Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: plNAnKS9Aro7AggZyKxtb3giPuKs3/w6a/4ESeaYOdg=
Subject key identifier: B0:1F:F7:B1:21:22:E6:78:BD:AA:EA:BA:80:5A:4C:35:70:A0:EE:A1
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 0198413DF6E0617277C3868CA48A2EAC7769
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1590
Signing time: Fri 25 Jul 2025 11:00:36 +0000
Manifest this update: Fri 25 Jul 2025 11:00:36 +0000
Manifest next update: Sat 26 Jul 2025 11:00:36 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: flF7dEFa4f641UHVzwZJc4qsjMVEOOKgEC6ZuxMNE/Y=)
2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 08:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:41:3d:f6:e0:61:72:77:c3:86:8c:a4:8a:2e:ac:77:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Jul 25 11:00:36 2025 GMT
Not After : Jul 26 11:00:36 2025 GMT
Subject: CN=b01ff7b12122e678bdaaeaba805a4c3570a0eea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5f:66:5c:72:50:ea:ea:93:8b:0c:78:6a:84:
76:0c:78:62:a9:4c:f8:af:ab:24:da:28:de:88:bc:
3b:71:41:4b:68:6f:85:1f:55:02:6e:71:7e:67:a4:
b4:97:f9:2f:d1:c0:eb:95:9e:fa:31:90:43:a4:28:
7e:94:d4:04:96:0d:87:5e:23:cc:d4:18:cf:9a:5e:
0a:41:df:d7:f6:76:19:42:3f:e5:22:83:e1:0c:9f:
0d:e5:02:fc:04:5b:11:05:3a:c3:f8:e0:81:b0:cd:
11:ee:47:51:9a:5f:76:80:96:49:1c:1f:12:d2:1b:
7a:87:97:6d:36:8d:ab:c6:5a:09:03:0e:6a:80:81:
73:e8:de:6d:39:a7:de:89:6e:b0:f2:44:98:b9:52:
06:ce:f3:15:ee:f3:35:f2:2f:bf:91:b2:82:2f:0c:
af:4f:2e:6f:94:c0:57:a1:a2:26:4f:5b:ed:ac:4e:
95:a3:8f:4c:cb:d7:37:e3:1b:55:87:fa:a2:3d:78:
3c:20:e3:ff:25:4c:2c:1f:87:e1:dc:2e:3d:b3:fd:
33:79:e3:d5:02:54:2a:23:69:5a:2b:f4:91:e4:8b:
77:17:7c:a6:fd:da:00:e9:dd:ea:4e:f4:99:2c:b7:
76:c4:d1:5e:26:b6:74:ba:7a:a9:cf:b7:bb:8e:bc:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:1F:F7:B1:21:22:E6:78:BD:AA:EA:BA:80:5A:4C:35:70:A0:EE:A1
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:cd:d3:f5:5e:4c:55:31:21:2c:6f:b2:23:c6:5b:c4:d7:
de:c5:70:aa:d7:98:9d:76:bf:66:88:8a:aa:8b:b0:fc:c3:3f:
99:69:5f:3a:64:48:64:5e:d4:69:fb:42:e6:a4:41:65:7d:ee:
47:9d:c4:8c:b3:e1:5b:d2:6d:60:43:07:a6:13:a9:48:e9:cc:
6f:b0:29:0a:e8:2a:3f:57:7f:88:af:59:03:0e:7b:34:81:fc:
c1:a0:fa:0f:c9:2d:ea:fe:ae:2a:23:ba:73:a3:82:72:2d:fe:
02:9e:35:d1:06:66:c8:a6:54:26:be:ed:5e:33:95:86:f9:4b:
2f:55:70:69:f3:ae:95:96:b8:7b:62:d5:08:11:35:d5:90:d0:
23:8f:ff:00:21:ce:67:f4:ba:1b:5a:a9:64:91:1f:af:d7:b5:
c6:82:e1:b8:2f:49:de:19:e5:e5:8c:66:64:f6:fa:06:98:78:
db:2c:6e:94:e1:a6:61:5e:e6:fa:3a:37:e3:9e:d6:43:8f:f9:
90:c0:6f:68:34:4d:b6:27:85:e7:71:42:1d:30:9f:f8:74:dd:
5d:cc:22:4a:55:c4:55:19:d3:7b:43:b8:a7:7c:41:dd:bf:d6:
c9:37:49:80:2d:c9:22:02:1c:98:c4:25:52:16:92:08:98:1e:
ea:46:44:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:41:30 2025 by rpki-client