Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: d7xZD78Nd9L7dh6WjX4/h9k/IIMdfvZ1lNOwcvsIJlA=
Subject key identifier: C4:B3:C9:EF:6C:D1:C4:30:23:76:EC:BA:55:53:4C:86:B4:26:73:0A
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0197B89021DF2A98433CB60DA0B1E590D74D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 22:02:22 +0000
Manifest this update: Sat 28 Jun 2025 22:02:22 +0000
Manifest next update: Sun 29 Jun 2025 22:02:22 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: BAnZwSQi7rjaKsSFFO3Ms2Algf76nf82H+ZBuaFmnFw=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:21:df:2a:98:43:3c:b6:0d:a0:b1:e5:90:d7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Jun 28 22:02:22 2025 GMT
Not After : Jun 29 22:02:22 2025 GMT
Subject: CN=c4b3c9ef6cd1c4302376ecba55534c86b426730a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:25:21:f2:a0:48:51:62:94:b1:9a:4b:35:75:
32:86:bb:1c:10:00:9f:50:4f:86:66:f2:9c:bf:28:
9b:be:5f:34:49:7e:33:00:75:77:44:4b:7f:b9:e6:
36:1d:b9:54:ef:92:3f:1d:dc:c2:72:59:99:2d:43:
15:12:8e:8d:f9:63:f6:6e:85:ca:e4:8f:7b:e5:84:
20:4a:55:04:a5:95:6c:3c:93:60:4e:34:6e:53:be:
2a:30:c8:90:9c:63:61:7b:21:98:3b:36:c7:cb:eb:
10:62:1c:b5:d5:28:ce:fb:e7:85:88:c0:10:0a:cc:
52:d6:b9:0f:0f:87:3d:e2:e5:00:0a:54:da:15:e6:
c8:80:7b:f4:2f:32:e0:c7:62:d2:7c:85:62:78:1d:
5e:9d:69:78:f0:d8:f7:f6:ce:49:74:dd:92:df:6d:
0f:fc:ca:8e:07:d6:59:cb:80:13:e8:ce:04:6e:0a:
ae:9a:53:c7:59:9a:89:b4:f0:7d:9d:35:a5:f3:7f:
5c:40:b5:9f:0e:3b:7b:11:58:44:3a:cc:19:97:96:
42:fe:a6:d1:2e:0e:ef:cc:3c:27:45:14:f5:79:91:
b5:6d:7f:49:db:cc:0f:ce:bf:ab:11:77:49:f8:76:
b5:8c:df:66:cc:f7:f5:08:54:2f:03:46:75:ff:38:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B3:C9:EF:6C:D1:C4:30:23:76:EC:BA:55:53:4C:86:B4:26:73:0A
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:69:5e:f2:15:62:3b:db:c8:1c:5e:95:40:e1:9f:b1:77:ff:
06:2b:97:28:a4:81:db:07:72:f7:80:24:8e:50:74:a5:51:b2:
c1:60:b5:7f:92:10:a4:2d:b3:98:5b:8d:3a:ff:c8:f1:6d:91:
07:7d:69:93:04:2e:1d:10:fc:d3:1a:67:43:18:28:9e:e4:93:
74:c5:1d:24:82:dc:f0:1d:d7:3b:a9:60:3e:96:e6:77:e0:66:
fd:0e:c2:46:1e:2b:c0:19:f8:43:47:49:ff:9e:30:07:ec:18:
91:9b:db:4d:41:2c:41:4c:71:46:52:0a:6b:58:a4:88:85:07:
37:bd:80:e6:d3:66:89:ef:35:8d:a5:1f:ce:13:98:10:76:0a:
7b:c6:bd:89:11:65:c3:fc:fd:60:f0:d6:f5:86:9c:cb:a7:e1:
4c:f1:f6:a2:ea:93:5a:b9:c2:13:41:b3:85:7f:e8:12:b7:3e:
a0:36:1e:80:e2:91:e2:ca:da:1f:fc:eb:b5:86:5d:1d:19:e1:
c8:82:f6:a6:cb:6f:6b:d7:2e:6c:2e:d9:20:72:b2:0c:03:86:
96:5e:08:9c:d6:c5:b7:cf:84:59:83:a1:0b:fe:35:04:52:3e:
ef:c4:f0:97:61:3f:12:6d:79:43:4b:83:68:a9:3f:61:4f:97:
87:14:18:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:19:51 2025 by rpki-client