
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: 0rb6cF8ZtqHvC/gjYQvsKXGPhXtCJedJ+KR96mHR+F0=
Subject key identifier: 12:D0:F3:26:EB:63:D4:C5:05:6D:1D:21:3C:D8:D6:A9:FD:A1:CF:AC
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 0197B88F615F0E780E04BC8EF92A367733D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 22:01:33 +0000
Manifest this update: Sat 28 Jun 2025 22:01:33 +0000
Manifest next update: Sun 29 Jun 2025 22:01:33 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: +VGg3aLc7rMRf4yfYZRhXu8bwA4t4P+8bN1hXO/J8Og=)
2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:61:5f:0e:78:0e:04:bc:8e:f9:2a:36:77:33:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jun 28 22:01:33 2025 GMT
Not After : Jun 29 22:01:33 2025 GMT
Subject: CN=12d0f326eb63d4c5056d1d213cd8d6a9fda1cfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e9:f9:64:96:84:22:7a:0a:49:15:58:fa:c0:
7a:72:dc:1f:2b:a2:e6:b2:89:ee:92:a5:2c:9d:4b:
49:4f:b9:9e:38:86:bd:7d:dc:f2:9c:d6:b1:0f:63:
92:88:45:33:5c:c7:01:6c:44:d3:f9:2b:54:20:12:
00:92:40:16:81:ef:44:e5:9c:7a:86:58:31:82:cc:
5f:3b:48:8c:c9:1c:8f:02:38:73:c1:79:89:7b:53:
37:1e:b9:94:74:d1:f3:28:1d:6a:b1:62:62:82:64:
7b:1b:50:86:b8:b2:b2:fb:b1:3e:ec:01:dd:07:c5:
b7:25:69:0a:d4:8e:0c:d3:2e:f0:2e:e2:3d:93:a2:
92:8f:ea:64:bd:3a:19:c1:92:d0:e3:16:1f:3b:88:
f1:c4:fa:4e:29:bb:f8:ec:59:ab:b7:dc:f8:48:ab:
77:ab:24:56:cd:d2:1b:b2:03:3b:92:07:36:be:91:
4d:25:77:3e:ee:ee:a9:b0:4e:bb:36:e0:81:f4:f6:
74:15:c0:0d:8a:66:57:a2:16:58:97:43:fd:d8:93:
1e:40:2a:3a:fb:52:9c:c7:fd:76:94:68:e6:8d:7b:
53:65:b1:8f:dd:68:71:52:13:52:1a:e6:f5:4e:6a:
8e:bc:8a:c4:6d:12:43:be:1e:e6:b2:11:bc:56:fb:
0c:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:F3:26:EB:63:D4:C5:05:6D:1D:21:3C:D8:D6:A9:FD:A1:CF:AC
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:c1:de:cf:cb:03:d6:e2:10:e9:c7:b5:55:db:e2:77:24:4c:
ac:96:36:8d:49:09:98:62:85:d6:d1:58:93:77:77:ce:14:b2:
b4:cb:3b:70:28:f6:a9:b1:32:cc:66:7b:ed:1d:0c:4d:89:9d:
cd:eb:77:58:37:53:a8:09:f8:c3:48:28:d6:39:7c:02:bf:35:
a6:75:67:75:c7:b4:0f:54:02:4e:8c:02:32:ec:9a:6d:a9:86:
c3:32:03:a6:09:71:b5:94:1e:f3:b7:97:c8:01:93:8c:2f:80:
63:f2:89:24:05:91:a7:05:dc:62:3e:99:c2:2b:64:1b:39:24:
c4:0f:da:ea:85:b9:15:1a:1e:41:fb:66:56:06:02:73:a1:0b:
fa:87:a1:10:6a:54:80:52:91:13:f0:de:e2:19:cf:70:ba:5b:
e8:2f:fb:06:95:6f:16:88:04:5a:68:e1:d0:30:10:6a:5e:c2:
7b:52:10:c2:e0:86:3f:19:a3:f0:b4:54:9d:8a:a0:22:6c:12:
e9:b7:7e:74:2e:7b:af:3e:88:59:86:65:c6:a0:c1:5e:55:fa:
2f:2a:9b:07:9c:ee:fb:74:25:6a:65:4a:0e:37:4c:ad:30:94:
08:4b:cf:80:be:96:01:8a:c6:7e:f8:a7:6a:ae:13:5b:08:d1:
d9:83:d5:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:29:50 2025 by rpki-client