Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: UXNrTTf5eMfg+BYZSeyqDd8fpBQqvMaQpd37MJJvQjY=
Subject key identifier: 93:E3:9F:58:E4:DB:AE:2C:94:3F:8C:EE:86:36:97:6E:81:07:BA:5C
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 01989FDEEDB3B739542D840B8B113C00FAB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 022C
Signing time: Tue 12 Aug 2025 20:00:43 +0000
Manifest this update: Tue 12 Aug 2025 20:00:43 +0000
Manifest next update: Wed 13 Aug 2025 20:00:43 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: 3Txbekq24pfogyOID62hGzhhnxJs0L6SFxLTK5AaXII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 20:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:de:ed:b3:b7:39:54:2d:84:0b:8b:11:3c:00:fa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Aug 12 20:00:43 2025 GMT
Not After : Aug 13 20:00:43 2025 GMT
Subject: CN=93e39f58e4dbae2c943f8cee8636976e8107ba5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ee:0b:cb:ec:13:ba:cc:c0:af:de:45:e2:96:
89:8e:cc:1c:86:ab:88:a5:3f:74:6c:14:18:66:92:
64:58:a5:c0:c4:77:35:19:7c:2a:6a:bd:51:9e:e9:
64:e6:2f:11:f9:18:28:c9:f9:d2:a7:64:8d:f2:3d:
e1:1c:95:bd:df:ff:70:ac:09:56:ee:44:b5:09:4d:
11:dc:8e:c8:30:79:f5:19:99:8d:13:cc:87:01:b4:
69:4a:c7:97:e4:b2:b4:ae:0b:40:3e:7a:f3:21:d2:
6b:97:84:73:60:67:ed:35:e8:4b:6c:e8:ed:93:57:
66:47:54:d1:19:a2:2f:15:c5:70:02:96:6c:a0:3f:
b2:46:44:10:45:2f:c9:16:ed:91:33:90:50:74:eb:
42:7c:38:30:59:43:f5:89:33:9c:ac:7d:04:f1:df:
e1:62:0d:1a:63:9a:8c:0c:3e:ae:f5:91:65:46:51:
e2:31:9b:2e:df:60:4e:55:e4:f7:25:70:e3:33:9c:
7c:40:3b:8e:4f:77:8e:3e:35:ad:b2:54:1d:fa:9e:
84:a9:63:b3:3a:91:41:01:bd:bd:a6:f5:de:c7:7a:
d4:68:41:f7:09:29:31:ae:63:d3:90:c8:6a:35:a7:
8d:3b:a1:72:24:db:b1:8c:95:13:9f:13:bf:b8:bb:
6a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E3:9F:58:E4:DB:AE:2C:94:3F:8C:EE:86:36:97:6E:81:07:BA:5C
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:3d:0e:c9:55:2e:fd:ed:9f:90:bc:03:ad:33:87:ad:54:b2:
9d:f8:84:e0:46:b7:05:d4:50:0f:06:f7:b9:49:2f:23:77:0f:
98:a0:02:cd:92:ac:27:56:0a:ff:89:1e:07:35:62:e8:f9:f1:
d0:a8:72:28:bf:1b:34:03:ac:5a:8b:97:e8:3f:c3:b2:4e:d5:
48:c1:fa:45:07:55:7e:0f:08:21:20:22:89:86:04:b5:55:b0:
3f:96:73:10:a2:73:87:0a:00:6f:cb:b2:3a:49:41:84:03:4d:
6c:69:09:b6:88:e9:d7:de:b3:12:b2:0b:0f:44:5c:e0:52:77:
d0:e3:d7:9c:28:78:cd:15:67:be:fd:58:fc:72:58:b0:54:d4:
75:07:e1:28:e7:10:4c:07:0a:21:60:c0:38:1c:3a:5e:25:84:
89:94:0a:25:ea:0e:cb:91:df:03:5b:b6:f0:ed:8d:00:b5:a6:
57:d5:2e:01:ab:94:a3:cd:03:50:52:3a:22:15:b1:53:c6:84:
67:42:0e:69:2d:f8:3a:65:49:03:55:6d:3f:86:c0:e8:c0:6e:
d0:8c:d7:fa:6e:d2:dc:1c:67:67:b7:d6:e2:a4:a3:12:06:df:
88:45:33:6c:de:3e:1e:41:6c:c3:60:94:3f:5d:56:0b:90:a2:
e4:64:f3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:42:18 2025 by rpki-client