Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: uVr/7UKspmaYDDu450J29Mg+d+81/F1qtwdEg2DIYCM=
Subject key identifier: B4:1F:21:D8:1B:EF:1C:1A:4F:FD:CA:C9:1E:36:17:EB:C8:29:F9:E6
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 01976A0582701BE98A401094428AB0B9EC57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 0E4F
Signing time: Fri 13 Jun 2025 16:00:35 +0000
Manifest this update: Fri 13 Jun 2025 16:00:35 +0000
Manifest next update: Sat 14 Jun 2025 16:00:35 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: sH8j/F4voyTcji55mpJB1SlfXVGI0Rmad9l16FGl3j8=)
2: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (hash: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:82:70:1b:e9:8a:40:10:94:42:8a:b0:b9:ec:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Jun 13 16:00:35 2025 GMT
Not After : Jun 14 16:00:35 2025 GMT
Subject: CN=b41f21d81bef1c1a4ffdcac91e3617ebc829f9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ac:22:a2:dc:17:2a:d6:e1:61:b1:78:00:4f:
8e:10:80:a0:69:6b:8a:ac:44:56:d8:39:f9:4a:0c:
3a:c1:ba:fc:a9:a3:16:9d:f3:d9:68:2d:5f:81:76:
cf:73:3a:35:40:54:ae:61:b3:7c:d5:19:fb:11:d7:
59:f4:d2:d9:26:9e:7e:65:af:c2:7c:42:7e:28:c1:
3e:8d:ae:1f:d1:92:a3:bc:e9:6d:53:13:89:91:2f:
2e:07:03:d4:f2:c8:08:63:e4:b8:0e:3b:37:56:bd:
c6:2d:8b:28:6a:d5:f8:25:e5:31:17:a5:92:b6:87:
ae:a7:d8:96:34:24:2d:c7:08:a3:3a:2b:23:bb:ed:
dd:0c:ab:4c:5b:94:d6:9d:09:5c:db:88:62:70:e0:
a6:da:75:ef:c5:6b:57:32:19:e1:bd:7c:6a:e5:ed:
cb:4c:8e:0e:9d:dd:85:75:a2:16:e3:80:21:54:97:
fa:21:e3:27:8a:3a:e6:26:ae:43:69:fb:d1:34:15:
42:28:a5:b3:4e:83:ee:53:0f:f3:53:3c:1b:b1:76:
be:ba:47:06:cb:fd:ee:6a:77:b8:2f:f5:be:22:8c:
d1:82:56:5a:05:35:87:b6:40:d5:d6:ee:13:af:1b:
68:69:60:06:ce:76:ba:24:82:d0:20:68:b1:61:3d:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:1F:21:D8:1B:EF:1C:1A:4F:FD:CA:C9:1E:36:17:EB:C8:29:F9:E6
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1d:88:56:c7:23:86:23:79:e7:03:a2:12:54:9c:e3:17:fd:
4b:75:40:ae:03:e3:62:5d:b8:90:6c:29:21:ba:98:e7:d4:63:
a8:c1:0b:6d:aa:ba:24:cc:cf:48:ff:1c:18:0b:8d:02:4d:85:
af:b5:6a:80:af:bb:8d:f8:5f:83:2b:da:a5:81:34:11:49:37:
d2:95:e7:8e:30:96:7b:d0:52:07:c5:6f:63:b5:e8:97:91:43:
b9:a2:f1:f0:60:1f:ab:83:be:c0:7a:89:45:37:3c:d5:2b:f2:
af:b2:a0:3e:9c:cb:ef:d5:af:81:e2:ae:3f:6e:ea:c2:3b:90:
1c:16:92:f2:05:a8:dc:aa:9b:5d:81:53:d4:8e:cf:65:c4:18:
08:4d:4a:47:4e:a1:95:a8:8c:4a:88:17:b4:41:13:69:65:94:
08:7c:4a:49:e7:67:4f:7d:25:7d:f5:ff:9a:d2:79:d7:d0:69:
f1:0a:e8:df:48:20:7a:f4:36:29:aa:57:db:31:ca:3d:88:45:
53:4b:71:14:8f:49:bc:3c:d2:5c:86:19:98:0a:2e:80:d4:c5:
33:14:ab:96:ab:f7:d5:21:07:08:90:8f:30:e0:19:d3:b0:4b:
e4:23:b8:74:e0:cb:3b:dc:5f:5c:3e:e5:b8:5a:5b:59:7e:e8:
ce:9a:0f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:09:24 2025 by rpki-client