Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier: DhkwAHlaz1Pu370/tw1Grnsa42dKiBk15HRy3uzZiSk=
Subject key identifier: 42:7B:C6:F2:B5:F9:14:C1:06:7A:3B:9F:FD:D0:07:24:17:0C:3D:BC
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 01983FBD818BAB9C6E5C4A137F822360E76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number: 15FC
Signing time: Fri 25 Jul 2025 04:00:40 +0000
Manifest this update: Fri 25 Jul 2025 04:00:40 +0000
Manifest next update: Sat 26 Jul 2025 04:00:40 +0000
Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: 9xKQG37auWFtpM3mLDgV7/cMzNx2haX3JxWNdcr5CuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 04:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3f:bd:81:8b:ab:9c:6e:5c:4a:13:7f:82:23:60:e7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Jul 25 04:00:40 2025 GMT
Not After : Jul 26 04:00:40 2025 GMT
Subject: CN=427bc6f2b5f914c1067a3b9ffdd00724170c3dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3d:30:ed:53:96:8d:7a:52:38:2e:ef:d9:ec:
26:7b:bd:3f:88:ae:b5:1d:da:f9:2b:c2:32:b8:fd:
f1:c8:9f:f1:e0:46:fe:5b:1e:4f:cb:5a:39:20:dc:
fc:d0:18:85:09:73:35:fe:fc:46:76:ff:73:8d:49:
bf:42:ba:b5:8a:b7:f0:69:0e:43:8b:7c:6f:9d:05:
6f:46:5b:0a:ba:8d:1e:d4:84:8e:c1:c6:a2:9a:81:
43:7b:fc:83:16:7d:60:0c:aa:b0:6e:59:cd:b4:8a:
b1:20:2c:fd:e2:c0:8f:07:30:59:d6:8c:d9:7c:66:
eb:8c:22:93:d9:54:96:4d:a1:e8:8d:b3:86:47:f3:
cf:ea:9c:de:48:00:85:81:3c:a9:29:d2:08:c6:50:
e7:25:0f:2c:8d:63:8f:a9:b2:66:db:18:9b:e3:bb:
1c:a2:53:ee:8c:53:b1:8c:0d:f4:3f:7c:1a:a3:bf:
8f:c5:19:e4:b2:b9:3f:10:04:bb:6d:97:6d:5b:e9:
1e:71:62:ac:58:7d:f3:79:c6:db:c2:c8:ce:72:10:
f3:15:1f:8d:aa:3c:ff:92:9e:58:81:68:0e:19:d7:
ca:d7:0f:8b:38:67:00:d4:8b:6f:b1:52:6c:a6:ed:
79:25:5b:43:b6:52:41:2c:e6:e4:22:7b:56:31:65:
ae:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:C6:F2:B5:F9:14:C1:06:7A:3B:9F:FD:D0:07:24:17:0C:3D:BC
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:14:b8:88:a7:08:6f:37:0c:fb:c0:3e:bf:93:93:8e:50:16:
0e:b6:57:d6:85:d8:27:a5:d3:8c:09:67:94:e1:02:cb:73:cb:
f0:ed:f7:d1:66:bf:87:de:a2:0e:ff:2c:b6:61:bf:d9:70:c8:
fa:0f:19:17:6e:f9:de:5d:2a:d2:b3:e0:07:3d:b4:06:cc:80:
db:4e:25:f3:b3:3b:4f:2f:fc:9a:53:63:09:1b:f9:bd:dd:62:
dc:84:2c:bb:ab:06:e1:31:d0:a2:91:b8:ca:0b:80:ea:ed:58:
64:21:9a:d6:aa:1c:bd:15:bc:af:b4:21:88:a7:bc:19:cb:97:
22:ea:02:cc:fa:a3:53:f4:ea:16:0d:3c:85:f3:d7:07:8b:1d:
ee:c1:47:8d:ce:98:e4:cc:af:de:72:81:27:7d:82:b0:44:db:
69:73:ac:ab:6d:0a:ef:cb:14:04:57:96:db:1d:1f:16:df:8b:
a5:3a:54:b9:48:af:93:ee:b4:04:12:ae:7a:9c:b2:d2:a8:62:
f2:5c:8a:1c:65:d5:31:a3:c8:c0:7f:57:0d:cf:46:39:13:87:
c3:ea:95:12:f7:f3:1c:01:22:fd:90:5e:7f:cf:d2:3b:c3:37:
35:79:70:de:c4:a3:c2:59:96:35:fc:08:1f:89:c2:51:67:48:
8f:a8:fa:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 13:48:17 2025 by rpki-client