Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: rkI1NBO28qqcHAVEjaKbEhJWspfQ3adruCPXeSuAb6k=
Subject key identifier: 26:8D:F1:6F:CB:5B:67:07:13:81:71:41:70:76:EA:33:06:A1:96:6A
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 01987B9BE18B871E27730A16F58287AD479F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: CF
Signing time: Tue 05 Aug 2025 19:01:10 +0000
Manifest this update: Tue 05 Aug 2025 19:01:10 +0000
Manifest next update: Wed 06 Aug 2025 19:01:10 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: 3Ra29MxNC+3esg3aCLpT3PByAtzRx3J2tHJ7/LUQ9ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 17:44:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9b:e1:8b:87:1e:27:73:0a:16:f5:82:87:ad:47:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Aug 5 19:01:10 2025 GMT
Not After : Aug 6 19:01:10 2025 GMT
Subject: CN=268df16fcb5b6707138171417076ea3306a1966a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:5f:d3:fe:10:65:c9:53:2d:9a:2a:05:42:b7:
c2:d0:b0:b6:cb:5b:42:f8:ca:67:e3:f6:bf:af:4a:
09:67:0e:71:60:d9:cb:28:15:fa:39:76:ca:c5:7f:
af:d2:f1:a9:03:e5:c8:b4:f9:e8:5d:6a:c6:00:95:
2e:48:5d:02:ca:ae:3c:15:ca:aa:a8:80:b6:d0:aa:
40:ca:45:e1:4e:55:50:75:40:f8:b8:b1:d8:2e:51:
09:d3:ed:06:81:e2:32:38:4a:52:16:b6:98:f8:60:
00:ca:0e:28:2b:08:cb:ac:02:85:49:89:9d:f2:b7:
72:35:d4:bd:06:c6:ba:b8:1b:f6:e7:ae:4f:f6:48:
b6:16:e7:81:dd:ed:56:4b:b2:2b:8d:5a:a1:ad:e0:
30:e7:fe:c2:e9:17:e3:24:c4:95:bd:ed:0e:fa:fb:
4e:ec:43:14:37:a8:f3:29:bb:f8:4d:44:90:44:d3:
09:5a:68:e4:30:32:cd:3c:61:90:2f:9e:d9:c5:46:
5d:08:eb:fa:c3:2a:e9:50:a5:55:b5:5b:d7:0b:20:
c5:47:c5:c4:ad:7a:24:f3:46:f5:83:ce:1c:5d:ea:
88:70:67:6a:4f:96:2b:a7:e2:29:a8:6c:35:c4:dd:
85:96:fc:4c:0c:cf:55:cb:c4:8b:23:ea:1f:ca:5b:
15:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8D:F1:6F:CB:5B:67:07:13:81:71:41:70:76:EA:33:06:A1:96:6A
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:dc:98:d6:51:d6:38:0f:ce:77:a6:3f:76:90:24:b6:b7:c6:
4e:aa:99:27:52:31:80:33:9e:09:85:39:e0:27:e3:ba:2e:af:
de:60:dd:e5:23:4d:c1:7d:c5:f0:8e:51:bb:74:14:00:d1:8f:
28:53:7c:3c:64:ed:2f:15:63:11:f8:0c:d6:e4:6b:02:d9:26:
63:10:05:5b:c8:5e:36:9c:d2:32:db:5e:da:3d:82:28:9c:14:
80:6b:8a:af:6d:aa:23:55:4d:0f:6d:16:1b:83:83:73:c5:d6:
3e:67:7f:01:f4:81:59:e3:cf:d9:37:61:11:64:87:71:ab:22:
c4:06:4f:68:69:79:09:35:3a:69:ec:e5:34:af:7d:05:de:9b:
19:3d:b9:f6:46:ae:2d:c1:c1:9d:7b:2a:83:a5:a0:3a:c8:6e:
6d:79:34:ff:d2:31:2f:d3:38:50:fd:90:3c:ff:73:15:37:b9:
53:ff:f5:01:80:f6:ec:ed:74:47:a9:67:80:c2:6a:1f:15:7d:
ee:2c:a8:f9:f0:a3:80:e8:0b:7b:30:f9:26:b6:7c:9f:4c:a6:
bf:17:a3:17:2a:c3:3d:d0:7e:55:5f:72:8d:f3:7f:d3:f1:7c:
f4:4a:f3:90:5e:28:c3:77:33:00:d9:06:10:9d:3d:fe:42:a4:
4e:36:75:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 00:46:22 2025 by rpki-client