Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: 8N5penPUyfvtfea/2FvS+l/THmRR1xpE9T2TwqQuPJ4=
Subject key identifier: 4E:B3:24:B1:80:C7:89:31:77:E2:B4:7A:B9:8F:13:E5:EA:4B:96:43
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 0199221E5CA3A3A801B09616262CFD7633AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 1309
Signing time: Sun 07 Sep 2025 03:00:39 +0000
Manifest this update: Sun 07 Sep 2025 03:00:39 +0000
Manifest next update: Mon 08 Sep 2025 03:00:39 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: SmACbkyE5zxjT0q5zi6AtRoLy9LbHi8zy9ewuG02Gtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:5c:a3:a3:a8:01:b0:96:16:26:2c:fd:76:33:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Sep 7 03:00:39 2025 GMT
Not After : Sep 8 03:00:39 2025 GMT
Subject: CN=4eb324b180c7893177e2b47ab98f13e5ea4b9643
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ce:65:a3:f9:d7:73:d0:a6:03:46:46:43:fa:
01:81:15:46:52:72:22:67:b4:6f:6a:d6:58:16:ba:
74:fa:b5:2d:64:47:03:b8:49:48:6c:65:ee:64:15:
f0:a6:9c:7b:6e:f9:99:73:fb:67:a6:27:97:a6:30:
70:76:87:2c:34:b3:ce:f3:2f:bb:3f:77:52:21:ba:
df:2b:ef:c2:c8:65:f5:c4:4f:59:b8:36:a6:ac:1b:
bb:0c:db:f7:fa:0e:c3:54:33:cf:c6:ab:cf:97:39:
41:6d:1c:bb:3d:21:25:02:0a:f8:7b:f5:a1:fb:b7:
c3:ff:25:30:da:77:8c:21:ec:aa:b0:5f:9d:8d:eb:
68:16:ae:49:fe:da:2c:62:30:09:86:98:46:de:6b:
e6:aa:0c:4a:8b:31:a2:2e:70:fa:d3:b5:e3:82:20:
82:6b:31:ad:bb:89:19:de:14:90:71:bb:6a:da:3c:
3f:21:19:5c:3c:82:c9:02:44:15:5e:9b:42:70:0e:
23:5f:ca:28:32:13:ee:be:7a:18:dc:94:a0:23:e3:
7e:ad:a6:4a:85:18:53:18:4a:10:26:3c:e2:39:0c:
bf:5c:d8:40:8f:a0:c4:3a:f3:12:69:97:29:44:7b:
5a:15:57:b1:5f:a8:cf:d5:4d:03:a1:38:69:79:6e:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B3:24:B1:80:C7:89:31:77:E2:B4:7A:B9:8F:13:E5:EA:4B:96:43
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cc:f0:1e:24:fe:5f:c4:36:74:fb:51:1d:4b:74:55:83:3b:
1a:7d:54:4d:ed:81:85:5b:fb:1d:de:b1:a6:cb:16:27:c7:63:
9e:1d:c0:35:69:5d:01:1b:67:04:a7:1c:f9:82:f5:32:76:e2:
f0:61:af:23:35:6a:39:45:6d:08:a6:fa:ae:87:bf:50:53:22:
95:18:c0:3f:38:c6:60:6b:85:3a:b7:cb:a6:b6:14:f3:4f:83:
a6:8f:9a:77:34:a5:0e:1e:e9:da:10:bf:5e:d4:66:e6:bf:ed:
a8:ed:b9:e6:d8:ff:9f:d7:5b:0b:52:39:24:2b:b2:8a:6c:24:
98:f5:47:3a:51:c8:b6:ed:fd:ff:d1:72:f3:09:70:33:53:fa:
d0:2a:cc:44:b7:5b:ae:95:69:10:bc:62:f2:5c:65:1e:a6:b4:
c6:dd:ae:60:3e:dc:fe:06:83:e1:19:36:58:bf:2b:af:b0:e8:
7f:f1:d2:98:ff:93:50:26:8c:8e:98:02:f4:80:f6:f0:9c:b5:
eb:d4:76:0d:ec:65:84:28:03:70:46:f2:0b:96:2f:03:ee:a2:
ff:17:65:6b:c1:f8:8b:ab:f8:9d:a0:dc:82:8a:be:31:95:9c:
30:89:33:ff:cc:55:43:06:d5:f2:b8:79:91:ca:9a:96:d4:94:
05:da:f3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:09:29 2025 by rpki-client