Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: CDFx5fbYDzcTeP8xNkMQREDTQ0b4R3I11e3M9YERS6E=
Subject key identifier: F9:8E:DE:B7:0C:9E:5E:29:A4:20:C8:EC:74:DC:C4:DE:C1:A1:4D:2D
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 01987487245AFA337834E3965D222860B669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 10F5
Signing time: Mon 04 Aug 2025 10:01:10 +0000
Manifest this update: Mon 04 Aug 2025 10:01:10 +0000
Manifest next update: Tue 05 Aug 2025 10:01:10 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: 3uti23xnriluxQa8a08Um+JkYNbEjbFlhOnhJ6urln8=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:24:5a:fa:33:78:34:e3:96:5d:22:28:60:b6:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Aug 4 10:01:10 2025 GMT
Not After : Aug 5 10:01:10 2025 GMT
Subject: CN=f98edeb70c9e5e29a420c8ec74dcc4dec1a14d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:6b:0b:d0:bf:40:fe:4c:d3:7c:a0:bf:8b:
46:93:74:3a:17:7c:43:4c:b3:b0:4d:ee:8b:77:7b:
30:48:ab:bd:67:19:6c:f2:55:70:d8:eb:79:1b:c8:
60:bb:99:89:81:e6:cd:9a:8f:56:38:51:69:c0:6a:
b5:4f:23:74:83:30:35:3b:14:cf:af:dc:a2:ae:ff:
0e:0f:3e:5b:53:76:7d:62:ff:01:9b:65:dd:43:1a:
65:12:7f:37:7d:2c:e6:c0:e1:03:a1:df:e8:39:68:
f6:e7:db:93:26:93:be:45:99:0a:d4:bc:d0:21:cb:
cf:cf:e2:10:81:fd:11:d4:ec:50:c6:86:54:43:ef:
5b:c7:0f:92:bd:86:1a:cb:fd:b2:f1:f3:d4:3a:b7:
45:17:73:c3:f1:bd:73:15:a4:0a:d5:a7:20:c1:80:
92:a4:89:a8:be:14:2b:f1:38:93:3d:15:0c:f7:97:
7f:10:fa:32:3b:dd:2e:7d:a9:e6:e5:e7:05:eb:d7:
12:46:8a:e6:36:1f:36:1b:e0:7a:82:0b:1c:88:85:
b0:da:4b:54:2e:5b:c6:22:8c:f5:37:0b:c2:e3:be:
58:71:16:55:b0:5a:1a:5d:97:b2:52:50:90:ea:ba:
8e:83:76:f3:a9:ce:e0:ae:ae:72:25:2f:ce:7c:96:
23:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:8E:DE:B7:0C:9E:5E:29:A4:20:C8:EC:74:DC:C4:DE:C1:A1:4D:2D
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:3e:aa:e0:ea:25:ac:af:63:27:61:18:0d:56:47:7f:5b:f8:
f3:08:c5:76:b9:27:65:46:1b:4b:ca:4c:43:bd:18:eb:f0:b4:
bf:3f:17:68:77:60:49:54:b8:64:86:bd:85:84:43:53:92:b1:
12:a6:e1:d5:b6:ab:03:9b:ab:45:ea:44:b2:dc:08:b8:88:5d:
a7:a8:b6:2d:79:70:df:ba:5f:0f:e3:3e:07:24:b3:32:fb:b9:
bb:6d:da:30:10:bb:1e:50:14:bf:00:ee:b1:38:ad:16:79:d0:
37:46:51:57:e2:2b:68:db:50:36:dd:2a:81:71:95:2c:5a:11:
3f:fa:3c:c9:43:53:8b:8a:01:d0:6c:62:1d:7e:c9:ee:75:63:
0c:1a:92:94:a7:b3:c4:1c:ef:5f:13:b5:b4:fc:65:9f:93:81:
47:76:9e:c7:12:fe:0d:89:ce:84:f6:29:aa:7a:fa:a2:64:8e:
42:e0:d2:72:3b:a0:82:55:d3:61:46:6c:6c:c9:69:31:83:7e:
e4:a8:05:ef:cc:51:d4:cd:97:e0:6b:c9:bd:83:21:64:f5:47:
60:7c:04:78:cd:4b:e4:1f:ff:86:8e:75:3b:49:e3:ee:da:20:
3b:a1:90:fb:ec:27:ff:f6:24:76:99:e2:13:72:57:f2:a3:bb:
05:d7:7c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:59:25 2025 by rpki-client