Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
File: AjmkC--TBDjVPNB_B_-RU-L7m-g.mft (raw, json)
Hash identifier: ZoKllh7IDpKOLGHyrHl392xlYD3e0pJOaBs24Z8EmuE=
Subject key identifier: 26:F1:1D:03:26:66:54:B6:4E:5E:7A:E3:C7:F6:F1:ED:7A:D9:94:AA
Authority key identifier: 02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
Certificate issuer: /CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Certificate serial: 0199CD59D3DD7CB80C2BDAB75493B9039886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
Manifest number: 16C9
Signing time: Fri 10 Oct 2025 09:00:40 +0000
Manifest this update: Fri 10 Oct 2025 09:00:40 +0000
Manifest next update: Sat 11 Oct 2025 09:00:40 +0000
Files and hashes: 1: AjmkC--TBDjVPNB_B_-RU-L7m-g.crl (hash: qmNmO8xRP5phgTG5uizXp9cVpDrnnL1aWpx7bSnRoRY=)
2: cHmzC5rP8FKDRkf607gnTwTvai4.roa (hash: bUuWEaYRtlG9aynz8XnAtZjAlJEDXY0U7CgyfMlbP0E=)
3: huVwMe1YB5JvpI0Vgwy_8-Td9Mk.roa (hash: Tvq1Uu9AQqWgL4a+ue7WTNhKnr/TALAFJs4aw/I8j3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Oct 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:cd:59:d3:dd:7c:b8:0c:2b:da:b7:54:93:b9:03:98:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239a40bef930438d53cd07f07ff9153e2fb9be8
Validity
Not Before: Oct 10 09:00:40 2025 GMT
Not After : Oct 11 09:00:40 2025 GMT
Subject: CN=26f11d03266654b64e5e7ae3c7f6f1ed7ad994aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:87:9a:22:c4:3d:40:04:ed:8d:0d:ad:95:
92:dc:c8:c5:06:de:6b:78:c9:6f:06:6c:28:e8:95:
00:61:3f:34:34:e2:ee:80:64:11:09:65:11:b0:2d:
30:86:41:1c:d6:31:d9:4d:3c:82:96:82:62:78:b5:
8b:22:e7:a0:19:28:f8:2c:db:ff:0e:91:3a:67:13:
c0:8f:fa:5b:70:f6:51:d6:fb:ee:f1:52:71:9e:21:
da:0e:63:0b:1d:91:3b:f4:3a:35:8c:e7:1c:21:e2:
9c:73:21:4a:da:b5:ab:e3:03:bf:01:d4:e1:8b:06:
28:ab:f5:9a:67:50:d5:58:85:97:c1:35:34:cb:79:
e4:d3:05:f5:cf:f7:77:d7:09:8f:d5:bc:af:0b:fa:
47:c5:e6:cb:9b:2f:65:e4:82:23:42:ac:fa:6c:50:
37:e8:2a:b5:a3:f5:37:fc:c5:7b:68:d1:8b:1e:f1:
14:7e:d0:d4:d3:aa:6f:b3:03:a6:de:1c:ea:8c:4c:
a8:f4:6b:38:a6:12:ef:ad:e1:b2:bd:cc:2c:3f:db:
93:3b:6e:d0:6d:99:83:fa:9c:24:61:64:e2:01:ce:
7a:ac:7d:ef:d5:06:4c:69:2c:eb:51:3d:c1:e5:f2:
ec:44:c3:3d:26:c6:1f:a3:96:8f:8e:e5:4e:03:3a:
15:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:F1:1D:03:26:66:54:B6:4E:5E:7A:E3:C7:F6:F1:ED:7A:D9:94:AA
X509v3 Authority Key Identifier:
keyid:02:39:A4:0B:EF:93:04:38:D5:3C:D0:7F:07:FF:91:53:E2:FB:9B:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmkC--TBDjVPNB_B_-RU-L7m-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/2fcecd-1b6c-4ae9-9d36-6d3812aa5eb5/1/AjmkC--TBDjVPNB_B_-RU-L7m-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1f:5c:87:51:8f:69:81:68:ea:7e:94:72:dc:5a:0d:ec:b7:
c5:a9:3e:c0:2b:31:18:22:77:e4:4e:0d:89:27:34:0c:f6:29:
e4:03:5f:82:a1:c1:cb:15:91:2c:ec:a7:d6:dc:10:d0:e5:53:
8b:a2:9e:04:63:7f:8f:ac:56:1e:19:62:4d:d6:5d:98:c4:d3:
b4:1b:cd:aa:f6:24:a1:2d:d0:b6:0f:16:0f:ee:04:93:eb:a8:
5b:82:ce:31:db:3c:7a:2f:9a:92:1c:09:f2:0f:22:56:bf:2d:
4e:19:f6:f0:bd:c5:d7:19:02:13:d0:b1:4e:33:ab:20:8a:ed:
23:bd:b1:72:7f:39:4b:06:05:db:78:f2:71:c1:07:2a:7f:fa:
e9:88:e2:48:61:2a:38:9e:43:0b:75:f7:fc:0d:cc:94:0e:b6:
1d:b8:74:54:e9:5b:c8:2f:4c:73:4c:78:56:e2:d9:a9:94:f0:
d9:e8:b2:f8:b3:b2:4d:05:c6:59:0b:9f:41:c3:f7:40:d7:07:
2e:a6:54:d6:bc:05:2d:67:aa:fd:29:dc:e5:04:06:a8:3b:1d:
d1:47:84:62:65:56:87:ba:3b:e3:5c:17:82:9b:5f:75:3b:b7:
3d:83:47:7c:1b:3c:d4:40:83:1d:76:7a:d9:cb:f1:ad:27:78:
c1:e2:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 10 14:09:55 2025 by rpki-client