Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: 96iswcbCdxY9by30uavSn0gdpM0mfRqJ+Y1kWbTfz88=
Subject key identifier: 2A:AE:48:8C:8F:1A:6D:FD:5A:FE:88:E4:8C:01:48:76:7F:2C:EF:ED
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0199FBEC15CC5FFD04D00DE29F76F9078853
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 10:02:57 +0000
Manifest this update: Sun 19 Oct 2025 10:02:57 +0000
Manifest next update: Mon 20 Oct 2025 10:02:57 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: Pg7Z+9OR83gSZiucz1pAHfB9xDgna8A9SlwEahIJYgM=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:ec:15:cc:5f:fd:04:d0:0d:e2:9f:76:f9:07:88:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Oct 19 10:02:57 2025 GMT
Not After : Oct 20 10:02:57 2025 GMT
Subject: CN=2aae488c8f1a6dfd5afe88e48c0148767f2cefed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:35:b6:f0:74:93:25:05:01:91:18:5e:8d:98:
88:34:c2:fe:9f:5a:49:a4:07:76:b6:7a:35:8c:d6:
98:e3:37:d6:95:1d:91:3e:92:f6:04:26:8c:3f:2d:
dc:37:92:e8:ad:2e:a5:ff:01:1b:4a:ee:18:54:5b:
dd:fb:f2:c6:9b:f2:6a:85:ad:c9:a9:53:60:50:a6:
1c:39:c0:a7:38:e4:40:a3:fc:e6:7a:8d:f2:25:cb:
51:8e:80:81:52:63:6a:28:6b:e8:5d:1f:ef:51:b9:
a9:d6:e2:cb:6d:41:f0:13:37:53:45:42:6d:fd:70:
3d:e4:44:64:af:42:41:2a:2d:d5:2c:7a:0f:1b:ae:
30:12:4c:70:a3:8c:d5:7c:60:1a:06:5f:45:1a:c2:
c5:95:bc:1a:6f:ec:ec:97:e6:b4:d3:8a:55:7d:d4:
af:77:3e:37:a8:f3:f9:1d:4a:b7:fd:fd:76:20:96:
d7:0c:0b:3c:60:43:04:14:ff:af:ed:38:4f:da:c3:
b3:26:6a:49:a9:e6:fc:02:14:44:ed:a0:ef:20:f7:
dd:6c:99:2b:0e:84:06:8c:70:b3:70:3a:90:6d:70:
ac:15:bb:9a:cb:5a:45:f3:a7:c7:23:0c:b5:7e:88:
1d:a6:8a:55:67:31:74:95:18:3c:4f:4d:4f:3a:85:
05:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:48:8C:8F:1A:6D:FD:5A:FE:88:E4:8C:01:48:76:7F:2C:EF:ED
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:20:0a:83:32:85:0b:52:98:8d:01:44:25:b3:c5:e9:79:dd:
11:d9:24:06:3f:1b:14:b7:7d:b1:19:25:7f:df:ba:44:58:27:
bb:ef:ed:cc:55:86:1f:87:91:5f:e6:37:ae:79:32:26:60:f9:
9b:6e:b4:d6:24:fd:7a:09:c3:c3:d1:44:33:03:9b:5c:15:64:
3c:49:33:dc:48:c9:a8:38:58:cd:c4:40:ca:d9:b4:3f:45:eb:
80:c1:75:8e:ce:69:f1:5a:39:6b:15:a8:81:82:e3:26:d3:ac:
cd:97:c8:91:22:f6:25:49:da:fe:67:85:b5:62:55:5c:13:f5:
0f:d9:f4:42:bb:d0:37:1e:db:73:15:5b:70:95:ae:63:03:33:
d7:84:9a:ca:78:d6:76:fe:9d:ef:68:28:fb:be:80:42:2e:93:
bd:4c:95:5f:ce:27:a5:ab:ba:1d:4c:22:59:db:22:1f:cd:fe:
8c:1a:d9:9e:8b:1e:99:d7:40:41:8d:92:74:f2:ba:d3:18:4a:
48:db:5e:e5:e8:f9:93:1a:8c:6e:c3:9d:35:3d:46:e5:3b:55:
ec:53:be:15:07:91:5f:ec:f1:2c:1c:c4:97:d8:1d:85:d8:3e:
da:93:ab:2f:9b:f1:9a:c3:06:4e:67:15:26:71:33:72:2b:2e:
8c:8a:5b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 12:54:41 2025 by rpki-client