Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier: o1hS4UcbrW3l2WWIIwt0SylXXaupQmYgG4Tj1pfcRG4=
Subject key identifier: 42:F5:0D:CC:99:88:29:CC:58:67:E3:AF:DD:17:F8:85:5E:C8:A6:10
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 019A71B78694165D25E9BA1CCE495C8F2CC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number: 171F
Signing time: Tue 11 Nov 2025 07:00:43 +0000
Manifest this update: Tue 11 Nov 2025 07:00:43 +0000
Manifest next update: Wed 12 Nov 2025 07:00:43 +0000
Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: AN/e99AIEbWxLHISRU6k4V5m91kjDGWordSWIWJbOx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b7:86:94:16:5d:25:e9:ba:1c:ce:49:5c:8f:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Nov 11 07:00:43 2025 GMT
Not After : Nov 12 07:00:43 2025 GMT
Subject: CN=42f50dcc998829cc5867e3afdd17f8855ec8a610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:26:80:72:e5:eb:a8:10:27:ba:a9:0d:f4:2d:
9b:a9:ec:a6:8f:17:ac:11:18:b2:dc:df:68:fe:a9:
9a:58:c4:59:0a:e8:b1:15:71:72:a8:83:51:9d:95:
b9:1d:dc:69:97:f9:40:af:7a:64:2a:84:64:db:37:
06:76:7f:09:c6:76:72:8c:15:df:2e:30:0e:e1:20:
38:ae:99:b5:6d:f8:30:79:ca:da:b1:f6:ca:45:8e:
2c:0c:3f:61:8b:8d:18:b6:18:2f:f1:cc:e3:d4:45:
26:84:b4:82:43:7e:32:0d:a7:ac:57:0b:a2:35:39:
f9:ea:fb:2e:64:b7:a8:7f:62:24:b1:c0:67:0b:72:
c5:32:6a:ba:d5:bb:9b:49:7a:f3:a5:3e:21:d9:fa:
6e:8b:10:41:87:f9:f4:7a:e8:90:da:89:f3:f9:24:
8f:97:b1:26:97:3c:9d:ea:89:aa:04:89:93:b5:32:
90:d8:12:5c:c6:a8:c8:a6:9c:d1:57:2a:8e:25:2d:
a1:4d:aa:de:c2:f4:6d:ae:52:c0:07:f7:34:9d:f4:
64:29:67:ef:ab:0f:17:f7:30:37:6b:30:ae:92:32:
b5:23:04:ae:4d:bd:b2:dd:10:ea:c8:fd:70:96:7b:
05:81:6e:39:74:3c:c9:9a:46:0a:86:ff:45:44:a6:
13:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F5:0D:CC:99:88:29:CC:58:67:E3:AF:DD:17:F8:85:5E:C8:A6:10
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:46:0a:3f:60:97:a6:e8:35:aa:dc:c2:36:5f:3a:e9:9a:28:
94:5c:84:b2:ad:c1:10:f5:79:73:3c:15:33:9c:34:78:c2:47:
d7:6c:18:8e:59:ca:4c:01:11:94:e6:0c:15:7c:2e:d5:8c:49:
38:47:c9:3d:89:5a:be:65:e0:89:a5:3c:10:b3:c3:99:4f:1a:
8d:fc:48:3b:b2:68:e1:23:bf:b2:07:88:4e:15:a3:ab:ad:9f:
8f:37:e8:59:73:46:59:df:dd:bc:64:00:02:89:a7:1e:0e:7f:
d5:fb:a8:ce:53:14:3f:b2:0b:03:be:bb:72:54:7d:7f:db:f9:
32:68:be:3c:35:f6:9d:86:ac:03:1f:bf:ed:48:21:e2:e6:a6:
fe:03:db:22:ee:ea:4d:ce:60:bb:85:fd:ae:67:81:79:0f:db:
22:ff:79:fd:e0:8a:b1:4a:5b:1f:43:ce:69:20:46:56:9b:25:
74:27:fd:c7:fd:9e:23:3b:08:5e:e2:a5:aa:2b:e2:bf:e7:8e:
c6:68:93:fb:cb:69:a6:25:40:87:ea:c1:6b:26:f2:30:b7:5c:
76:d6:39:9a:eb:78:80:93:a9:0c:b0:d5:3a:91:79:d0:a7:b1:
54:ad:fc:d5:30:74:48:88:29:60:f7:51:d4:c0:7e:64:2a:26:
12:f0:d7:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:33:56 2025 by rpki-client