Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: 8QYv/7NVKT2sLpuR5lkLd8c/u07MLGimoI1L1t9eJLQ=
Subject key identifier: 81:9C:73:D2:E8:BC:AC:F3:81:F4:A0:F3:7E:CC:8B:4F:21:3A:29:B8
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 019849656ABADD76FEC517CA318BDAC25066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 01:00:39 +0000
Manifest this update: Sun 27 Jul 2025 01:00:39 +0000
Manifest next update: Mon 28 Jul 2025 01:00:39 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: gr5gTjZDv2kP2a01X8bGKNZsgYnhu/CA4c+LQ9qSauc=)
2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:6a:ba:dd:76:fe:c5:17:ca:31:8b:da:c2:50:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Jul 27 01:00:39 2025 GMT
Not After : Jul 28 01:00:39 2025 GMT
Subject: CN=819c73d2e8bcacf381f4a0f37ecc8b4f213a29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:85:67:a0:d0:71:b7:0b:5f:8e:6e:e4:af:a1:
55:f9:70:f7:b2:aa:89:8b:eb:8c:86:74:53:fe:73:
cb:d6:26:8a:38:f5:68:ed:1c:9f:c4:ef:79:4e:5e:
ae:0d:76:34:01:c5:bd:96:73:01:c5:3a:68:68:9c:
15:58:2b:5c:a1:69:b6:95:b2:ea:8e:d2:01:be:a4:
b0:6f:76:dc:61:85:80:ac:79:46:c7:c9:74:9a:ed:
01:6d:2d:0a:80:ef:7e:a8:79:f3:5b:e2:d5:da:08:
c6:e2:ab:dc:31:35:ca:7b:43:b2:8b:47:23:12:1e:
06:ee:56:37:eb:72:ff:8e:0c:c6:39:ef:1d:ad:f9:
8f:69:74:57:f5:12:59:f1:65:fe:09:1e:e2:f0:01:
8f:cb:27:3d:9f:58:4e:f8:8b:a8:19:80:db:74:38:
15:18:d6:55:ec:31:74:3e:af:ca:32:45:b3:17:03:
bb:09:6d:a4:75:1f:6c:6e:40:73:d6:58:a9:6f:a3:
73:df:57:4d:5a:43:fb:fa:98:09:f0:2d:29:d4:1c:
11:a6:6f:fc:e9:38:62:a9:19:04:36:fb:61:65:dc:
a7:9c:5f:f5:02:cc:cb:46:ba:13:16:77:51:88:be:
0a:68:85:7b:3f:32:f6:32:3f:2d:58:a5:02:54:cd:
fc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:9C:73:D2:E8:BC:AC:F3:81:F4:A0:F3:7E:CC:8B:4F:21:3A:29:B8
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:5a:65:86:cc:03:f5:f7:e8:35:81:93:51:13:e3:a8:56:38:
9a:70:a5:ad:e2:4c:1e:4a:b2:99:40:54:ca:56:57:17:21:c8:
4a:4c:a5:6b:8c:ea:a1:95:f7:f4:3e:5c:c9:80:16:07:38:de:
e1:cc:68:3b:81:d1:fe:d0:7c:a6:74:f9:73:a9:e1:78:21:34:
d9:6b:33:80:de:67:01:de:5a:cc:dc:b1:37:b7:56:33:2d:72:
a6:3e:2c:f6:a2:34:46:2c:07:58:83:84:bb:e6:ae:de:20:a5:
2b:df:5b:df:b8:f0:f2:63:86:39:28:d4:b1:74:88:78:44:40:
e9:ab:61:e4:04:b0:e2:d9:7f:f7:9b:72:e4:78:f8:95:54:c8:
07:3a:6c:87:d5:12:87:43:5c:b0:8d:d7:49:4f:cd:e6:5c:6f:
3f:cb:5c:48:6e:3f:ff:b6:0f:c9:fa:c9:61:1b:48:df:b7:1a:
4e:1a:cc:34:5b:83:2f:66:33:8d:0d:8e:4d:51:c3:be:f7:bb:
7f:04:bb:c9:23:22:08:26:86:f4:4a:15:79:db:de:88:cb:c7:
9f:1b:04:fd:aa:2d:60:e1:46:ba:98:84:17:38:75:3d:85:c5:
67:39:fb:90:70:f5:0d:62:2d:14:83:82:af:41:39:2f:46:f0:
45:b2:83:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:50:41 2025 by rpki-client