Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: 2qZlH3G4lXXRHao7bbqHDTyUjdm/YCojkNXLTbKBdyE=
Subject key identifier: 8F:F2:80:5A:45:49:8B:2D:3B:F7:1E:07:E5:7C:0C:C8:E0:73:CB:74
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 019A5074C65E085A1CEFE29818062B517ECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 030C
Signing time: Tue 04 Nov 2025 20:00:21 +0000
Manifest this update: Tue 04 Nov 2025 20:00:21 +0000
Manifest next update: Wed 05 Nov 2025 20:00:21 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: 1mbFOkWIX7HIHJza2iKEEG38aQoHA37OMG4xRLE4mXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 20:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:74:c6:5e:08:5a:1c:ef:e2:98:18:06:2b:51:7e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Nov 4 20:00:21 2025 GMT
Not After : Nov 5 20:00:21 2025 GMT
Subject: CN=8ff2805a45498b2d3bf71e07e57c0cc8e073cb74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:10:ad:3b:32:69:a7:27:6b:06:c1:5e:4f:14:
7f:8b:93:3c:f9:89:7b:76:a4:47:61:4f:2c:e2:8e:
e0:b7:d0:1b:e8:6b:fc:00:b4:2d:b2:1a:d7:b3:ad:
96:a8:08:50:e8:04:3b:b2:ed:e7:a8:94:eb:da:a5:
88:a6:61:9b:a6:ca:9c:a2:d2:09:1f:8f:bd:ef:f8:
21:02:74:5d:22:b5:b7:6a:8d:7e:8a:62:aa:87:fb:
4a:ac:8d:ba:59:c5:42:97:68:f5:17:cc:0a:30:e6:
1c:0e:55:88:c1:74:63:78:56:f2:c0:f2:04:73:42:
88:19:a2:77:bd:35:9f:3e:5e:9f:7f:f0:10:e9:1d:
40:e5:08:98:92:91:ee:b2:50:c8:9f:6e:92:b4:3c:
22:b5:fe:bd:f1:8a:15:de:c9:7a:41:ef:ac:f9:a6:
c4:a4:39:2f:50:5a:f0:a9:50:48:60:9e:5d:f2:30:
67:2d:ff:74:76:08:34:78:b8:65:57:0e:da:86:ef:
32:94:a4:d9:5f:f8:08:c4:55:4e:17:56:84:ce:63:
02:a2:02:af:a6:1f:dd:f3:c9:65:72:34:90:23:d2:
f7:3c:6e:40:0f:04:ee:bc:26:51:c0:79:79:76:d6:
5b:af:46:c0:e7:52:61:1f:23:16:1d:50:cb:71:bc:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:F2:80:5A:45:49:8B:2D:3B:F7:1E:07:E5:7C:0C:C8:E0:73:CB:74
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:77:54:c5:c9:c4:1e:cc:d9:23:21:79:99:09:eb:bc:5d:86:
ae:04:3a:7d:31:00:cc:eb:7e:83:36:16:af:c5:05:9a:fb:a0:
aa:1b:11:35:58:80:a0:14:7b:02:13:a3:b7:66:99:c8:29:9a:
a2:8e:c6:a3:cd:e1:c6:22:a0:79:3e:a5:8d:63:0c:97:b0:cb:
de:fd:cc:b8:24:a8:36:2e:d4:e9:29:e0:d1:7d:be:d9:c8:db:
9a:72:85:4b:44:d4:29:e6:56:5e:d5:12:9b:18:18:66:d9:d7:
52:d7:aa:81:ee:9b:c3:44:f4:9e:1c:0f:d0:83:2c:d6:5b:72:
08:23:ef:32:b7:29:e0:b0:a4:ac:7b:ae:f4:d2:68:97:36:06:
33:7f:4f:bd:05:aa:e9:8a:4e:11:a6:f0:55:f2:c8:fb:cb:0a:
b7:f5:5d:da:d3:61:f0:f7:2e:41:2c:98:fe:61:e0:be:76:92:
41:a4:99:25:1a:7b:3d:d0:fe:be:cd:99:77:1b:d2:8c:47:e4:
65:e6:4d:78:e0:4c:0c:52:2b:c1:4e:b7:40:c8:18:66:54:17:
a3:95:a5:ed:88:e3:d9:c5:d8:30:84:ce:73:af:4b:f1:29:28:
87:ee:44:e7:1a:f0:9e:6d:a4:7e:64:84:99:24:fb:dc:11:8e:
2b:d6:d9:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:28:47 2025 by rpki-client