Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: O7tRjMYnmuHmlOsohHgNuwAAwR2k5TXxwEnMhEfRFM4=
Subject key identifier: 06:59:EB:17:EB:CC:22:48:63:62:49:A9:51:94:7D:3F:E7:6C:21:6B
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 019A71B801CF7594EE9F73F666F2FD7BD977
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:01:15 +0000
Manifest this update: Tue 11 Nov 2025 07:01:15 +0000
Manifest next update: Wed 12 Nov 2025 07:01:15 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: lhpLf6BfAVBUrvwd+uNy1FhsgIdoc+Ej2sctsx3eZHU=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:01:cf:75:94:ee:9f:73:f6:66:f2:fd:7b:d9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Nov 11 07:01:15 2025 GMT
Not After : Nov 12 07:01:15 2025 GMT
Subject: CN=0659eb17ebcc2248636249a951947d3fe76c216b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:03:bf:65:e8:98:ea:1b:01:6e:49:fa:5a:
65:4f:71:84:4f:63:fd:62:53:64:c9:1e:08:3a:20:
4b:a5:96:33:03:32:37:a6:dc:0e:b9:47:f4:fd:70:
50:c2:29:71:f6:00:90:d0:97:7e:88:3e:72:3c:d4:
15:58:8a:33:5a:76:49:49:9f:ac:6c:46:25:e5:94:
2c:25:70:2b:8d:c1:b5:ef:38:65:72:5b:d5:59:d6:
d5:f6:bb:6f:e4:93:5d:56:5d:0d:bd:80:df:7e:1f:
f4:71:bb:70:cc:85:3a:79:85:f2:bb:ab:5d:3e:1d:
f7:6c:0e:86:fb:c0:c0:31:f7:bf:01:59:50:5a:e7:
93:ce:5c:a7:5c:96:34:50:f2:3e:3f:67:f8:06:9b:
7a:c5:54:1d:f4:12:49:d4:7e:9b:b7:dd:38:54:44:
ca:66:9d:f6:01:3a:79:62:ee:cb:f6:48:f5:f0:5a:
73:1e:88:8f:a2:90:32:47:04:e2:e3:bd:14:7d:ab:
5b:1c:03:24:b5:f7:f3:ad:37:9a:13:9d:50:7f:c6:
40:a8:5b:3c:a9:fa:0d:59:81:df:d5:e9:14:21:9e:
d4:f9:8a:34:95:08:a6:b5:eb:f1:4a:fb:89:02:c1:
8d:ac:d5:a9:fd:41:3d:82:c5:07:5d:56:97:33:9c:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:59:EB:17:EB:CC:22:48:63:62:49:A9:51:94:7D:3F:E7:6C:21:6B
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:ff:64:4e:ef:25:89:e9:24:95:d2:00:69:7e:84:bd:21:b1:
b9:01:f1:e3:05:3e:ff:39:4c:0b:a0:c3:6c:18:3a:45:09:01:
17:16:bf:b7:29:f7:ed:b2:d0:eb:4c:1e:b7:f5:67:93:37:64:
a1:ac:eb:bf:eb:8c:bb:f0:72:fc:9c:88:a4:41:a6:5d:1f:a3:
a2:bd:a7:e1:bb:b7:1c:85:70:07:81:64:51:d8:96:fb:33:e6:
e5:21:50:29:9d:8d:10:c2:26:ba:03:49:b4:45:89:3c:55:2d:
ec:1b:32:25:0e:5e:28:fa:f3:a2:78:7d:30:8a:49:b6:1d:cb:
f8:27:9c:e3:e1:21:2e:e1:54:60:ee:9e:4b:a1:5d:87:f8:e7:
d7:8e:e8:92:78:04:29:1a:42:19:8b:62:a0:c6:b6:43:03:d6:
43:c8:60:9e:da:4d:a0:ae:27:cb:93:19:2e:75:f2:5f:df:85:
ec:6a:65:93:49:24:d4:14:74:38:08:5a:56:26:df:c8:18:63:
3f:de:ec:4c:49:a2:fa:8b:5e:a5:f7:19:ce:18:9a:88:6e:49:
d3:2a:24:80:96:f4:ad:7c:9d:8d:82:cf:fd:0e:4b:15:41:92:
36:a4:ad:15:9e:bf:cf:0d:de:66:0d:5c:3c:8d:af:5e:5c:a5:
0c:f9:b4:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuAHPdZTun3P2ZvL9e9l3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjUxMTExMDcwMTE1WhcNMjUxMTEyMDcwMTE1WjAzMTEwLwYDVQQD
EygwNjU5ZWIxN2ViY2MyMjQ4NjM2MjQ5YTk1MTk0N2QzZmU3NmMyMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtADv2XomOobAW5J+lplT3GET2P9
YlNkyR4IOiBLpZYzAzI3ptwOuUf0/XBQwilx9gCQ0Jd+iD5yPNQVWIozWnZJSZ+s
bEYl5ZQsJXArjcG17zhlclvVWdbV9rtv5JNdVl0NvYDffh/0cbtwzIU6eYXyu6td
Ph33bA6G+8DAMfe/AVlQWueTzlynXJY0UPI+P2f4Bpt6xVQd9BJJ1H6bt904VETK
Zp32ATp5Yu7L9kj18FpzHoiPopAyRwTi470UfatbHAMktffzrTeaE51Qf8ZAqFs8
qfoNWYHf1ekUIZ7U+Yo0lQimtevxSvuJAsGNrNWp/UE9gsUHXVaXM5xhfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAZZ6xfrzCJIY2JJqVGUfT/nbCFrMB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlP9kTu8l
iekkldIAaX6EvSGxuQHx4wU+/zlMC6DDbBg6RQkBFxa/tyn37bLQ60wet/Vnkzdk
oazrv+uMu/By/JyIpEGmXR+jor2n4bu3HIVwB4FkUdiW+zPm5SFQKZ2NEMImugNJ
tEWJPFUt7BsyJQ5eKPrzonh9MIpJth3L+Cec4+EhLuFUYO6eS6Fdh/jn147okngE
KRpCGYtioMa2QwPWQ8hgntpNoK4ny5MZLnXyX9+F7Gplk0kk1BR0OAhaVibfyBhj
P97sTEmi+otepfcZzhiaiG5J0yokgJb0rXydjYLP/Q5LFUGSNqStFZ6/zw3eZg1c
PI2vXlylDPm0yA==
-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:11 2025 by rpki-client