Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: JSI/INroXk7Rx65pIBfDyrEWbZgc8L6Jp2s/cl99avk=
Subject key identifier: 82:3F:FB:BC:CD:63:E1:A8:E1:C0:D9:DE:38:D4:D5:F8:21:D8:18:40
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 019772D1A3488D2A3AE88C4E553029BBC2E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: 46
Signing time: Sun 15 Jun 2025 09:00:30 +0000
Manifest this update: Sun 15 Jun 2025 09:00:30 +0000
Manifest next update: Mon 16 Jun 2025 09:00:30 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: ainNuM4JB1ovusAW6GfEY0g81dYmNUelAaBUn7QC83I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:d1:a3:48:8d:2a:3a:e8:8c:4e:55:30:29:bb:c2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Jun 15 09:00:30 2025 GMT
Not After : Jun 16 09:00:30 2025 GMT
Subject: CN=823ffbbccd63e1a8e1c0d9de38d4d5f821d81840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:2a:09:2b:d1:51:86:de:af:4e:39:5c:9f:
fb:30:4d:53:3c:41:6d:b9:99:a9:e7:3a:96:0a:69:
70:eb:8c:b0:15:14:eb:6e:4d:a7:a1:47:6b:fe:92:
26:af:81:ba:95:21:e8:ab:e1:0e:b5:89:ab:82:ac:
4c:d0:4a:2c:7b:07:2d:d8:25:04:e6:5b:da:dc:f4:
8e:eb:a3:6a:ca:21:69:35:61:e0:ef:a3:74:a3:9d:
84:f6:2c:d2:49:c9:df:8e:47:dc:aa:a9:a1:da:2c:
0f:86:df:e5:e2:51:64:21:d5:6c:9b:62:35:36:b4:
e7:08:2d:9d:ca:ec:dd:dc:f9:b8:92:52:63:3e:85:
ed:e4:f1:ce:40:4f:2c:39:87:50:02:34:b6:4b:49:
c1:0c:af:42:44:5e:c5:ba:6e:7c:46:52:49:c3:e1:
4e:22:26:c3:ed:c1:be:22:5d:ce:c0:1d:0d:23:23:
c0:82:f6:de:a3:e7:ae:56:be:6b:9a:bd:dc:87:a3:
84:02:31:ba:da:05:fc:15:f5:a1:ba:2f:43:2a:b0:
7f:88:9c:58:02:30:64:3f:cd:70:71:c1:3b:80:75:
00:cc:e5:2b:1d:8f:71:49:f6:73:57:f1:e7:36:8f:
65:a0:65:2d:28:88:f1:78:20:0e:a6:7a:ad:82:61:
69:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:3F:FB:BC:CD:63:E1:A8:E1:C0:D9:DE:38:D4:D5:F8:21:D8:18:40
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:1d:f2:de:0d:d5:61:6a:a9:94:dd:58:84:58:9d:bf:b5:
81:54:2c:17:30:a2:02:7e:24:e7:c3:74:4b:15:5a:92:b8:96:
2c:53:69:e4:ee:6c:f1:17:e1:3f:af:20:80:bc:a8:87:d1:92:
e5:e9:22:ec:d2:18:74:62:58:e5:49:62:e7:b4:9f:43:ef:40:
0f:d9:80:a1:e8:60:14:64:ae:b8:63:ac:d9:5d:00:88:a1:e2:
b6:9c:82:b8:04:4a:f2:e5:45:c7:68:74:40:f3:10:da:dd:ae:
99:a1:d1:78:eb:d3:d8:ee:c4:19:b7:36:ac:13:4a:a5:74:53:
b1:85:c2:44:68:1e:28:72:4e:be:a0:86:50:3d:de:35:e8:fd:
10:33:eb:cf:48:c8:07:ad:a2:79:5d:0f:5d:f1:96:c6:87:cb:
4d:09:fe:54:46:e3:f8:29:77:9a:9f:88:a8:4b:93:2a:47:91:
89:29:da:82:b0:fd:b8:82:17:70:bf:16:b5:06:9e:f1:1a:bd:
a8:a9:27:d9:e1:03:04:33:2e:d4:95:28:54:f4:10:a7:48:cd:
9f:1e:ad:4e:b1:87:a3:e1:e0:f6:51:5e:0a:70:ec:c0:0e:e7:
e2:73:cd:13:fa:9f:94:ec:2b:ad:aa:e8:30:81:43:2f:c7:42:
f8:1e:e9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:59:15 2025 by rpki-client