Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: NAwUI9PCXpIC5cMJpPd/tdu8mmnH0wzooL0MMPexc8U=
Subject key identifier: C8:14:A9:7A:3E:59:C3:B4:55:A1:17:39:DB:9F:9C:FD:8E:42:AE:43
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 0198D65FEBE7E5E1CD142894BC1E4EBC5407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 10:01:06 +0000
Manifest this update: Sat 23 Aug 2025 10:01:06 +0000
Manifest next update: Sun 24 Aug 2025 10:01:06 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: ra+BWdAsYWPToc3cYxluD9hfG8b5VzGsP9HqO0w7e5g=)
2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:eb:e7:e5:e1:cd:14:28:94:bc:1e:4e:bc:54:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Aug 23 10:01:06 2025 GMT
Not After : Aug 24 10:01:06 2025 GMT
Subject: CN=c814a97a3e59c3b455a11739db9f9cfd8e42ae43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:df:bd:b1:b9:7b:b7:a0:96:b2:5a:99:21:c7:
5f:9d:fc:ed:64:70:b8:e6:b4:49:f3:29:f3:cc:51:
26:64:f5:24:b5:17:4d:5b:a8:2b:00:1a:07:36:7e:
14:fb:1a:ed:ce:4b:00:f8:85:6d:cf:f0:89:77:0b:
b7:a0:e7:a9:27:91:74:bb:e7:1b:b0:5d:b2:e7:c2:
c6:23:df:b2:fb:6f:b4:5f:be:ff:58:c7:a2:c0:ea:
2b:b2:33:83:5e:d2:c6:d1:b5:ac:96:05:37:ed:52:
38:fc:e9:76:8a:64:29:f5:b7:97:8e:41:50:82:59:
ae:76:cf:c4:d7:f8:e8:a1:96:89:01:a9:2d:61:ed:
5e:4c:52:b3:9e:11:75:c2:ab:18:73:5a:da:45:f6:
81:a4:f4:69:75:c4:28:40:03:e5:bc:18:e3:f2:78:
f2:22:70:1a:67:ef:29:6d:e3:35:5f:d9:fb:0c:d9:
4a:f2:bc:3c:2d:83:fe:ee:86:b3:18:b8:5f:0e:7b:
12:a4:b4:03:6e:ae:f0:7b:b3:4e:60:16:fc:41:0c:
a3:41:52:b5:a7:a9:21:59:52:a8:f1:ba:3f:85:d8:
40:68:6c:52:0e:10:1c:7e:19:2f:9c:c8:75:63:79:
14:50:a8:94:e5:52:4c:cd:a8:b6:00:69:2a:eb:1d:
29:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:14:A9:7A:3E:59:C3:B4:55:A1:17:39:DB:9F:9C:FD:8E:42:AE:43
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:0d:fb:2c:51:77:95:8e:61:24:6b:1c:bc:e0:f6:6b:43:a1:
76:cf:c8:ef:3d:04:d1:10:d8:55:48:70:8b:24:5a:75:cc:78:
81:78:76:4e:e0:ab:ba:e7:c8:11:03:9b:bd:ae:7b:b3:0c:82:
01:a4:b9:9e:98:16:8a:ed:0f:5f:7a:d4:a9:14:e1:99:73:0c:
7e:62:6e:f8:c6:37:5b:8c:fa:d7:64:ae:4a:7a:64:aa:85:03:
6d:96:d2:cf:68:02:87:c6:db:53:4c:e9:3e:c4:a2:ca:18:8e:
57:eb:50:5c:b2:d0:a1:9d:47:e3:07:09:25:f6:1b:ca:34:1a:
d1:15:96:5b:e6:22:bc:e6:34:06:d3:b3:35:41:a9:98:99:6e:
e0:38:50:b2:e8:2d:4e:2a:5f:ea:66:b2:ad:a5:25:3b:cf:a1:
5e:d1:26:a5:c7:e3:2c:53:f6:f0:74:dc:c7:c5:30:7a:d0:09:
7e:3a:14:a5:da:6f:49:6a:3d:54:03:69:f1:aa:3b:75:72:1a:
db:88:f5:59:b6:e4:50:0a:10:0e:f4:13:5b:24:31:dc:e8:43:
5f:28:5a:fa:1c:9a:c4:6d:36:c9:fc:e6:92:d0:7c:50:a4:30:
14:f4:de:fd:e3:16:49:9c:6e:ce:c8:37:33:a6:8f:66:3a:de:
97:e0:94:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX+vn5eHNFCiUvB5OvFQHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhNDBiZWY5MzA0MzhkNTNjZDA3ZjA3ZmY5MTUzZTJm
YjliZTgwHhcNMjUwODIzMTAwMTA2WhcNMjUwODI0MTAwMTA2WjAzMTEwLwYDVQQD
EyhjODE0YTk3YTNlNTljM2I0NTVhMTE3MzlkYjlmOWNmZDhlNDJhZTQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9+9sbl7t6CWslqZIcdfnfztZHC4
5rRJ8ynzzFEmZPUktRdNW6grABoHNn4U+xrtzksA+IVtz/CJdwu3oOepJ5F0u+cb
sF2y58LGI9+y+2+0X77/WMeiwOorsjODXtLG0bWslgU37VI4/Ol2imQp9beXjkFQ
glmuds/E1/jooZaJAaktYe1eTFKznhF1wqsYc1raRfaBpPRpdcQoQAPlvBjj8njy
InAaZ+8pbeM1X9n7DNlK8rw8LYP+7oazGLhfDnsSpLQDbq7we7NOYBb8QQyjQVK1
p6khWVKo8bo/hdhAaGxSDhAcfhkvnMh1Y3kUUKiU5VJMzai2AGkq6x0p/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgUqXo+WcO0VaEXOdufnP2OQq5DMB8GA1UdIwQY
MBaAFAI5pAvvkwQ41TzQfwf/kVPi+5voMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYt
NmQzODEyYWE1ZWI1LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy8yZmNlY2QtMWI2Yy00YWU5LTlkMzYtNmQzODEyYWE1ZWI1
LzEvQWpta0MtLVRCRGpWUE5CX0JfLVJVLUw3bS1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPA37LFF3
lY5hJGscvOD2a0Ohds/I7z0E0RDYVUhwiyRadcx4gXh2TuCruufIEQObva57swyC
AaS5npgWiu0PX3rUqRThmXMMfmJu+MY3W4z612SuSnpkqoUDbZbSz2gCh8bbU0zp
PsSiyhiOV+tQXLLQoZ1H4wcJJfYbyjQa0RWWW+YivOY0BtOzNUGpmJlu4DhQsugt
Tipf6mayraUlO8+hXtEmpcfjLFP28HTcx8UwetAJfjoUpdpvSWo9VANp8ao7dXIa
24j1WbbkUAoQDvQTWyQx3OhDXyha+hyaxG02yfzmktB8UKQwFPTe/eMWSZxuzsg3
M6aPZjrel+CUGQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:10:55 2025 by rpki-client