Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
File: AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft (raw, json)
Hash identifier: 4WjOM3OOnojXfN1YTPa1e4ctTPPTPN2hUUMt0kC6mhg=
Subject key identifier: 10:12:2A:25:8C:0D:F4:8C:5A:A9:10:98:60:E0:BB:E2:E2:ED:E1:FF
Authority key identifier: 00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
Certificate issuer: /CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Certificate serial: 01984AAEE0BB1AABE10E6C51C4652961D0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 07:00:31 +0000
Manifest this update: Sun 27 Jul 2025 07:00:31 +0000
Manifest next update: Mon 28 Jul 2025 07:00:31 +0000
Files and hashes: 1: AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl (hash: wAoAjkkMnmxHBgoiBevBERe5T5RiNdPX4vbUgOOo3mM=)
2: qen-QoIAAGwgpqx4OQAF6M4rR_M.roa (hash: Pfgs1o9qvVrkxz8on7jtYneDypFRD7JuU2XED3GEHk4=)
3: sJjIi8LxyBaapUPztypafiGazB4.roa (hash: snoS7xcNMuCgLXX7PRPXvmr0bu9uS7kTUSsVN0SedsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:e0:bb:1a:ab:e1:0e:6c:51:c4:65:29:61:d0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0072c08f74d2a842a71f23ab61499b52694fc7a5
Validity
Not Before: Jul 27 07:00:31 2025 GMT
Not After : Jul 28 07:00:31 2025 GMT
Subject: CN=10122a258c0df48c5aa9109860e0bbe2e2ede1ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2a:58:ef:7d:d7:ec:91:fa:3d:a5:59:d9:0b:
56:ac:b1:b3:88:24:9d:dc:70:8d:a6:2b:fe:e0:56:
3c:bc:12:bd:fe:bc:25:09:4c:af:8c:bf:a3:e5:74:
df:78:88:dd:66:67:2b:f8:0c:20:55:74:fc:09:77:
e6:a2:02:10:1d:44:2d:0c:fa:ab:e4:9e:09:18:1e:
49:47:57:af:2d:3c:28:25:f4:d8:f0:ba:0b:00:c7:
f1:52:4a:0f:f3:00:1a:eb:c2:f0:12:f7:c6:1a:e9:
94:da:6a:6b:f6:ac:56:45:1c:a7:44:1e:2b:8b:db:
ff:22:c6:36:61:42:28:11:78:9e:d9:83:5c:f7:5f:
08:b2:b1:84:84:25:f7:f3:fd:f2:60:5f:d8:7d:b7:
91:34:d3:65:c8:12:1d:34:af:be:4c:17:52:31:28:
08:9e:78:71:97:ff:f5:56:89:6b:24:b0:08:24:3e:
c0:34:f6:f6:29:27:ab:a3:45:15:fa:3d:15:9a:50:
08:8f:fe:fe:10:3d:52:3a:14:1f:df:6b:e0:d4:3f:
a0:b0:67:71:ca:09:91:cd:a6:3a:e2:4b:e4:9c:2d:
a6:f6:0f:8c:da:40:84:23:6f:37:01:7b:4c:34:05:
ad:14:5d:70:a0:de:d3:e0:02:88:f5:45:97:b2:f7:
f3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:12:2A:25:8C:0D:F4:8C:5A:A9:10:98:60:E0:BB:E2:E2:ED:E1:FF
X509v3 Authority Key Identifier:
keyid:00:72:C0:8F:74:D2:A8:42:A7:1F:23:AB:61:49:9B:52:69:4F:C7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHLAj3TSqEKnHyOrYUmbUmlPx6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ac8e7c-4174-480e-bfaf-667d66469cd9/1/AHLAj3TSqEKnHyOrYUmbUmlPx6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f9:13:92:ba:ac:66:a9:07:aa:6d:17:42:0b:88:a9:af:2b:
08:ab:31:f9:3b:82:a0:65:79:54:7c:7b:a4:61:b4:66:d1:ed:
5a:1f:fb:89:d6:49:7a:0c:cd:f6:63:89:a8:a7:c9:ba:75:c8:
88:68:c8:45:33:42:56:e8:48:4a:e5:b2:ed:7d:f4:ba:92:06:
85:5d:67:e9:5f:18:a0:72:7a:fd:19:82:0d:9b:e8:c9:e6:83:
43:05:f9:6c:5e:3a:c4:c9:aa:0e:ad:c3:0e:a7:95:ef:a9:03:
ba:c3:c7:a9:60:f8:c8:d6:e0:7d:6e:f9:f7:dd:7e:4e:0f:c6:
e4:fb:f5:45:29:08:8e:63:0c:e6:a3:a1:de:04:76:f0:af:2c:
85:47:56:b7:d6:cf:f6:07:4a:74:97:9c:46:45:ec:68:50:07:
aa:a5:54:bd:02:48:8a:af:b7:82:73:19:27:1b:46:c7:bd:09:
ac:b0:7f:93:4d:83:59:71:78:a8:36:39:a9:97:d1:51:ce:2e:
43:d9:e7:43:02:ef:82:4c:a1:17:39:f0:ed:05:32:00:6f:f7:
d7:f6:6e:d5:15:22:e5:08:bc:ed:2e:01:98:9d:01:1e:8c:a3:
b0:f0:2d:7f:b3:5f:5d:b1:28:d3:ab:f4:20:77:85:d0:34:6f:
5e:14:b5:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKruC7GqvhDmxRxGUpYdDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwNzJjMDhmNzRkMmE4NDJhNzFmMjNhYjYxNDk5YjUyNjk0
ZmM3YTUwHhcNMjUwNzI3MDcwMDMxWhcNMjUwNzI4MDcwMDMxWjAzMTEwLwYDVQQD
EygxMDEyMmEyNThjMGRmNDhjNWFhOTEwOTg2MGUwYmJlMmUyZWRlMWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCpY733X7JH6PaVZ2QtWrLGziCSd
3HCNpiv+4FY8vBK9/rwlCUyvjL+j5XTfeIjdZmcr+AwgVXT8CXfmogIQHUQtDPqr
5J4JGB5JR1evLTwoJfTY8LoLAMfxUkoP8wAa68LwEvfGGumU2mpr9qxWRRynRB4r
i9v/IsY2YUIoEXie2YNc918IsrGEhCX38/3yYF/YfbeRNNNlyBIdNK++TBdSMSgI
nnhxl//1VolrJLAIJD7ANPb2KSero0UV+j0VmlAIj/7+ED1SOhQf32vg1D+gsGdx
ygmRzaY64kvknC2m9g+M2kCEI283AXtMNAWtFF1woN7T4AKI9UWXsvfzOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBASKiWMDfSMWqkQmGDgu+Li7eH/MB8GA1UdIwQY
MBaAFABywI900qhCpx8jq2FJm1JpT8elMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYt
NjY3ZDY2NDY5Y2Q5LzEvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9hYzhlN2MtNDE3NC00ODBlLWJmYWYtNjY3ZDY2NDY5Y2Q5
LzEvQUhMQWozVFNxRUtuSHlPcllVbWJVbWxQeDZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvkTkrqs
ZqkHqm0XQguIqa8rCKsx+TuCoGV5VHx7pGG0ZtHtWh/7idZJegzN9mOJqKfJunXI
iGjIRTNCVuhISuWy7X30upIGhV1n6V8YoHJ6/RmCDZvoyeaDQwX5bF46xMmqDq3D
DqeV76kDusPHqWD4yNbgfW75991+Tg/G5Pv1RSkIjmMM5qOh3gR28K8shUdWt9bP
9gdKdJecRkXsaFAHqqVUvQJIiq+3gnMZJxtGx70JrLB/k02DWXF4qDY5qZfRUc4u
Q9nnQwLvgkyhFznw7QUyAG/31/Zu1RUi5Qi87S4BmJ0BHoyjsPAtf7NfXbEo06v0
IHeF0DRvXhS1dg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 15:01:59 2025 by rpki-client