Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: fW8srIrCtLsoNIJ86If+klXItRHgkv1MUdvjXvAjJ3w=
Subject key identifier: E7:22:7F:C7:FC:D8:18:C7:77:13:9F:A8:94:AB:33:C2:A1:F4:C5:64
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 01989712D4CBC8F9BB1B17709C866E3AEB7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 12C1
Signing time: Mon 11 Aug 2025 03:00:50 +0000
Manifest this update: Mon 11 Aug 2025 03:00:50 +0000
Manifest next update: Tue 12 Aug 2025 03:00:50 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: qlo9U43txsWLoMXOgqpcmeC8Ffu4PTcy+KZv/mMZdNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:12:d4:cb:c8:f9:bb:1b:17:70:9c:86:6e:3a:eb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Aug 11 03:00:50 2025 GMT
Not After : Aug 12 03:00:50 2025 GMT
Subject: CN=e7227fc7fcd818c777139fa894ab33c2a1f4c564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:20:59:63:a0:9d:28:9a:84:7b:6c:26:52:11:
0c:1e:8a:f0:94:bc:ea:65:1b:16:a8:92:35:d2:e0:
74:fb:9e:48:27:e0:5c:7d:7f:b2:17:f9:69:59:ea:
a2:f9:2f:6d:8b:c8:e9:37:ab:5c:cf:59:00:34:3b:
3a:57:17:fc:f0:23:ce:7a:bd:98:98:0a:90:a6:db:
e9:0f:3e:c3:2f:4b:d2:a3:d1:0a:91:e6:16:a7:b7:
f5:74:d4:47:ee:52:c1:1c:07:1e:ba:c8:5e:fd:6c:
1b:da:b6:c9:b5:c3:fa:d0:43:81:28:34:ac:3e:a3:
64:54:c9:f5:dd:9b:2d:c5:5f:9d:7a:3a:95:9d:a4:
ff:f3:4a:2c:2b:b2:27:e9:9a:bb:6a:a7:40:a3:72:
ae:91:a3:67:e7:8d:40:38:be:00:0a:78:96:bf:b4:
e0:f6:e9:50:a6:35:46:2f:ec:47:07:32:3c:08:9a:
aa:52:17:57:2d:3e:83:fe:3a:09:a3:b1:31:d5:06:
57:45:19:3a:0c:5e:7c:92:58:77:94:13:01:03:83:
a2:88:bc:51:e8:0d:d9:d9:bc:34:50:ed:89:db:80:
84:35:0a:30:59:43:76:05:28:45:c9:67:e3:a4:b4:
e0:61:65:87:01:fd:ce:64:c7:74:25:a5:81:6a:51:
ed:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:22:7F:C7:FC:D8:18:C7:77:13:9F:A8:94:AB:33:C2:A1:F4:C5:64
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:08:c9:d2:17:b5:3f:88:73:6a:90:de:a9:0f:c0:8f:6a:ce:
4c:86:0f:74:4d:2a:e4:64:67:88:69:80:6d:5c:9d:ff:07:aa:
9a:cb:af:5f:b3:5a:b0:03:11:a1:1b:c3:93:6d:29:5e:b6:69:
f5:32:0c:5f:09:68:0b:0f:09:c5:e5:02:39:aa:12:12:dd:0e:
d5:bb:3a:c8:f9:0e:17:1f:41:b3:9b:11:85:5c:1d:7c:f5:83:
29:64:db:c2:2f:fa:98:0d:18:17:54:5a:57:23:f6:0a:c9:c3:
75:48:7b:44:42:32:0d:00:63:76:09:2b:dd:98:f0:e4:6b:d2:
b6:06:c4:5c:1b:34:16:5c:8e:fd:7e:6f:05:31:c4:a5:b6:16:
13:16:30:0c:5a:3e:6c:49:29:1c:99:27:7d:a4:f8:61:b0:33:
24:a3:7e:65:9b:54:7a:a2:98:d4:46:19:56:32:b3:3b:bb:58:
f9:ea:31:70:d4:76:0a:77:cb:7c:1a:ef:31:b5:44:3c:fb:00:
ad:b4:48:0d:21:f6:e1:3c:23:a0:86:48:19:a6:7d:37:8b:65:
f6:32:0a:59:52:92:1a:f9:bd:4b:4e:ae:06:84:f8:e2:b5:f4:
2b:ce:b8:dd:1c:6b:04:93:a3:78:c0:40:ba:70:8a:ce:af:a6:
c4:ef:67:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 07:27:42 2025 by rpki-client