Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
File: Ahs-o17f3ROMFVBtdKdgIt03aUs.mft (raw, json)
Hash identifier: qni2faAHyLn6JUrSudIZk4xRJ2glFsbmUHxMhexqlsM=
Subject key identifier: AD:40:0C:F0:F2:9E:02:C8:85:19:17:8D:A1:A9:55:89:78:F4:61:4E
Authority key identifier: 02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
Certificate issuer: /CN=021b3ea35edfdd138c15506d74a76022dd37694b
Certificate serial: 019A4F62E0A3A94F0DA5B54BDBF107C6347D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
Manifest number: 1712
Signing time: Tue 04 Nov 2025 15:01:11 +0000
Manifest this update: Tue 04 Nov 2025 15:01:11 +0000
Manifest next update: Wed 05 Nov 2025 15:01:11 +0000
Files and hashes: 1: Ahs-o17f3ROMFVBtdKdgIt03aUs.crl (hash: ePwYfVv7zvlESGN0z4sGeKNp0TvKVrciiBxYu5WkLWI=)
2: KAFC3cLT9QH5ScoLRsIonvwUhMU.roa (hash: whbGIDYtnScT7kdeeSbgI7fHOy+PdfaxJL9lQqTD7kk=)
3: aFjBtMgAkCdur0LAp1zKSd39ajk.roa (hash: k5sQSrUZApP+C12qAI5rWT2beBv2HXfS7efknu8qI8M=)
4: fc1Tc2Vdh2udhGPhrIhiUsNRmh8.roa (hash: an6cVXKMyV249udKkEMio/99yuvp5X9umnLVJSDoDVM=)
5: keIeKvMj5GFcFpqn4YnewTjX5AI.roa (hash: LybLvk7YVa5Nzz7hllr9jrHmTPWaVPacnhSof9pKAqc=)
6: n6Wyt3faNKWbYMKkn5PEP-ye3uo.roa (hash: dY4BYFMUjOYkYHFpRXEolqHG+4jJetToXOTWdXYn9Ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 15:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:e0:a3:a9:4f:0d:a5:b5:4b:db:f1:07:c6:34:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b3ea35edfdd138c15506d74a76022dd37694b
Validity
Not Before: Nov 4 15:01:11 2025 GMT
Not After : Nov 5 15:01:11 2025 GMT
Subject: CN=ad400cf0f29e02c88519178da1a9558978f4614e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:88:35:bd:cb:80:9f:3b:20:11:3f:78:78:ce:
0c:3c:34:2c:ef:7d:7e:77:02:6f:78:34:84:5e:f1:
13:32:eb:dd:7d:09:b9:f8:d3:d6:fe:3e:2a:84:c3:
a8:80:73:d4:e4:0c:e0:5b:92:15:92:60:90:4b:f5:
74:a9:3a:3e:92:d1:66:06:7e:f0:4c:c5:16:54:05:
ef:7f:80:bc:68:84:a5:69:bc:13:7b:b8:13:f4:04:
82:11:cc:1f:3d:28:2e:c0:5e:9f:17:7e:d9:e2:7d:
d7:c5:51:93:fb:76:2e:11:f1:06:5d:4b:82:85:a0:
95:b5:e6:1b:3d:ef:46:40:8d:4c:9a:c5:65:1c:91:
db:97:b2:58:4e:40:cc:59:a2:b9:c5:94:31:4e:10:
4b:7f:f1:7d:07:fa:c1:3d:a7:98:d1:bc:d2:6f:f9:
33:82:35:4e:64:c4:74:fb:25:54:36:7b:f5:a9:3e:
ed:5f:9b:f0:41:37:1c:e4:4c:8c:ac:30:6b:07:f8:
91:f8:0a:b3:96:fc:e4:3a:dc:42:d2:17:1d:2a:f0:
a2:63:b2:36:ad:ad:58:a8:65:94:c6:13:be:35:1e:
5a:43:83:07:1b:10:44:46:a2:ba:24:61:aa:a9:7d:
f6:61:2e:8b:2d:0c:f0:bd:51:e8:dc:21:af:78:b1:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:40:0C:F0:F2:9E:02:C8:85:19:17:8D:A1:A9:55:89:78:F4:61:4E
X509v3 Authority Key Identifier:
keyid:02:1B:3E:A3:5E:DF:DD:13:8C:15:50:6D:74:A7:60:22:DD:37:69:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahs-o17f3ROMFVBtdKdgIt03aUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f89b64-87b7-48f4-8b60-c3204bde7773/1/Ahs-o17f3ROMFVBtdKdgIt03aUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0d:51:57:65:01:ca:39:94:56:18:ed:4e:74:f2:ee:94:1c:
c1:5a:45:54:06:0e:98:85:d3:dc:15:58:3b:7a:a2:f1:6e:a0:
95:d1:e2:f0:20:d8:54:aa:93:c3:13:93:4b:c1:39:d7:5b:43:
02:b3:dc:5a:63:2e:6b:be:a0:9f:ea:10:97:1e:6b:51:e0:09:
f0:a3:e5:04:5f:54:50:c9:1a:d1:6c:e8:3e:bf:8d:a5:ab:75:
61:ad:bb:72:fd:ab:34:0a:fe:1b:51:d8:5d:62:9b:da:2d:13:
23:a3:a7:fb:ca:2f:9e:67:d0:77:0f:49:c0:8d:0e:55:d6:46:
7b:bb:9d:90:6b:88:5e:76:2d:60:00:fa:e9:82:61:66:22:80:
d5:2a:2c:17:ce:4c:83:45:dd:c7:66:6b:6f:0a:93:68:a3:ba:
28:78:3d:d9:65:95:d7:ea:a3:c4:a6:aa:f8:2f:57:51:4a:b3:
9d:a5:a7:63:3a:db:15:5d:e8:2a:e0:76:e4:37:ab:98:29:36:
a7:1b:e6:1c:b9:93:8b:2d:29:fa:b0:cb:54:89:e8:37:85:d3:
68:28:2e:02:89:7d:af:70:1c:e7:fe:c2:74:ce:e2:a3:27:a2:
74:66:d5:7f:da:00:4a:31:69:77:ff:de:1d:07:7e:7a:e0:18:
7f:ed:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:38:53 2025 by rpki-client