Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
File: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft (raw, json)
Hash identifier: z1kO8kX4dZm+xNxzZHU7uZLSUi7IET36iNIxKLBnEFI=
Subject key identifier: 5A:6E:2E:42:71:8D:0C:66:62:04:0E:59:F5:F0:9C:DC:9E:DD:B9:B2
Authority key identifier: 6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
Certificate issuer: /CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Certificate serial: 0198A04E0A6B9859D33832AE1BB954C8F677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
Manifest number: 11ED
Signing time: Tue 12 Aug 2025 22:02:05 +0000
Manifest this update: Tue 12 Aug 2025 22:02:05 +0000
Manifest next update: Wed 13 Aug 2025 22:02:05 +0000
Files and hashes: 1: ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl (hash: nO/F9oW8fWPoWrFOKDcTxd8u5xvdVAbmuErQqnNhB0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:4e:0a:6b:98:59:d3:38:32:ae:1b:b9:54:c8:f6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a10b7c54e6f95b1d9b84aac3d9da742a0e02a6c
Validity
Not Before: Aug 12 22:02:05 2025 GMT
Not After : Aug 13 22:02:05 2025 GMT
Subject: CN=5a6e2e42718d0c6662040e59f5f09cdc9eddb9b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:91:51:79:6e:88:c8:1e:52:d6:c6:12:e0:d3:
bc:f2:f0:40:55:de:6c:30:12:68:4c:5e:41:a3:1d:
85:2c:95:2c:42:4b:53:af:c1:50:9d:ff:55:93:c2:
9f:24:36:bc:28:fb:ba:78:83:6b:d5:ad:66:87:68:
93:56:b4:37:eb:e4:36:7f:5f:d3:18:7f:cc:be:08:
cb:07:64:1a:af:93:a9:41:f3:42:b0:73:ea:7e:29:
38:09:c1:4f:a9:00:a8:85:b9:8e:c2:e8:7c:a5:b3:
86:19:2a:54:de:c6:6a:e2:5c:02:3c:27:33:f4:21:
64:1b:e3:08:c0:96:e0:f5:bd:04:ff:33:7f:dc:f8:
2b:da:dc:86:7d:c1:d1:15:84:89:e3:6e:2d:a8:91:
4d:7b:11:f7:10:de:6e:44:8a:da:ad:3a:03:bf:e6:
b1:c0:16:ce:ad:5a:63:f2:e9:f7:3b:84:63:f4:2c:
d1:10:67:08:2a:f9:78:1d:42:33:96:d6:96:ab:d0:
b8:13:14:06:0e:99:5d:97:85:a6:ae:fd:50:74:8c:
d9:3c:a7:61:4d:0b:88:7d:e3:7b:f3:3b:96:27:a1:
ee:a0:d2:d9:16:6b:54:8c:21:06:b2:ac:31:dd:48:
4b:6e:84:4c:50:9f:ce:f8:2c:a8:c4:72:b3:81:43:
1d:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6E:2E:42:71:8D:0C:66:62:04:0E:59:F5:F0:9C:DC:9E:DD:B9:B2
X509v3 Authority Key Identifier:
keyid:6A:10:B7:C5:4E:6F:95:B1:D9:B8:4A:AC:3D:9D:A7:42:A0:E0:2A:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/8a2e85-9480-41a2-a255-2dcad6ee71fb/1/ahC3xU5vlbHZuEqsPZ2nQqDgKmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:22:02:c0:6c:74:89:66:5f:7e:4d:71:e2:2c:80:19:1d:86:
c6:5a:06:6d:c9:24:99:46:3c:6e:3e:a6:26:dd:05:40:06:d3:
89:67:57:39:32:05:6e:bb:65:be:58:ac:78:ad:2d:ec:62:df:
c3:04:74:0d:d8:08:9f:13:8e:51:1a:46:c2:ae:42:ba:18:50:
52:6b:30:91:64:1b:2f:83:6e:fa:88:ce:54:eb:4a:80:00:be:
b8:bb:92:91:c3:7c:25:f2:a2:b5:61:29:1e:c0:90:f0:a8:2e:
db:a3:25:d1:65:0f:1d:6f:49:4f:ae:94:19:d2:31:6b:73:4e:
9e:32:3e:18:03:5e:d0:24:55:63:08:83:78:40:c5:5b:38:1e:
0d:76:1c:09:60:d0:1e:18:a7:8f:f8:b2:7d:1b:2e:2a:91:d7:
f4:1a:39:aa:9d:9b:4c:9b:4f:12:b8:57:83:ca:35:90:57:3a:
91:4e:02:ac:90:12:f6:bf:80:0f:d5:8a:46:e5:66:4a:57:a6:
db:f1:12:75:e9:fc:d3:72:72:78:5e:5c:40:23:6d:05:04:6c:
4c:14:6b:68:37:18:93:2c:29:6e:ed:af:2d:f1:28:57:09:f6:
56:1f:ed:de:54:f9:35:04:ec:35:7f:19:29:66:22:01:31:ea:
0c:b4:6d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:28:33 2025 by rpki-client