Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: Xwqb8fwZqyv9Huq++cSCB4x1jk0fr4SsbJL15kwDIVY=
Subject key identifier: 43:41:15:D2:F4:D5:B8:4B:38:C9:81:E5:F1:89:69:E5:E4:E3:39:46
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 01984AE5AB9C6B0D1BE1873697D571906F82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 0200
Signing time: Sun 27 Jul 2025 08:00:22 +0000
Manifest this update: Sun 27 Jul 2025 08:00:22 +0000
Manifest next update: Mon 28 Jul 2025 08:00:22 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: kDvI9h2so71DX+r+Jiv4mB5LLOHAO0VFywOJfJqxxXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ab:9c:6b:0d:1b:e1:87:36:97:d5:71:90:6f:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Jul 27 08:00:22 2025 GMT
Not After : Jul 28 08:00:22 2025 GMT
Subject: CN=434115d2f4d5b84b38c981e5f18969e5e4e33946
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:10:e3:68:59:3d:71:04:ef:d2:6c:2e:7a:9a:
d0:95:e9:11:d1:98:67:1c:cc:a9:ba:cd:63:d2:ec:
03:f7:2c:5c:29:0f:2d:9f:55:a3:50:70:ed:dd:c5:
a6:02:7f:5f:b6:6a:32:da:b4:81:67:ff:b3:f5:d5:
2a:f1:f0:36:2c:bc:67:f3:1d:40:95:3d:ae:53:e0:
be:d7:7f:8c:eb:a1:17:5f:d6:86:3c:af:fa:d8:71:
f2:97:9c:26:bf:a0:0f:4b:d6:97:60:38:36:0e:25:
19:91:56:c4:9a:8f:76:5e:22:2b:42:ee:18:f1:71:
74:43:cf:d8:a7:95:6d:dc:11:51:02:35:e5:a5:3b:
53:42:94:7b:06:95:14:54:4e:ec:60:4a:74:5b:c7:
6a:6e:82:1e:00:9c:6d:8f:a9:ed:4b:dd:5c:42:a7:
42:63:a0:43:96:76:ac:d3:bf:01:8d:a5:b4:d2:e0:
3b:83:22:28:3e:f6:74:c4:1b:ec:7c:21:f5:07:df:
8a:13:ee:c8:29:67:f2:3f:70:5c:e9:d6:c5:24:d5:
90:ff:73:77:7c:42:13:35:99:69:51:58:a2:a0:dc:
a7:2e:a2:8a:da:5a:20:fe:f0:5a:92:2b:35:91:df:
29:f5:1f:e3:db:ec:84:48:1f:20:7c:71:d6:e8:40:
18:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:15:D2:F4:D5:B8:4B:38:C9:81:E5:F1:89:69:E5:E4:E3:39:46
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:be:d7:93:98:dc:08:75:37:ee:5c:63:b5:7d:c7:75:b6:3f:
ae:8a:9a:27:8c:c5:b9:aa:8d:46:22:fb:83:af:a7:3b:c3:70:
8d:91:61:54:e7:9d:89:15:19:f6:8d:1e:b4:6e:a3:ff:5b:71:
13:59:d3:28:94:57:53:9e:54:a8:ac:65:24:90:8a:4c:fc:df:
ea:92:97:66:3d:8d:be:d7:6b:76:11:18:6c:ad:1b:b0:5d:86:
dc:be:dd:15:bc:33:46:13:8e:aa:6f:44:b9:14:e8:47:51:52:
c1:12:44:58:77:f5:eb:9b:97:97:c2:39:71:7e:ac:5d:93:2a:
d9:af:c8:2b:7a:a4:24:6a:01:58:51:be:85:88:2f:d9:95:e5:
7d:06:45:cf:11:e5:03:b9:3c:b2:7b:31:bb:4b:af:08:fd:1b:
6d:c5:2c:e3:ca:a0:09:15:78:14:8f:64:59:ee:8f:e7:2a:e0:
d8:2d:6a:ac:e7:d6:33:89:f2:ae:74:30:89:1d:9c:f3:66:1c:
0d:da:e8:03:75:cd:4d:81:aa:00:42:ed:bb:cb:04:61:55:ec:
17:4e:a3:a9:44:39:57:7c:ff:0b:2f:dd:55:64:99:a5:1f:75:
02:04:e1:4c:c1:97:c7:5f:5e:cd:57:d4:2a:5b:3f:9c:e9:b7:
36:f9:9c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:10:23 2025 by rpki-client