Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
File: AjmuERiAiFR-s-UjSDzKmFVsEVs.mft (raw, json)
Hash identifier: DlMZDC37gMXIyF58Sqno7i/7Vt/j5GshlBsBX+rfP00=
Subject key identifier: 6B:5F:C9:70:8A:46:9F:DC:14:2A:DE:C1:D4:3F:14:2B:53:8F:26:4F
Authority key identifier: 02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
Certificate issuer: /CN=0239ae11188088547eb3e523483cca98556c115b
Certificate serial: 0199277D1103FA47158BFD602BBBF7CCA8F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
Manifest number: 1674
Signing time: Mon 08 Sep 2025 04:02:11 +0000
Manifest this update: Mon 08 Sep 2025 04:02:11 +0000
Manifest next update: Tue 09 Sep 2025 04:02:11 +0000
Files and hashes: 1: AjmuERiAiFR-s-UjSDzKmFVsEVs.crl (hash: 5W7b7caQkbGBhdkzY6s0wB1RdBvDb6F5sJgpdG6MxAc=)
2: Oh-npebKNll7vvyYtRrj-cg_Nd4.roa (hash: VvG7KPmbGgCRtlU1cK6JWKQbIKFRicXjsb5mCW827Cs=)
3: dUHtzdOigEdCMJb0gXsKu7_CR9E.roa (hash: qHPvPZRfGsBNL2Al0WMsavpV3isIJ/xgOqxOV/q3Zgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 01:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:27:7d:11:03:fa:47:15:8b:fd:60:2b:bb:f7:cc:a8:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0239ae11188088547eb3e523483cca98556c115b
Validity
Not Before: Sep 8 04:02:11 2025 GMT
Not After : Sep 9 04:02:11 2025 GMT
Subject: CN=6b5fc9708a469fdc142adec1d43f142b538f264f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:91:eb:8e:fc:5e:ee:7c:82:b4:76:8f:48:
6b:e0:a1:b4:fa:d9:79:07:15:cb:37:3b:ab:2b:60:
c0:5e:b4:a3:3e:d5:bd:49:3c:0f:08:09:55:f4:38:
d4:f3:4c:d6:b0:6d:a3:21:d6:6b:32:53:58:7a:9b:
1b:59:cc:fa:d0:7f:99:9a:08:87:90:7d:88:91:a5:
ed:16:37:ff:a1:ae:ee:f1:5e:1c:4f:ab:24:70:b5:
42:72:2f:b0:13:ea:fc:6c:78:aa:20:2e:6a:8e:20:
b7:9f:27:28:c2:f8:ac:14:71:f6:d2:eb:a1:a4:ec:
29:94:fd:ba:c4:51:65:23:d8:8e:88:e6:d4:58:b0:
ea:86:ac:49:38:94:32:1c:b7:f6:57:ec:70:e0:52:
4c:a0:6f:0a:9a:72:58:31:58:ad:ae:8f:9f:75:0b:
ac:c8:49:cc:a8:36:e7:95:34:1a:92:31:01:06:e7:
65:40:37:de:a8:40:f6:ff:f0:3a:7e:1d:b5:b7:76:
28:f4:97:f7:43:cd:1e:29:57:f8:79:c9:3d:3f:87:
f1:f3:c1:1f:68:ca:28:ff:57:84:70:e4:15:86:93:
7b:8b:06:ec:9e:e3:64:fa:00:26:9a:0b:7d:01:6c:
0f:48:c5:48:3e:34:12:ba:11:d7:1b:89:2f:ee:65:
b2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:5F:C9:70:8A:46:9F:DC:14:2A:DE:C1:D4:3F:14:2B:53:8F:26:4F
X509v3 Authority Key Identifier:
keyid:02:39:AE:11:18:80:88:54:7E:B3:E5:23:48:3C:CA:98:55:6C:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjmuERiAiFR-s-UjSDzKmFVsEVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/036434-e95e-4426-8d1c-67280c8bbab8/1/AjmuERiAiFR-s-UjSDzKmFVsEVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2d:72:dd:8b:76:e2:8e:80:1d:59:3c:84:df:e7:7e:54:fc:
85:47:07:40:30:3a:71:d3:c2:ac:9c:17:90:1d:e1:2f:a6:e6:
56:2a:01:8c:5a:cc:4c:02:df:6f:bb:5d:43:2f:bc:33:c0:6e:
3d:4d:b6:fc:5d:9a:76:68:0c:fd:49:54:11:a4:0b:71:82:ea:
cd:bc:e8:1b:a0:70:7b:fb:0a:82:1d:d5:12:c3:e8:6e:d8:83:
50:55:6b:92:6f:12:47:c6:9e:72:32:78:8c:57:34:41:8e:0c:
4a:10:c6:b5:62:d3:5e:ae:88:2f:2e:7e:ab:23:0b:05:9f:00:
04:af:a1:78:9a:7e:0b:58:ad:1a:b7:6f:e4:fe:12:8a:26:d9:
50:b7:20:15:36:be:b2:a8:b6:8c:6f:d9:0b:06:5e:01:d6:27:
31:71:a8:45:42:46:c8:00:bc:fa:b1:92:a3:52:c3:0e:cb:40:
1e:95:2a:39:7a:6e:b9:47:5c:90:f2:30:81:8c:fb:11:b9:98:
7a:ae:a1:89:07:b1:f1:58:4c:58:8f:a3:72:21:dc:c8:23:7d:
dd:c6:af:80:8b:57:c4:aa:f0:a2:b1:7b:cf:7c:16:1b:bc:d6:
46:af:b2:84:27:00:81:5f:4f:35:f3:be:c1:af:a8:a4:d2:65:
f1:9f:66:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 08:43:36 2025 by rpki-client