Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: 1oBYwuVmbMwD4OsE33o+oJB+Vu6z9MFZM7HgPjtX36k=
Subject key identifier: F5:9B:7B:E5:9C:47:99:27:B3:9A:44:49:7A:8F:EE:BB:9A:2E:17:5F
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 019849650386E080B7441B1F8525A17DDFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: B5
Signing time: Sun 27 Jul 2025 01:00:13 +0000
Manifest this update: Sun 27 Jul 2025 01:00:13 +0000
Manifest next update: Mon 28 Jul 2025 01:00:13 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: 2DclmuLylw3B22bKg3AdARTSAB+q2Ljiz91OGNmU134=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:03:86:e0:80:b7:44:1b:1f:85:25:a1:7d:df:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Jul 27 01:00:13 2025 GMT
Not After : Jul 28 01:00:13 2025 GMT
Subject: CN=f59b7be59c479927b39a44497a8feebb9a2e175f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5c:ad:93:04:9d:a6:2d:df:5c:59:4c:87:2f:
08:89:72:e1:e7:5b:75:73:b2:ca:08:f0:4d:c8:e6:
b8:18:95:7a:7a:e5:15:42:45:80:f7:15:33:0c:46:
07:d5:8f:d9:2f:8f:7e:6a:a9:70:ad:a6:f7:4f:7d:
b2:7e:2c:0b:21:b6:9e:59:f1:0f:9e:9e:70:22:47:
b8:92:41:b1:b0:56:ba:e0:bf:04:b0:01:ff:ab:fe:
ed:49:4c:95:1e:cb:d4:88:fb:8f:02:2c:13:14:9b:
0c:52:9e:64:50:03:c8:80:6b:3d:a4:a8:bb:59:0a:
e5:74:66:2f:e1:dc:5c:27:83:82:a4:4a:ec:33:91:
29:78:7f:3d:c7:2d:3f:f2:02:98:83:42:3e:dd:ce:
a4:75:78:b8:3e:03:95:89:50:ee:20:62:c8:9c:cd:
a0:96:26:8c:b2:a0:d2:ed:d0:60:a0:83:ee:5e:4a:
35:b9:cf:6d:fb:09:07:55:5c:a0:89:a1:1e:3c:a1:
d8:50:8a:b9:54:c5:d0:f1:f3:8b:f0:3e:b4:93:05:
1b:93:af:b0:fc:7d:4f:a1:59:44:04:52:a0:0f:ae:
2b:5f:67:a8:6b:bc:06:4f:29:9b:dd:90:5d:60:73:
73:db:52:19:b9:a3:51:88:c5:7b:09:e5:c9:5c:72:
3d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9B:7B:E5:9C:47:99:27:B3:9A:44:49:7A:8F:EE:BB:9A:2E:17:5F
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:9d:6e:0c:cb:18:fe:f9:a4:8b:d3:09:3f:70:2c:0a:1e:30:
1e:ea:a5:38:00:9d:73:96:47:68:27:54:b4:5e:4f:90:83:eb:
ab:a7:77:b1:fe:d4:9c:45:b2:6f:eb:64:fb:36:33:dc:af:f5:
95:8c:85:36:e1:2b:3c:ef:30:59:6e:36:19:0e:24:40:96:82:
75:ed:ed:81:ae:8b:80:85:97:25:5b:89:8d:7b:3b:8f:36:38:
c9:88:6b:a3:78:46:d5:37:ae:2c:47:39:76:ef:18:14:6a:88:
49:78:e1:fd:c1:e5:30:b7:b1:83:4b:56:7c:ed:bd:49:3a:bd:
a7:9b:c7:9d:25:44:b1:f2:46:9c:03:95:58:28:e6:fb:ae:97:
73:6d:bb:e5:b3:7e:6e:bc:c2:e2:45:0c:33:86:af:02:35:fa:
84:ce:5f:4f:92:94:71:d0:42:f7:4b:a0:8b:7c:6c:9b:e9:c9:
97:f7:4b:66:34:9d:fa:be:71:a2:b5:80:fb:f8:29:0d:08:8c:
9a:10:6e:60:81:fc:45:96:60:0d:b7:9d:45:91:26:83:35:fc:
3b:8d:9e:9f:bb:0d:10:d9:1c:79:cd:17:62:91:5c:ad:73:3b:
6f:0d:48:2a:f2:aa:1f:f2:02:95:94:69:62:90:32:83:db:d9:
34:19:3e:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZQOG4IC3RBsfhSWhfd/CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWI2OGMxOWNkNTVkNmJhNWY4NjVmYjBkZDBkNmY4Yzlk
OWUzZGEwHhcNMjUwNzI3MDEwMDEzWhcNMjUwNzI4MDEwMDEzWjAzMTEwLwYDVQQD
EyhmNTliN2JlNTljNDc5OTI3YjM5YTQ0NDk3YThmZWViYjlhMmUxNzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lytkwSdpi3fXFlMhy8IiXLh51t1
c7LKCPBNyOa4GJV6euUVQkWA9xUzDEYH1Y/ZL49+aqlwrab3T32yfiwLIbaeWfEP
np5wIke4kkGxsFa64L8EsAH/q/7tSUyVHsvUiPuPAiwTFJsMUp5kUAPIgGs9pKi7
WQrldGYv4dxcJ4OCpErsM5EpeH89xy0/8gKYg0I+3c6kdXi4PgOViVDuIGLInM2g
liaMsqDS7dBgoIPuXko1uc9t+wkHVVygiaEePKHYUIq5VMXQ8fOL8D60kwUbk6+w
/H1PoVlEBFKgD64rX2eoa7wGTymb3ZBdYHNz21IZuaNRiMV7CeXJXHI9BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWbe+WcR5kns5pESXqP7ruaLhdfMB8GA1UdIwQY
MBaAFAIbaMGc1V1rpfhl+w3Q1vjJ2ePaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzYxNjctZmY5ZC00NTFiLTg0ZWIt
Nzc3MGU3OTA3MjBmLzEvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YzYxNjctZmY5ZC00NTFiLTg0ZWItNzc3MGU3OTA3MjBm
LzEvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu51uDMsY
/vmki9MJP3AsCh4wHuqlOACdc5ZHaCdUtF5PkIPrq6d3sf7UnEWyb+tk+zYz3K/1
lYyFNuErPO8wWW42GQ4kQJaCde3tga6LgIWXJVuJjXs7jzY4yYhro3hG1TeuLEc5
du8YFGqISXjh/cHlMLexg0tWfO29STq9p5vHnSVEsfJGnAOVWCjm+66Xc2275bN+
brzC4kUMM4avAjX6hM5fT5KUcdBC90ugi3xsm+nJl/dLZjSd+r5xorWA+/gpDQiM
mhBuYIH8RZZgDbedRZEmgzX8O42en7sNENkcec0XYpFcrXM7bw1IKvKqH/IClZRp
YpAyg9vZNBk+qg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:25:34 2025 by rpki-client