Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: 7WcIqRBQwP6WjuQW+JyfU15zgtnqGAJwRYPrJD92PB0=
Subject key identifier: 5C:8E:E9:E2:73:25:13:38:24:8E:14:76:74:9E:B5:BD:AA:C4:36:9F
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 01982C6F330B19A2F871C3ADA4B0E49A560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 15F2
Signing time: Mon 21 Jul 2025 10:02:21 +0000
Manifest this update: Mon 21 Jul 2025 10:02:21 +0000
Manifest next update: Tue 22 Jul 2025 10:02:21 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: 0G8R4aRTtQUC4NXQZNSJisVISUCmKs+qdXQk4vAnYlw=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 10:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2c:6f:33:0b:19:a2:f8:71:c3:ad:a4:b0:e4:9a:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Jul 21 10:02:21 2025 GMT
Not After : Jul 22 10:02:21 2025 GMT
Subject: CN=5c8ee9e273251338248e1476749eb5bdaac4369f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7f:4f:6b:46:29:6a:0a:42:d2:64:b4:9b:e8:
57:d4:b3:a5:7b:3d:e4:8b:6e:85:71:08:3d:22:cf:
a3:91:af:4e:69:41:fb:2d:20:2d:59:4b:0f:86:0d:
4c:97:d6:76:8f:8c:8a:83:9d:99:ad:db:15:f8:6e:
6f:e3:bf:46:70:13:43:1d:6f:fd:5a:3f:94:45:6d:
2a:66:46:bc:3a:71:55:6b:7e:f5:da:83:8c:bb:ef:
9e:cc:66:d8:4e:8a:59:bf:97:a6:6e:73:a1:75:15:
1d:bc:ca:6a:34:e6:84:bc:2f:37:5f:bf:8d:c0:80:
09:c4:2c:07:39:32:a4:1e:de:e8:fb:26:a9:a2:ad:
42:c2:7f:77:30:2a:f0:e3:73:70:36:09:91:25:1b:
57:7a:1d:27:af:66:2f:76:d3:0a:3a:30:80:ff:fe:
4f:34:f0:c9:01:7f:c1:a1:36:a0:35:cb:28:1d:f9:
02:2b:28:bb:52:dc:82:34:10:2f:7e:4a:55:3e:b9:
8e:8b:4f:fa:f4:93:80:25:4e:60:ed:5e:29:7b:58:
51:3b:4f:8d:4b:a5:d2:33:a2:b3:59:2f:20:47:fe:
fb:5b:2e:63:6a:2c:e7:79:3a:14:ec:f4:88:d6:84:
7b:2c:0a:d1:54:17:fc:e0:1c:b1:e5:df:56:15:69:
02:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:8E:E9:E2:73:25:13:38:24:8E:14:76:74:9E:B5:BD:AA:C4:36:9F
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1c:ae:cb:64:1c:39:2b:e5:30:dc:90:cd:28:29:4b:41:d9:
13:07:eb:b1:e9:9d:68:77:f6:3d:3c:5a:ef:89:ce:8d:d9:89:
87:14:f8:62:7d:83:95:2c:99:8b:d0:93:81:5d:f6:47:61:57:
19:57:58:a5:ca:c0:f6:04:9d:c5:b7:b3:21:31:01:0d:30:1b:
39:bc:3e:f1:c8:1e:ce:fd:bd:f0:16:59:81:bb:ba:a8:c7:b6:
88:0b:76:1e:19:ed:31:18:47:a4:cd:e8:6b:ca:03:9d:14:71:
8f:5d:84:53:47:53:68:4d:e5:b7:81:7d:ce:f3:45:05:f2:76:
2e:1e:0f:d8:c8:f4:dd:c8:50:67:98:fe:31:1e:54:f7:bc:e9:
81:9b:7c:2a:5a:50:bd:69:4d:76:03:41:88:ee:43:28:5a:da:
52:f2:c3:5d:07:98:37:4e:5f:29:c3:97:7f:85:35:4c:f4:55:
e6:e5:b0:ff:e9:2c:87:e5:83:3e:97:39:8f:f4:8b:82:0b:ce:
4b:8b:01:f4:ee:06:bf:0a:d9:d2:d4:38:a8:29:35:1c:d8:69:
39:8c:a9:e8:5e:1f:6d:07:de:6e:3b:82:b6:d5:06:43:8f:1e:
95:0f:bb:b4:82:68:8d:b8:cf:35:b6:4c:4e:18:85:a3:3d:ef:
c8:2a:34:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgsbzMLGaL4ccOtpLDkmlYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjUwNzIxMTAwMjIxWhcNMjUwNzIyMTAwMjIxWjAzMTEwLwYDVQQD
Eyg1YzhlZTllMjczMjUxMzM4MjQ4ZTE0NzY3NDllYjViZGFhYzQzNjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy39Pa0YpagpC0mS0m+hX1LOlez3k
i26FcQg9Is+jka9OaUH7LSAtWUsPhg1Ml9Z2j4yKg52ZrdsV+G5v479GcBNDHW/9
Wj+URW0qZka8OnFVa3712oOMu++ezGbYTopZv5embnOhdRUdvMpqNOaEvC83X7+N
wIAJxCwHOTKkHt7o+yapoq1Cwn93MCrw43NwNgmRJRtXeh0nr2YvdtMKOjCA//5P
NPDJAX/BoTagNcsoHfkCKyi7UtyCNBAvfkpVPrmOi0/69JOAJU5g7V4pe1hRO0+N
S6XSM6KzWS8gR/77Wy5jaizneToU7PSI1oR7LArRVBf84Byx5d9WFWkCjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFyO6eJzJRM4JI4UdnSetb2qxDafMB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhyuy2Qc
OSvlMNyQzSgpS0HZEwfrsemdaHf2PTxa74nOjdmJhxT4Yn2DlSyZi9CTgV32R2FX
GVdYpcrA9gSdxbezITEBDTAbObw+8cgezv298BZZgbu6qMe2iAt2HhntMRhHpM3o
a8oDnRRxj12EU0dTaE3lt4F9zvNFBfJ2Lh4P2Mj03chQZ5j+MR5U97zpgZt8KlpQ
vWlNdgNBiO5DKFraUvLDXQeYN05fKcOXf4U1TPRV5uWw/+ksh+WDPpc5j/SLggvO
S4sB9O4GvwrZ0tQ4qCk1HNhpOYyp6F4fbQfebjuCttUGQ48elQ+7tIJojbjPNbZM
ThiFoz3vyCo0rw==
-----END CERTIFICATE-----
Generated at Mon Jul 21 18:07:59 2025 by rpki-client