Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: /8usLSivIo1GGhw71FWLaB8cdVCoxQGTb2MYV0FKC+4=
Subject key identifier: 62:EC:00:1E:35:0D:B5:19:57:CC:70:11:7F:BE:52:AA:C8:FE:1F:BD
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0196BB5B183BB9CC87DF2839A9BE67EF522D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1533
Signing time: Sat 10 May 2025 18:00:31 +0000
Manifest this update: Sat 10 May 2025 18:00:31 +0000
Manifest next update: Sun 11 May 2025 18:00:31 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: NU9zKWNSh8RAQeWGTL5LmGDeMhQdPQURf81iIPD56Xc=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bb:5b:18:3b:b9:cc:87:df:28:39:a9:be:67:ef:52:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: May 10 18:00:31 2025 GMT
Not After : May 11 18:00:31 2025 GMT
Subject: CN=62ec001e350db51957cc70117fbe52aac8fe1fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:89:29:de:f2:29:74:33:bb:1e:85:af:29:15:
bf:f0:1a:cb:06:32:fd:6c:ee:c0:37:29:d3:28:7f:
4f:21:f4:64:a0:46:c3:97:b9:8a:27:98:84:8a:43:
85:53:7e:79:d1:c8:7e:89:fc:31:c3:3f:ab:e1:30:
6a:78:62:e3:26:e7:3a:55:01:e4:de:3e:db:91:96:
c2:d7:56:18:b3:0a:c3:6b:3e:3f:69:e2:ce:21:8f:
37:38:b6:fa:f9:9d:22:e1:77:fb:8b:eb:a5:32:58:
4d:28:52:f7:e4:dd:71:0f:8a:28:b3:1b:5a:82:19:
f3:60:2b:54:b3:1f:da:8e:a0:aa:17:b4:f8:4c:56:
a9:82:c6:6e:14:26:60:52:92:6a:96:6f:1f:42:6e:
15:41:92:bf:17:b5:66:29:00:d9:d1:5b:d7:b8:2d:
1d:18:15:ff:56:37:b9:dd:bb:d9:e0:f4:7d:7a:88:
bb:11:05:8a:fe:6c:be:08:9a:5b:67:b8:da:d0:43:
c3:14:2c:8a:ef:d9:dd:bb:b1:eb:9e:15:f5:a5:86:
60:ac:b9:96:24:05:00:e3:ae:2c:14:f1:e9:5e:80:
ab:ca:c0:5b:8a:42:d8:0f:7e:e2:94:ce:1a:18:c8:
ca:6a:c3:1f:47:b9:94:45:63:ee:f3:47:b2:1f:f6:
46:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:EC:00:1E:35:0D:B5:19:57:CC:70:11:7F:BE:52:AA:C8:FE:1F:BD
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:a4:51:2a:ef:06:83:1a:44:24:d5:29:79:65:9c:af:c3:df:
7d:db:16:b7:b9:4f:7f:ac:04:f4:c8:f8:4d:e8:70:6d:ba:a8:
22:3a:c0:c6:75:28:34:a0:b2:8a:c9:e1:22:af:6c:22:95:43:
19:b2:ef:df:66:94:2c:26:b4:38:8e:06:32:e5:05:27:36:be:
c6:23:89:42:7d:12:01:df:5a:da:a9:8a:a1:e9:80:46:08:60:
28:90:39:e4:0b:8a:3e:05:85:03:65:e9:a1:7b:c7:b3:01:86:
3d:09:b4:c2:b7:c4:a9:7e:27:c1:6b:f0:a6:5c:6e:0d:22:5a:
1c:4a:49:8d:bc:b8:0a:c7:17:df:fb:0f:fa:4d:3a:23:ae:78:
5b:02:2c:4e:f8:c8:18:62:fa:e6:de:ac:8f:6b:39:b5:36:a2:
0b:eb:19:70:bb:77:1d:f8:d4:f5:32:29:e4:15:a7:de:5e:a7:
85:1c:e7:0b:ac:a6:63:b6:43:34:2d:ac:9a:ca:1e:56:cb:2d:
5b:c3:4b:00:2b:c0:76:2a:eb:cb:44:c3:51:af:c3:6d:57:7d:
8f:12:06:16:19:ef:1c:98:c2:f8:14:d9:1d:41:3f:24:74:a9:
74:9a:02:5b:f1:59:c5:c1:b4:bb:45:40:90:99:1f:52:f9:1b:
f5:0b:bb:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa7Wxg7ucyH3yg5qb5n71ItMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjUwNTEwMTgwMDMxWhcNMjUwNTExMTgwMDMxWjAzMTEwLwYDVQQD
Eyg2MmVjMDAxZTM1MGRiNTE5NTdjYzcwMTE3ZmJlNTJhYWM4ZmUxZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIkp3vIpdDO7HoWvKRW/8BrLBjL9
bO7ANynTKH9PIfRkoEbDl7mKJ5iEikOFU3550ch+ifwxwz+r4TBqeGLjJuc6VQHk
3j7bkZbC11YYswrDaz4/aeLOIY83OLb6+Z0i4Xf7i+ulMlhNKFL35N1xD4oosxta
ghnzYCtUsx/ajqCqF7T4TFapgsZuFCZgUpJqlm8fQm4VQZK/F7VmKQDZ0VvXuC0d
GBX/Vje53bvZ4PR9eoi7EQWK/my+CJpbZ7ja0EPDFCyK79ndu7HrnhX1pYZgrLmW
JAUA464sFPHpXoCrysBbikLYD37ilM4aGMjKasMfR7mURWPu80eyH/ZGYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLsAB41DbUZV8xwEX++UqrI/h+9MB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAraRRKu8G
gxpEJNUpeWWcr8PffdsWt7lPf6wE9Mj4TehwbbqoIjrAxnUoNKCyisnhIq9sIpVD
GbLv32aULCa0OI4GMuUFJza+xiOJQn0SAd9a2qmKoemARghgKJA55AuKPgWFA2Xp
oXvHswGGPQm0wrfEqX4nwWvwplxuDSJaHEpJjby4CscX3/sP+k06I654WwIsTvjI
GGL65t6sj2s5tTaiC+sZcLt3HfjU9TIp5BWn3l6nhRznC6ymY7ZDNC2smsoeVsst
W8NLACvAdirry0TDUa/DbVd9jxIGFhnvHJjC+BTZHUE/JHSpdJoCW/FZxcG0u0VA
kJkfUvkb9Qu7Cw==
-----END CERTIFICATE-----
Generated at Sat May 10 23:05:35 2025 by rpki-client