Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: LAorbg5JeOaXLWVoF2kc2qbFZrC13m6lP+s9kqYnJjo=
Subject key identifier: 2B:DD:24:AA:A0:0A:C0:97:87:AB:99:1E:00:03:54:48:24:28:19:74
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 01984B5476F253677D9C70A6FABAC3E61FCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 0E38
Signing time: Sun 27 Jul 2025 10:01:23 +0000
Manifest this update: Sun 27 Jul 2025 10:01:23 +0000
Manifest next update: Mon 28 Jul 2025 10:01:23 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: xdxGI/m1xua0sogmK0FH7aabvCJAxfthBvLuwAFANYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:76:f2:53:67:7d:9c:70:a6:fa:ba:c3:e6:1f:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Jul 27 10:01:23 2025 GMT
Not After : Jul 28 10:01:23 2025 GMT
Subject: CN=2bdd24aaa00ac09787ab991e0003544824281974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:1f:9f:81:cd:c8:2f:e9:9f:9f:14:d1:e8:a0:
24:e4:ed:e8:62:0b:6c:b0:03:a6:4f:51:33:e2:16:
6a:fe:ae:51:a3:fb:cb:6e:bd:ad:50:33:90:25:f9:
18:3b:3b:38:b1:2d:1a:2f:9b:69:01:98:1a:d7:d8:
ec:67:2b:04:6a:d7:7c:02:bf:c7:0b:87:4c:82:79:
1c:8c:6a:95:41:1f:1b:55:c1:f8:a1:26:79:23:ab:
05:38:e2:b4:30:4f:03:03:13:fe:27:c8:7f:49:e8:
3a:61:ca:1b:7b:5d:85:7a:4d:8c:4a:9e:6b:e5:e8:
2f:68:d2:57:ee:c6:7a:db:40:ee:e3:5e:84:84:6f:
a4:a1:f4:a0:b2:22:cd:6f:d8:04:11:d6:2f:19:9c:
99:1c:0f:6c:70:d7:e9:00:0b:d8:ce:a6:d7:7b:d8:
8d:16:3b:71:dc:9d:9d:c3:77:a5:f8:33:2c:dd:3e:
68:71:62:ad:46:c8:ea:a4:c7:2a:e4:2a:76:e1:92:
0e:c2:0d:b0:76:09:93:a9:06:3d:af:6d:54:7b:41:
a0:65:90:1c:2e:76:bb:a9:fa:19:54:99:a6:f4:2e:
ad:58:f7:d4:21:92:2a:d1:cb:f4:57:35:40:27:b8:
94:62:91:95:5f:10:3c:3b:e2:f7:e2:b4:0e:7a:2a:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DD:24:AA:A0:0A:C0:97:87:AB:99:1E:00:03:54:48:24:28:19:74
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:40:26:99:55:86:63:bf:25:65:df:3b:6e:f6:ea:91:b0:cf:
11:c1:dc:c4:24:d8:d0:1d:6e:26:68:66:71:3f:07:e1:6c:4d:
04:9e:c2:92:a1:e5:e7:65:74:37:30:e4:62:11:16:e7:73:c8:
2a:aa:7c:bc:3b:ad:87:13:c9:0b:bc:3a:7d:3e:49:ac:bc:68:
f1:9f:6c:bb:2b:9c:11:f4:3a:ed:29:51:a0:6f:ba:9b:36:ca:
d2:92:b5:ff:38:b2:06:73:d7:41:62:d2:c8:eb:7b:fe:03:99:
58:22:04:77:25:79:de:27:b2:76:4a:ae:b5:ee:8b:35:82:32:
24:ba:a9:ca:a4:5a:d4:19:71:70:f0:e8:9e:5f:80:0b:ba:c6:
cd:d9:f2:20:7c:99:0a:7b:30:da:d7:b4:63:c2:cc:8d:f4:f7:
63:c4:42:57:91:4c:3a:17:66:67:10:11:fc:51:c2:d5:88:bc:
ef:b5:b5:08:8e:05:f7:c8:df:5e:88:7f:75:b0:94:46:c2:cf:
7c:cd:a4:fe:01:9c:c6:15:34:dd:b0:99:a5:99:87:3f:b2:f1:
8d:b2:1a:72:73:d5:ea:66:43:9c:9d:b6:69:83:59:d9:a3:a2:
ee:d3:14:63:71:fb:ba:d2:72:69:f6:19:96:6e:f7:6d:fe:06:
7b:ca:9b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:00 2025 by rpki-client