
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
File: AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft (raw, json)
Hash identifier: Xw3hofh4kdc/4akiAxOMaaPzTdYD63cYbdttVTKQMBE=
Subject key identifier: 8F:57:10:53:D5:FA:B1:DE:E3:B8:CA:9F:A7:19:F4:72:B0:42:CA:96
Authority key identifier: 02:51:F6:AB:E0:BB:26:BF:E4:85:9E:54:DE:E0:FD:C9:A5:B7:8A:05
Certificate issuer: /CN=0251f6abe0bb26bfe4859e54dee0fdc9a5b78a05
Certificate serial: 0198477700021C4FD0C779935F087D513EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AlH2q-C7Jr_khZ5U3uD9yaW3igU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
Manifest number: 15FC
Signing time: Sat 26 Jul 2025 16:00:37 +0000
Manifest this update: Sat 26 Jul 2025 16:00:37 +0000
Manifest next update: Sun 27 Jul 2025 16:00:37 +0000
Files and hashes: 1: AlH2q-C7Jr_khZ5U3uD9yaW3igU.crl (hash: uFBTjbUPTBPkMGATSTwz0C7jykkUm4gjgvtmRA2klcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AlH2q-C7Jr_khZ5U3uD9yaW3igU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:00:02:1c:4f:d0:c7:79:93:5f:08:7d:51:3e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0251f6abe0bb26bfe4859e54dee0fdc9a5b78a05
Validity
Not Before: Jul 26 16:00:37 2025 GMT
Not After : Jul 27 16:00:37 2025 GMT
Subject: CN=8f571053d5fab1dee3b8ca9fa719f472b042ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:d6:de:0b:be:94:6b:4a:19:d6:a5:dc:d3:
8d:b5:da:7f:d5:48:ba:68:e1:bc:78:93:e5:da:36:
5e:0e:4d:0c:19:f2:52:d3:11:ee:6b:22:4e:c5:5b:
52:ff:a8:9a:e9:00:2d:32:60:99:4d:50:eb:1f:32:
22:ba:a0:fa:67:d8:2d:0d:b5:09:35:13:f8:3a:23:
e6:6f:30:f7:0b:48:d7:7f:ef:ff:32:a7:92:7f:08:
d0:e3:b5:cb:f9:a4:ed:3f:3d:a2:46:b4:06:ea:40:
4e:02:fc:8e:2f:aa:17:72:ea:3f:68:7f:86:c6:1d:
83:c2:34:77:6b:80:5b:97:b6:a8:4b:d9:a4:07:cd:
4b:40:4b:1a:e4:9b:29:49:99:c0:da:ef:3b:ab:5f:
cc:64:b6:ab:66:0e:35:e0:5b:86:bf:0d:97:0b:4f:
34:67:0d:04:ab:e4:ca:b1:87:e3:28:60:df:95:90:
ef:1c:3c:6d:40:95:71:b1:47:c5:f3:1a:bb:44:29:
83:63:43:5f:40:43:e5:8a:74:75:8a:98:d5:12:52:
70:45:0e:c1:34:b7:03:4d:ec:7f:39:62:a6:b5:41:
5d:8e:78:f6:4e:4b:8f:e8:43:f5:9a:0d:f2:fb:6b:
d3:7e:0c:08:66:21:6f:ab:89:37:56:d8:0f:cd:85:
05:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:57:10:53:D5:FA:B1:DE:E3:B8:CA:9F:A7:19:F4:72:B0:42:CA:96
X509v3 Authority Key Identifier:
keyid:02:51:F6:AB:E0:BB:26:BF:E4:85:9E:54:DE:E0:FD:C9:A5:B7:8A:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AlH2q-C7Jr_khZ5U3uD9yaW3igU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/2fabf5-e3ed-4d9a-9cd8-2f4eb9c06035/1/AlH2q-C7Jr_khZ5U3uD9yaW3igU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:d4:c0:e5:bf:ae:47:21:df:bf:20:f0:10:06:a7:10:fa:07:
4e:66:a6:f6:eb:eb:2d:35:6c:f8:a8:23:08:26:85:11:58:e7:
67:c9:d8:3a:f8:45:b3:04:e6:b8:c7:f6:7a:41:b9:34:30:fa:
a6:44:8b:46:89:94:5e:fb:02:3f:67:63:fe:9e:d3:36:73:3f:
99:31:ce:a9:34:4b:02:7a:07:ab:ff:67:e8:d6:83:ab:5c:0b:
eb:4f:0a:ce:d8:15:51:1e:fe:4a:63:11:13:e5:8e:92:70:f9:
e3:83:ad:cd:c7:f2:bc:38:9d:8d:71:e3:b5:03:a5:02:04:91:
45:cd:3a:4a:13:57:8b:c4:fa:bc:f2:14:f1:27:85:28:28:01:
48:d8:8e:3e:1f:68:11:72:da:7f:aa:e8:d7:89:76:e9:22:23:
9d:f6:af:39:42:bb:68:20:18:32:81:d7:e2:34:34:38:45:62:
98:84:99:c7:3b:d8:57:e5:6b:28:53:19:5c:85:18:c7:da:ad:
38:b7:53:cf:17:f1:de:93:63:1d:8f:ba:fe:70:f5:82:2a:1d:
08:a0:8f:cd:02:cf:5f:3f:b5:6d:3f:49:02:78:b0:e1:a3:8b:
29:29:be:8e:38:a7:50:f1:aa:44:3d:07:ac:27:0a:e3:0a:1c:
aa:0a:89:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:12 2025 by rpki-client