Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
File: AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft (raw, json)
Hash identifier: sXZgbPev3LoucGuIKYMkkpiYmC9WGV1UmqWVfinOoQE=
Subject key identifier: D8:31:E2:57:35:83:AE:11:CA:03:2C:75:A7:C2:31:A6:86:74:96:F9
Authority key identifier: 00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
Certificate issuer: /CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Certificate serial: 01987486E18AB9B2DBB0119B4E86D96EDADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
Manifest number: 0ED9
Signing time: Mon 04 Aug 2025 10:00:53 +0000
Manifest this update: Mon 04 Aug 2025 10:00:53 +0000
Manifest next update: Tue 05 Aug 2025 10:00:53 +0000
Files and hashes: 1: AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl (hash: 9W/TI4j/Qy4gMcJHsPsyWNDuN0QTu+jrbQtXs5JR/rs=)
2: D6FQ_AOx7VEUAwBlUYJ5Pt1jupM.roa (hash: 4lHXyj3pRBx2LFAwlRyUS6mFr8ntH6TaBTAezCtdNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:86:e1:8a:b9:b2:db:b0:11:9b:4e:86:d9:6e:da:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0008589496bf86d2d0f8874b76cac843025bcd3b
Validity
Not Before: Aug 4 10:00:53 2025 GMT
Not After : Aug 5 10:00:53 2025 GMT
Subject: CN=d831e2573583ae11ca032c75a7c231a6867496f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:2d:c6:50:24:09:9b:7b:86:9d:4d:ec:fb:
33:78:25:e0:d1:5c:01:7a:fc:b4:fe:db:d8:01:29:
37:56:60:f7:22:0f:c1:84:54:f1:92:6d:cd:d2:e2:
57:5c:26:cb:2a:35:c7:39:b6:93:cf:4c:5e:b1:0a:
bb:50:a8:72:f0:25:dc:ff:ed:8e:fb:2e:95:58:6d:
1a:8e:4b:07:1f:18:49:86:99:8b:9b:7f:7d:e3:e0:
66:ce:db:c0:1a:88:c1:24:22:4d:30:5c:66:13:6b:
69:0a:61:56:be:0b:7b:66:bc:52:0c:ad:cf:00:2b:
6d:96:e3:0f:57:ef:84:25:3d:bd:c3:cf:6e:e1:8e:
b9:4b:6b:f1:00:6f:17:0c:84:0b:ca:88:16:c1:a8:
8d:41:81:28:11:a3:59:dc:71:07:5f:04:ec:71:9c:
3e:42:f7:10:74:61:aa:7e:b3:c9:b4:a4:36:c2:5b:
3f:51:bc:71:17:39:5f:f4:7b:c0:1f:7b:a7:9f:aa:
52:c9:5e:ac:23:3b:8e:1c:20:3e:29:a2:05:99:74:
ad:9f:e4:6b:11:4f:16:80:48:5f:81:2c:37:e0:4b:
43:3e:23:fc:61:48:3f:21:e8:3d:d7:cc:38:84:d7:
bc:21:21:35:32:87:d4:fb:7a:d6:37:42:3d:c6:ae:
21:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:E2:57:35:83:AE:11:CA:03:2C:75:A7:C2:31:A6:86:74:96:F9
X509v3 Authority Key Identifier:
keyid:00:08:58:94:96:BF:86:D2:D0:F8:87:4B:76:CA:C8:43:02:5B:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AAhYlJa_htLQ-IdLdsrIQwJbzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d1c06a-dfa5-4c78-980a-6be2f4d24c96/1/AAhYlJa_htLQ-IdLdsrIQwJbzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5f:22:32:b3:1a:6c:07:57:30:7a:6e:d2:b1:2e:52:f1:04:
e2:c9:a4:9c:93:fc:af:a5:45:cb:1d:5d:34:84:6e:cd:a5:87:
12:8b:20:09:a0:68:b8:e9:04:d1:c8:ed:f9:a7:f5:90:b0:d4:
5a:40:22:5b:68:86:3e:b2:74:7f:fd:a0:8a:de:d9:5e:e2:36:
01:2b:96:9e:a5:3f:39:9d:39:26:8c:58:b0:95:1b:24:58:8c:
23:06:8f:c2:a0:0d:28:fd:2a:85:13:c0:52:a0:1e:ed:70:56:
04:74:ab:87:ff:75:37:07:0a:9d:1a:24:43:3d:12:14:b8:2e:
0e:1c:36:ee:6c:b4:78:f2:48:c0:f6:50:b9:4a:80:a7:91:3a:
a3:13:ec:a9:90:82:a6:29:a3:10:ed:6d:4c:78:37:67:d0:4b:
0c:8e:b2:b9:99:34:39:c0:93:63:f5:5c:03:af:85:ca:b4:38:
01:ea:3a:4f:58:f5:c6:54:bf:d0:e6:78:e9:f0:4a:f5:7d:42:
fc:60:d5:28:46:a6:f4:d2:09:a2:61:9c:7b:f6:c8:ee:21:db:
5d:ac:98:2a:d5:b4:25:9d:c3:33:65:45:a4:0b:8a:c2:b4:6f:
9a:cf:ac:c0:9b:ba:b2:7a:d1:80:0c:f4:93:bb:51:c0:c7:68:
3a:ee:01:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:36:07 2025 by rpki-client