8a:5e:64:23:4d:71:8e:b9:2f:80:47:
bb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:FD:8E:14:EF:2D:CA:58:93:F2:1F:6B:1B:46:39:52:2F:A3:EC:6D
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:85:9a:b6:77:0d:21:f3:1d:57:4b:8e:b8:0f:bc:ec:44:37:
43:37:74:c5:3f:2f:f2:0b:9e:3f:8c:f8:3b:7d:c0:e6:e7:db:
e0:55:52:95:bf:65:1d:77:ae:a9:69:d0:1d:a6:de:1a:0c:31:
73:db:df:b6:fd:10:ce:88:f8:ce:cc:02:7a:30:36:c5:80:99:
34:06:c7:65:91:36:c7:bd:4d:30:8e:a1:1a:65:52:24:a1:de:
65:bf:ab:46:cf:36:7e:13:60:e2:8f:09:19:db:a6:4a:9d:d1:
7c:b9:0f:ac:79:cd:07:60:ed:01:36:c9:d9:4b:e5:23:9d:19:
e1:0c:f0:9b:c9:c0:25:c6:cb:2e:63:42:7d:42:a1:15:9e:5e:
e8:70:64:30:84:be:1d:7a:e5:1b:f1:47:f0:9a:fd:dc:93:d1:
05:07:21:23:25:b7:bf:87:d2:72:1b:11:ae:53:8a:16:08:be:
9f:f5:ce:33:6a:01:89:17:6e:3f:86:ca:0c:cb:14:01:f4:4a:
78:44:45:a8:3d:5b:e7:10:18:8d:b6:ee:78:52:ec:f0:de:45:
9d:32:bb:c8:ac:80:c2:e3:3a:77:f3:f5:90:c4:c0:32:87:c0:
43:4b:dd:07:59:f2:14:5b:3d:13:8d:c3:db:00:db:62:00:d9:
a6:bc:9d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 12:33:22 2025 by rpki-client