Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: +3CIYm2ErmWI68S1VX5MX2/Fwk10rlIo3wbHRmPSR/8=
Subject key identifier: 3D:DC:17:49:FC:A3:F8:76:68:FA:63:97:1F:18:5C:16:CD:C3:47:87
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0198D65F0681413EBC3D0F92207CEEDE7346
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:08 +0000
Manifest this update: Sat 23 Aug 2025 10:00:08 +0000
Manifest next update: Sun 24 Aug 2025 10:00:08 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: iJ2DGwo/zqtXQK6JeTBVBU4QXl5+4jKpAn1YctyuUwc=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:06:81:41:3e:bc:3d:0f:92:20:7c:ee:de:73:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Aug 23 10:00:08 2025 GMT
Not After : Aug 24 10:00:08 2025 GMT
Subject: CN=3ddc1749fca3f87668fa63971f185c16cdc34787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:22:95:91:f8:86:dd:3f:97:19:a4:0b:17:b3:
b2:f8:7c:63:29:bf:e8:a5:76:33:eb:f7:12:68:8f:
af:49:e9:46:e1:26:db:01:a4:d0:4c:62:4b:51:d8:
99:10:82:79:01:12:89:5d:e5:af:eb:82:68:0c:08:
82:1a:cd:45:c5:46:d2:9a:6b:30:62:ed:d5:44:9c:
8e:70:d4:5e:45:6a:f7:aa:7b:0e:3c:9a:bf:b1:af:
b4:79:e2:e1:0e:3f:29:17:b7:ef:5b:dc:79:5e:1e:
51:54:f3:db:d7:b1:b1:25:b8:34:25:06:f2:9a:0d:
d8:5a:37:b8:ce:68:40:45:43:7d:06:30:c3:a8:05:
0b:77:96:f3:4c:df:cd:02:49:92:4c:51:35:32:e7:
4e:7c:55:3b:88:c9:0a:43:59:30:52:14:2e:a3:72:
ab:40:a7:f8:e6:99:77:d8:b9:2e:63:91:32:96:d3:
39:d1:70:ad:3a:90:23:b2:41:3f:b5:dc:74:9e:9c:
34:90:a3:28:57:44:74:ac:22:fe:d0:11:09:9c:c7:
d7:82:b4:f6:a1:b6:5d:75:ab:ef:31:0c:93:2a:78:
5f:a9:2e:5c:df:7a:a2:6d:97:e1:41:a8:1f:3c:26:
26:05:29:8c:2f:4f:67:e1:7d:24:eb:35:1b:fb:73:
f1:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DC:17:49:FC:A3:F8:76:68:FA:63:97:1F:18:5C:16:CD:C3:47:87
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1b:39:80:f3:0e:57:cf:c8:c5:53:20:04:bf:0b:22:36:1b:
a5:af:7b:6e:41:55:33:c9:92:5c:b8:a5:82:2c:42:d0:b0:7e:
0d:f2:cd:95:8e:01:c0:6f:b6:cb:d8:a1:f8:2c:3d:88:be:49:
89:0e:5c:63:c8:7d:9c:97:ed:51:c6:99:9b:65:b6:a6:88:77:
48:d5:dc:7d:09:54:51:11:01:08:68:53:6b:df:a7:79:83:7e:
fb:a4:ec:35:9a:e5:6f:74:58:d1:ae:14:20:00:79:02:5b:b0:
78:c7:8b:46:06:81:77:7c:85:d5:34:1e:08:a6:b7:4b:a9:6c:
01:0c:1b:cd:ab:5d:9b:cb:75:56:e7:a6:d8:28:0d:b7:23:c8:
62:ab:29:78:b4:d1:e1:a4:43:03:f7:41:f9:4b:0b:76:5e:be:
fd:3f:39:e8:82:21:aa:70:b3:41:f3:fd:fa:9e:88:14:2e:08:
59:a0:4c:32:07:91:53:da:d2:af:fa:37:41:94:3c:d7:71:74:
45:bc:78:88:09:3f:cc:bd:14:b5:03:68:88:57:7f:15:18:dd:
39:8d:02:a4:b4:44:1d:5e:13:f3:ff:d6:68:a8:89:7d:c0:7f:
8d:f4:d0:e3:79:54:f6:3c:b0:97:70:86:67:47:e8:6d:71:04:
ad:ba:9f:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:54 2025 by rpki-client