Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: rF85CvKJacpjbyFuCecreimQbEh3KHajQalsZ0p/CNI=
Subject key identifier: 72:B1:42:48:CB:E8:51:9A:72:C2:68:9E:C6:78:4C:7A:24:54:59:1F
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 01974DE9BA1D84A31270684586D0CAE1A8D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 017D
Signing time: Sun 08 Jun 2025 05:00:52 +0000
Manifest this update: Sun 08 Jun 2025 05:00:52 +0000
Manifest next update: Mon 09 Jun 2025 05:00:52 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: m2FSo9jSwsFjgDRMc02N2Fj6k77diC/x6CHdJmCePlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:ba:1d:84:a3:12:70:68:45:86:d0:ca:e1:a8:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Jun 8 05:00:52 2025 GMT
Not After : Jun 9 05:00:52 2025 GMT
Subject: CN=72b14248cbe8519a72c2689ec6784c7a2454591f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:26:af:1e:fc:5b:35:07:c3:d2:c5:0b:07:9d:
33:0d:be:b5:01:5a:0e:a9:f6:3a:4a:ae:e8:5d:29:
4b:30:f9:a0:17:42:ef:19:12:c3:48:e5:4c:26:4f:
f5:d2:d4:0f:8c:ba:c5:7f:78:b0:8a:a2:13:30:9d:
3a:d6:fa:dc:85:77:79:f3:2d:a6:b7:bc:3c:66:af:
b0:de:fe:20:55:b0:c9:20:46:64:bc:cf:19:21:e0:
82:d4:60:e8:86:80:8b:63:e7:67:a4:33:2a:b6:6c:
7d:3a:b2:27:0e:80:59:7f:1b:85:91:26:94:56:1c:
ab:21:09:b1:02:9a:ae:5e:04:62:ca:88:00:a2:7e:
b1:db:72:7d:f7:8f:e6:19:41:0f:be:9d:35:79:48:
df:fb:aa:6b:0e:87:93:ce:c7:36:c4:23:79:d3:a6:
0d:4b:e7:4d:cb:96:6f:d5:76:df:87:2b:ba:65:d2:
1a:76:4a:fa:d3:0a:8f:03:e3:5b:cb:28:71:fb:41:
2b:c2:6c:77:d6:16:7b:b4:ff:cb:da:8a:33:13:6f:
e1:f7:f3:71:a0:cd:41:af:dc:b8:59:4e:52:e7:7b:
02:c5:35:1e:87:3d:11:47:7c:2b:b5:13:d5:e4:5d:
ad:c9:5b:88:d1:35:5d:11:7a:35:eb:50:77:5f:cf:
c5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B1:42:48:CB:E8:51:9A:72:C2:68:9E:C6:78:4C:7A:24:54:59:1F
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:e6:87:e0:3f:ff:6a:61:20:ec:a5:33:ff:16:1f:cb:48:72:
20:06:88:f7:e9:55:d5:ff:be:b7:f9:21:19:23:12:a4:54:49:
80:d3:38:15:55:59:3c:6a:ae:22:9f:5f:08:a5:d4:0f:11:4a:
aa:33:b0:cd:55:04:20:19:33:d7:44:82:4a:0b:83:a5:28:f1:
8c:85:93:1f:6f:0b:04:0a:26:08:9b:0d:67:bf:e9:16:49:6f:
b8:b9:15:a1:56:f3:85:bc:73:e6:a4:5d:a1:06:f2:f3:eb:95:
d2:f1:c2:07:cd:00:db:10:84:ae:60:af:16:3f:77:ab:a5:3c:
22:77:87:8c:bd:91:3e:0b:b5:18:36:7e:c7:ef:21:36:e7:63:
70:b9:3b:a3:bd:0c:6a:1c:e7:61:dd:8a:f3:7d:33:d8:60:ed:
af:44:68:b7:22:ee:5a:24:59:5d:1f:56:48:8f:c7:bf:98:e0:
16:9d:91:87:2c:57:f8:53:e8:85:e8:c7:5a:df:91:03:a0:6a:
d2:5a:07:86:5a:f7:65:0e:ba:b6:31:70:56:fd:fd:a3:7b:08:
cb:03:c6:75:2e:23:6b:5d:ad:c4:ae:47:02:6e:70:db:2f:91:
30:c7:5d:6d:35:2e:f8:60:ae:55:e0:0a:af:a1:d2:9d:e0:ff:
7d:11:3f:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6bodhKMScGhFhtDK4ajTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMWM0ODE5ZDBlMTlkZmE3NDBkODQ1MWFmMTM5OGQyMzBj
NmQ4NGUwHhcNMjUwNjA4MDUwMDUyWhcNMjUwNjA5MDUwMDUyWjAzMTEwLwYDVQQD
Eyg3MmIxNDI0OGNiZTg1MTlhNzJjMjY4OWVjNjc4NGM3YTI0NTQ1OTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSavHvxbNQfD0sULB50zDb61AVoO
qfY6Sq7oXSlLMPmgF0LvGRLDSOVMJk/10tQPjLrFf3iwiqITMJ061vrchXd58y2m
t7w8Zq+w3v4gVbDJIEZkvM8ZIeCC1GDohoCLY+dnpDMqtmx9OrInDoBZfxuFkSaU
VhyrIQmxApquXgRiyogAon6x23J994/mGUEPvp01eUjf+6prDoeTzsc2xCN506YN
S+dNy5Zv1Xbfhyu6ZdIadkr60wqPA+Nbyyhx+0Erwmx31hZ7tP/L2oozE2/h9/Nx
oM1Br9y4WU5S53sCxTUehz0RR3wrtRPV5F2tyVuI0TVdEXo161B3X8/FBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKxQkjL6FGacsJonsZ4THokVFkfMB8GA1UdIwQY
MBaAFGocSBnQ4Z36dA2EUa8TmNIwxthOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYt
ZDdiMjhkMmE4MmIxLzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8xYTNmNGItYjA4YS00NWFiLWE0NzYtZDdiMjhkMmE4MmIx
LzEvYWh4SUdkRGhuZnAwRFlSUnJ4T1kwakRHMkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM+aH4D//
amEg7KUz/xYfy0hyIAaI9+lV1f++t/khGSMSpFRJgNM4FVVZPGquIp9fCKXUDxFK
qjOwzVUEIBkz10SCSguDpSjxjIWTH28LBAomCJsNZ7/pFklvuLkVoVbzhbxz5qRd
oQby8+uV0vHCB80A2xCErmCvFj93q6U8IneHjL2RPgu1GDZ+x+8hNudjcLk7o70M
ahznYd2K830z2GDtr0RotyLuWiRZXR9WSI/Hv5jgFp2RhyxX+FPohejHWt+RA6Bq
0loHhlr3ZQ66tjFwVv39o3sIywPGdS4ja12txK5HAm5w2y+RMMddbTUu+GCuVeAK
r6HSneD/fRE/IQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:53:54 2025 by rpki-client