Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: +KwPygNeq8kEZHoZ73UHHwEwxRC+NYb34ZxvO8T7O5c=
Subject key identifier: FA:D6:AB:E3:0C:B0:CB:4E:03:63:51:D9:83:25:B3:A2:47:98:42:3F
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019A4EF5923A437CE065B3294D9C6F46036B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 13:01:47 +0000
Manifest this update: Tue 04 Nov 2025 13:01:47 +0000
Manifest next update: Wed 05 Nov 2025 13:01:47 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: gOY9oU0oPuUhXi3f3ogZw2MJaoLqRq1i13iyB5Np4BE=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:92:3a:43:7c:e0:65:b3:29:4d:9c:6f:46:03:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Nov 4 13:01:47 2025 GMT
Not After : Nov 5 13:01:47 2025 GMT
Subject: CN=fad6abe30cb0cb4e036351d98325b3a24798423f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:71:96:34:29:39:09:c3:b6:a2:2a:39:85:f3:
48:5a:d3:f0:be:cb:2e:1b:87:26:43:fb:fc:96:a9:
81:c3:db:c2:9f:6a:9f:d3:fb:0c:68:dd:21:d3:09:
94:0e:7a:f8:2c:9e:1d:40:02:2f:d2:4d:cb:de:1b:
d1:ba:bb:f2:b6:ac:ad:62:c9:15:ac:b7:cd:11:f6:
53:7d:3d:6a:8d:81:78:6b:84:6e:a4:b7:58:60:a9:
41:e7:b9:c5:34:34:ba:2d:9f:f8:2f:3b:5b:d1:ba:
34:71:0b:0e:39:a5:d0:52:73:7a:e1:6b:5c:73:b4:
11:55:49:c7:33:4b:29:8e:84:bc:1e:0c:ca:ec:06:
a3:a1:e8:bb:e2:aa:0c:37:db:af:44:6f:99:45:eb:
c6:90:f9:5c:35:1d:b4:95:bb:92:81:f9:1f:16:17:
3f:73:e9:a8:33:48:74:94:15:ef:14:19:6a:99:10:
8a:02:d9:83:f9:cc:36:75:7f:84:01:10:47:80:c3:
54:9a:52:d1:2a:2a:a6:ea:e2:6a:b2:ad:6f:3a:40:
4d:2f:e2:98:49:e5:02:04:5b:94:85:d6:01:eb:62:
57:20:b2:e0:60:f5:14:cd:10:6a:aa:a7:b2:02:b3:
dc:c2:a7:35:01:b0:dd:8d:9c:ec:f7:36:36:3f:1a:
ef:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:D6:AB:E3:0C:B0:CB:4E:03:63:51:D9:83:25:B3:A2:47:98:42:3F
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:2d:f2:d5:8f:1e:73:60:2f:88:9c:b0:90:0c:c9:82:95:92:
be:63:ce:35:4c:0a:33:70:2d:df:7a:5c:36:13:84:f4:76:02:
0b:94:33:a1:82:42:69:dc:da:7b:da:75:ea:35:3f:ca:91:06:
f9:fa:6a:9c:ef:69:b1:c1:46:1a:4d:b3:95:f8:79:ed:bc:51:
13:71:a0:82:33:c8:f4:d1:d7:3f:83:60:54:41:37:02:9b:55:
6e:87:23:11:74:69:f2:3e:24:c9:50:e6:39:5f:a4:1a:d3:f7:
09:26:72:6b:ce:c0:f4:f7:f1:a8:e9:c2:1b:7e:e2:67:7c:1f:
07:19:bf:e4:8c:63:fe:ff:ef:ba:37:35:cc:f3:70:2e:91:a5:
86:34:cf:f4:62:be:b4:83:1d:00:87:06:0a:f1:8b:c4:9e:6e:
ef:f8:11:f1:6e:a4:79:69:da:60:f0:89:3a:3a:e9:06:c7:3f:
49:ce:3a:50:f7:5f:cd:fd:02:41:66:15:7a:ec:56:a0:5e:a0:
32:e7:2b:f4:8e:f2:9f:dc:59:33:94:87:96:b3:41:23:3c:2c:
a1:d0:5d:88:78:97:74:83:1c:81:1d:ed:84:ba:7d:53:3a:45:
4f:50:47:45:b7:85:aa:a2:f7:84:60:ea:8a:2f:49:9d:1c:33:
e4:f3:c0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:59:56 2025 by rpki-client