Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
File: AJM4SAIdOIiGDa33GICU15KvauY.mft (raw, json)
Hash identifier: Q2tZvmluqt45B2zrqqFiYW5PBl63/yWwYqWvuwwb66A=
Subject key identifier: 3A:79:E4:C8:AA:D4:B6:F7:F6:9B:53:0B:A6:2A:DA:33:C2:17:03:1C
Authority key identifier: 00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
Certificate issuer: /CN=00933848021d3888860dadf7188094d792af6ae6
Certificate serial: 01984B8A7637188572C2EAEC2540B875D2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
Manifest number: 101E
Signing time: Sun 27 Jul 2025 11:00:22 +0000
Manifest this update: Sun 27 Jul 2025 11:00:22 +0000
Manifest next update: Mon 28 Jul 2025 11:00:22 +0000
Files and hashes: 1: AJM4SAIdOIiGDa33GICU15KvauY.crl (hash: uI699kvFIjI3UqRDrV3UsO6ejAaW+ff1hN0UCD/FlqM=)
2: QQdNezXcd1-hIhXGU4Qn8ucBV9Q.roa (hash: WaSlkfe1MwojG0zscntSp+2Lok4NRbwf50hshXXL8jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:76:37:18:85:72:c2:ea:ec:25:40:b8:75:d2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00933848021d3888860dadf7188094d792af6ae6
Validity
Not Before: Jul 27 11:00:22 2025 GMT
Not After : Jul 28 11:00:22 2025 GMT
Subject: CN=3a79e4c8aad4b6f7f69b530ba62ada33c217031c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:03:bf:75:d8:70:29:0b:20:6b:1d:45:11:7d:
b9:3f:ae:30:b5:9f:0d:7d:d5:ac:05:90:8f:02:0f:
f2:0d:63:d7:ad:71:f7:27:4b:99:06:cb:1f:4b:d0:
35:f9:74:8f:57:80:95:af:81:ee:68:aa:7f:5e:2b:
1c:00:61:ae:d4:53:b1:14:e7:9b:37:dd:bd:b8:57:
d7:21:27:b0:61:6f:de:80:34:6e:df:60:08:46:f8:
6e:45:1e:f1:13:63:f4:9f:cc:0e:59:8e:76:5a:77:
d4:12:b6:f2:ff:d5:ff:12:f3:35:86:12:10:0a:2f:
b1:bb:03:f2:b1:30:29:19:64:c8:ea:03:28:6d:7d:
43:2e:78:77:76:02:d5:dd:08:5a:0a:02:ff:e4:60:
d6:aa:5d:8a:e6:f0:5f:f6:d1:a4:c6:7c:e8:9a:3d:
95:9c:c8:10:4f:eb:4e:26:ff:c8:8b:8a:f8:b4:46:
98:0e:a1:e0:97:74:bb:93:31:72:6f:22:f3:7b:43:
51:eb:18:61:30:4b:c1:58:77:86:6a:1f:c5:0b:a3:
e5:24:94:f0:f9:ac:04:ee:9f:b4:00:d0:68:b3:65:
81:19:db:28:8a:34:18:0a:34:6e:42:90:de:f0:44:
7b:9e:ab:4e:a3:07:a0:58:5e:74:5a:a3:00:f5:1d:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:E4:C8:AA:D4:B6:F7:F6:9B:53:0B:A6:2A:DA:33:C2:17:03:1C
X509v3 Authority Key Identifier:
keyid:00:93:38:48:02:1D:38:88:86:0D:AD:F7:18:80:94:D7:92:AF:6A:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AJM4SAIdOIiGDa33GICU15KvauY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/86762b-aa61-484a-b159-97f39bb1332d/1/AJM4SAIdOIiGDa33GICU15KvauY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:79:ba:ed:7e:9a:19:eb:0b:9a:4d:ea:da:14:75:57:28:df:
fa:30:dc:a4:cb:f8:44:53:e9:69:07:32:0a:58:9c:4d:d5:39:
4b:8f:dc:0b:60:58:d3:36:b5:e1:a4:14:2e:7b:cc:6e:00:1b:
62:2f:65:99:b7:87:a0:84:07:fe:86:0a:1e:a1:95:d9:b2:03:
23:73:c2:76:46:5e:22:1b:3f:4e:46:13:48:43:2e:18:9b:0e:
74:41:5e:a7:19:ad:88:f3:86:16:63:30:65:17:e1:1f:52:2f:
87:87:a7:e9:0d:c4:78:25:bd:71:dc:a4:e9:3b:bb:3a:a1:38:
3a:c8:9e:44:39:61:d0:3b:da:17:c2:fa:bb:aa:55:d0:3b:fd:
e4:c2:b2:86:ec:dc:4d:9b:65:da:86:a7:07:47:cc:c3:93:97:
95:ca:0b:38:d7:ed:b3:56:b1:e2:02:88:82:bb:52:55:71:7d:
f9:48:0e:43:86:a3:00:4b:78:c7:5a:bc:ba:6b:8d:8c:9a:78:
c0:3e:4a:e7:f1:3e:47:dd:79:17:f6:b5:07:5e:d7:66:18:c7:
bd:2e:e2:49:5b:f7:f7:b8:01:22:65:95:c9:ae:2e:24:ff:5b:
44:46:13:10:b4:ae:ab:07:a9:c7:1b:77:76:15:c0:73:12:05:
cd:0f:28:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:21:25 2025 by rpki-client