Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: m/pEszpB3oL51Xw8grQisxtsedY+YfyFiGqVuQ7Ka7Y=
Subject key identifier: C8:08:75:8D:8D:CF:8A:4A:B7:7D:F6:5C:82:0A:EF:FB:BD:67:25:2A
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0196B3A1AFF168A1B600519F17796E5F4A9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 152F
Signing time: Fri 09 May 2025 06:00:40 +0000
Manifest this update: Fri 09 May 2025 06:00:40 +0000
Manifest next update: Sat 10 May 2025 06:00:40 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: 7Lss3fCpbbiFDb7kmB+XwnBhicPOGzIZA3I1EQWSl6w=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b3:a1:af:f1:68:a1:b6:00:51:9f:17:79:6e:5f:4a:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: May 9 06:00:40 2025 GMT
Not After : May 10 06:00:40 2025 GMT
Subject: CN=c808758d8dcf8a4ab77df65c820aeffbbd67252a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:66:35:cb:aa:c1:d2:bc:9b:49:5d:bc:52:
5a:d2:9b:0f:58:7d:a0:38:65:95:4f:eb:d9:ff:87:
16:33:39:db:1d:9f:4f:fa:42:54:ea:e4:86:de:11:
2b:84:92:56:d5:24:f8:93:a3:03:a0:9d:e5:f8:95:
bb:ae:ea:87:aa:48:1d:5b:f9:1a:85:25:1e:de:f4:
2a:43:59:77:83:61:0f:a4:dc:69:8c:ab:fc:1b:38:
ed:7a:18:52:5b:58:82:b7:33:e5:76:60:b4:12:84:
32:d8:88:5b:89:8a:6f:db:96:99:6d:3f:46:91:3a:
dc:2e:c5:e3:c0:6d:e8:bd:47:c4:41:44:f3:63:e6:
b9:2a:69:60:27:78:d8:47:13:da:65:53:e8:90:ec:
35:61:67:b8:64:dc:db:af:14:2c:e4:4e:af:ca:cd:
4c:f0:57:b1:f0:11:c0:9f:4e:53:b5:28:73:49:67:
01:88:60:8e:e9:7a:de:43:b2:68:1b:c7:24:3d:4f:
d2:24:d8:ed:16:cc:1c:a7:dd:47:13:43:96:45:19:
d2:52:78:7f:63:a7:9f:a9:ad:dc:bf:b5:b7:81:8b:
3a:49:3a:88:cd:8e:62:d5:a8:86:67:98:6e:51:01:
01:a6:8a:0c:e5:ea:c1:be:37:60:d7:5c:23:ed:ec:
db:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:08:75:8D:8D:CF:8A:4A:B7:7D:F6:5C:82:0A:EF:FB:BD:67:25:2A
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:57:9f:cd:17:83:7d:ab:69:56:26:c5:cf:a2:62:c1:63:b7:
f1:6e:90:3f:85:4f:d6:17:b4:a7:f2:7b:b0:db:ce:e8:db:03:
c7:42:4f:45:3e:f8:16:fb:a9:71:52:18:d8:31:7b:d8:44:49:
1b:4e:06:ac:cd:58:d6:53:25:7a:6e:d5:22:ed:2e:a3:60:f0:
0c:b8:cc:1f:90:63:31:86:33:ac:82:62:ef:67:16:68:41:76:
4a:ef:11:02:ea:a4:13:31:13:af:8a:da:9b:2f:79:fc:ed:54:
d9:82:7e:1e:13:34:3e:79:7f:14:7d:03:f6:44:ab:d7:ca:93:
e8:8b:05:06:54:db:dc:d7:ee:09:7d:da:9c:e7:e9:c5:07:f8:
26:f2:c5:4c:1e:b3:36:99:b8:ae:7a:91:6b:e4:79:92:83:11:
6d:c0:7a:20:ce:ea:74:dc:35:ed:b0:4d:76:6c:4f:90:3c:d2:
92:03:90:4b:d8:f2:f0:29:cb:c6:dd:4d:02:55:88:e3:02:06:
c4:78:b1:da:1f:45:51:e5:fa:4d:a8:36:9f:21:45:62:e3:42:
08:cc:5b:ce:2f:e4:1f:87:75:ac:82:fd:6c:ec:28:d9:ca:08:
dd:59:8f:65:27:bb:a6:1f:17:14:54:1e:51:95:52:0a:65:d0:
87:7c:d4:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZazoa/xaKG2AFGfF3luX0qcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMzlhZTExMTg4MDg4NTQ3ZWIzZTUyMzQ4M2NjYTk4NTU2
YzExNWIwHhcNMjUwNTA5MDYwMDQwWhcNMjUwNTEwMDYwMDQwWjAzMTEwLwYDVQQD
EyhjODA4NzU4ZDhkY2Y4YTRhYjc3ZGY2NWM4MjBhZWZmYmJkNjcyNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukhmNcuqwdK8m0ldvFJa0psPWH2g
OGWVT+vZ/4cWMznbHZ9P+kJU6uSG3hErhJJW1ST4k6MDoJ3l+JW7ruqHqkgdW/ka
hSUe3vQqQ1l3g2EPpNxpjKv8GzjtehhSW1iCtzPldmC0EoQy2IhbiYpv25aZbT9G
kTrcLsXjwG3ovUfEQUTzY+a5KmlgJ3jYRxPaZVPokOw1YWe4ZNzbrxQs5E6vys1M
8Fex8BHAn05TtShzSWcBiGCO6XreQ7JoG8ckPU/SJNjtFswcp91HE0OWRRnSUnh/
Y6efqa3cv7W3gYs6STqIzY5i1aiGZ5huUQEBpooM5erBvjdg11wj7ezbSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMgIdY2Nz4pKt332XIIK7/u9ZyUqMB8GA1UdIwQY
MBaAFAI5rhEYgIhUfrPlI0g8yphVbBFbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMt
NjcyODBjOGJiYWI4LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS8wMzY0MzQtZTk1ZS00NDI2LThkMWMtNjcyODBjOGJiYWI4
LzEvQWptdUVSaUFpRlItcy1ValNEekttRlZzRVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOVefzReD
fatpVibFz6JiwWO38W6QP4VP1he0p/J7sNvO6NsDx0JPRT74FvupcVIY2DF72ERJ
G04GrM1Y1lMlem7VIu0uo2DwDLjMH5BjMYYzrIJi72cWaEF2Su8RAuqkEzETr4ra
my95/O1U2YJ+HhM0Pnl/FH0D9kSr18qT6IsFBlTb3NfuCX3anOfpxQf4JvLFTB6z
Npm4rnqRa+R5koMRbcB6IM7qdNw17bBNdmxPkDzSkgOQS9jy8CnLxt1NAlWI4wIG
xHix2h9FUeX6Tag2nyFFYuNCCMxbzi/kH4d1rIL9bOwo2coI3VmPZSe7ph8XFFQe
UZVSCmXQh3zUZQ==
-----END CERTIFICATE-----
Generated at Fri May 9 12:44:04 2025 by rpki-client