Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
File: ahfeGIf8-pJEuTHZbagmeMAUdmM.mft (raw, json)
Hash identifier: hoJ2Tvgkc45sLexzLqljoNNbpakpr5CnrVp4gxsz9go=
Subject key identifier: 4F:F4:E9:7A:17:B3:59:BF:55:1C:EF:88:61:BB:8C:18:B1:89:43:64
Authority key identifier: 6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
Certificate issuer: /CN=6a17de1887fcfa9244b931d96da82678c0147663
Certificate serial: 0197469EA9BAF3435C8F5648D2AEBD397722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 19:01:32 +0000
Manifest this update: Fri 06 Jun 2025 19:01:32 +0000
Manifest next update: Sat 07 Jun 2025 19:01:32 +0000
Files and hashes: 1: BX5R5amdcio3WuT_y5iUpVj2ums.roa (hash: pwGrkwLGbzotd2slolQ5A3oax/Mg/fo6nb/3FvvTnt0=)
2: KfO5I4Cw1MaFsOF7zxOfQ4tIIJA.roa (hash: 4CuGd2v/2n5Lf/n++Esai12zLsblsU9sM0Lw5FSyTzA=)
3: SaXO2k_RD79NU2l7XYSpiLJj45Y.roa (hash: dDxX4ZRGdILDnfmTeHjmX1mfXPW3FoR3IByWvO/xwLc=)
4: ahfeGIf8-pJEuTHZbagmeMAUdmM.crl (hash: M+RiWTjHOUHHmAJq6ngelUffscII2CCkofdcvpiREWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a9:ba:f3:43:5c:8f:56:48:d2:ae:bd:39:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a17de1887fcfa9244b931d96da82678c0147663
Validity
Not Before: Jun 6 19:01:32 2025 GMT
Not After : Jun 7 19:01:32 2025 GMT
Subject: CN=4ff4e97a17b359bf551cef8861bb8c18b1894364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:63:ef:3a:0d:39:1a:93:fd:50:21:de:1d:8a:
22:33:65:c4:0d:20:cb:a5:80:d6:ef:c2:24:8d:06:
f5:47:b6:7e:62:63:2e:94:58:6e:d0:0b:90:b6:2d:
11:42:83:33:9b:92:a4:8d:02:d7:6c:29:ad:9e:47:
6c:ff:3e:b8:a9:2e:4c:9f:55:79:d4:7a:94:67:e0:
3d:7e:84:20:f6:47:e4:3e:40:96:00:41:eb:ca:d0:
79:04:81:16:66:5f:0f:e5:4a:2c:dc:4b:4b:79:aa:
3e:2d:c1:e9:c0:bf:ef:60:12:8d:43:44:1b:fe:9d:
46:f1:c4:c5:34:fe:fb:91:26:48:f9:30:ab:1f:d7:
d8:0b:17:9d:fe:1b:a7:09:d2:2e:49:a8:20:4b:f7:
e6:5d:45:6d:42:cc:47:34:0e:28:cb:0d:dd:65:f5:
48:0b:0d:86:00:ab:f1:0b:7f:33:10:2e:52:f5:9b:
a5:80:0d:23:a6:95:cd:50:10:dd:6c:e9:69:2e:cc:
04:20:27:3d:48:31:e6:f6:88:14:fc:35:89:be:c8:
dd:dd:c5:9a:de:78:b1:f6:54:c2:66:37:58:b9:9c:
2a:f6:8e:42:72:af:74:4f:92:ec:85:cc:f5:cb:26:
82:90:10:56:4e:e0:ea:6e:3d:10:e8:48:fc:cc:1b:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F4:E9:7A:17:B3:59:BF:55:1C:EF:88:61:BB:8C:18:B1:89:43:64
X509v3 Authority Key Identifier:
keyid:6A:17:DE:18:87:FC:FA:92:44:B9:31:D9:6D:A8:26:78:C0:14:76:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahfeGIf8-pJEuTHZbagmeMAUdmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ec25bd-219e-4d02-a532-0799a52a6387/1/ahfeGIf8-pJEuTHZbagmeMAUdmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:f0:ae:0c:4f:a1:67:da:d9:a2:02:18:b7:07:d0:51:a9:e6:
c4:0e:f9:33:6f:06:3c:30:06:18:13:5b:ce:cd:73:0b:a4:5c:
b4:73:f5:17:53:e6:0a:97:da:00:be:49:51:e4:71:2c:74:5a:
a5:25:f6:f8:17:d5:e3:07:5c:8b:d7:07:f6:91:0e:06:e5:f3:
2e:ed:1c:1e:7b:73:50:37:c4:7a:4b:63:be:e5:de:d3:b0:e5:
48:6e:21:2b:06:9d:67:d9:28:bd:34:d7:5b:11:8c:70:d7:77:
63:b2:83:c3:4c:56:00:72:19:92:20:56:66:78:51:16:07:aa:
2f:a9:f7:e9:70:fc:d3:94:ef:52:fc:2e:25:3f:36:7a:6f:8c:
04:62:d0:04:28:ab:1c:a0:11:05:3d:d5:3c:9f:c3:29:9c:ef:
42:ac:b9:17:69:5f:13:85:fe:c7:66:58:9b:c1:3d:61:76:55:
28:4f:54:15:86:21:71:34:77:40:0c:83:f9:b7:de:f9:ce:6f:
96:bd:84:ee:44:57:c2:71:85:58:2f:4c:6f:6a:d2:dc:50:6e:
eb:5a:28:cc:06:55:63:67:56:89:fa:8d:17:b7:37:52:e9:10:
55:55:d3:5f:ff:53:6c:9a:b0:17:f7:30:7f:ee:01:92:9b:fb:
47:04:91:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:23:50 2025 by rpki-client