Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: rEFElm0sZvDKbYz3JE57AlHuuETZtZFVntRvCqc/odk=
Subject key identifier: C6:28:E5:91:75:5A:7C:95:97:F4:01:00:C9:BD:86:F8:65:22:4B:25
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019A251C831B7FE3A09926C731152DE1F02B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 11D5
Signing time: Mon 27 Oct 2025 10:00:16 +0000
Manifest this update: Mon 27 Oct 2025 10:00:16 +0000
Manifest next update: Tue 28 Oct 2025 10:00:16 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: BVF+WtaNBzqV3+fIxJ0cuUmXCKj7X7W70t8iTY+BWYU=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 08:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:25:1c:83:1b:7f:e3:a0:99:26:c7:31:15:2d:e1:f0:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Oct 27 10:00:16 2025 GMT
Not After : Oct 28 10:00:16 2025 GMT
Subject: CN=c628e591755a7c9597f40100c9bd86f865224b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:41:87:c2:48:d2:b8:11:1c:be:31:44:9e:
ab:6c:dd:02:aa:4f:42:57:c0:fd:17:c7:87:f0:90:
c5:cd:3c:9d:bd:5a:9d:84:8a:31:38:43:9b:79:65:
a8:4e:e1:15:af:1b:cf:e0:17:37:82:42:fa:8a:87:
ea:a4:9c:96:6b:85:f5:27:4f:c4:22:2e:97:bf:6d:
83:39:3b:c2:6c:17:db:bf:a5:6d:1b:33:77:76:0b:
fb:08:cd:a3:74:ce:92:93:d9:e4:91:a2:42:69:36:
4e:75:f4:60:36:71:75:9f:c6:42:d6:bc:c5:9f:5b:
9b:75:e9:a0:72:f1:41:e5:62:c6:2b:f9:32:34:12:
19:e8:54:6a:84:de:c3:a6:7f:bc:88:dc:56:ec:fd:
43:28:d7:c4:ed:26:ff:e0:94:98:42:31:25:32:67:
6c:94:78:f6:f4:bc:a8:e6:f3:f9:36:4a:02:74:af:
e7:9b:80:0a:54:6b:25:fe:95:ea:56:73:aa:df:8a:
ac:54:cc:86:de:57:d7:c4:20:fb:52:13:1b:56:19:
c7:de:15:53:da:d0:68:d9:77:1b:b5:8e:fa:ce:08:
1f:fb:af:06:99:fd:b6:70:08:63:20:f5:d4:40:67:
6c:04:eb:5d:c2:b1:00:e2:05:0e:e3:f2:a4:60:b8:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:28:E5:91:75:5A:7C:95:97:F4:01:00:C9:BD:86:F8:65:22:4B:25
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:11:7a:49:e9:d0:a9:6d:2e:4e:3a:5d:3d:3f:a5:2e:d3:93:
f6:29:67:08:f0:9b:a4:d7:e1:26:b5:89:fa:2e:17:17:9e:8a:
f5:40:00:3f:18:5b:0b:db:c0:d0:d3:9c:ac:be:01:aa:a6:94:
46:8f:f9:1b:04:68:b5:6e:bb:19:2e:3c:7c:4f:bd:5b:e9:97:
03:b6:11:86:53:4f:2a:bc:2a:e7:c2:12:79:17:2b:7d:bc:a8:
fb:7b:13:44:f7:e3:e5:67:a5:4f:27:ef:ea:44:b7:bd:d2:57:
23:4e:ad:52:a2:69:00:15:82:25:3a:c3:01:d7:1d:39:a1:e8:
4c:45:16:af:78:16:80:7c:c2:a3:32:f1:e4:bf:39:da:57:fc:
e0:64:48:9b:f1:60:a9:07:dc:f3:2a:fb:30:40:09:9b:27:a4:
ec:bb:df:04:3e:30:9c:47:a8:d1:a8:ac:91:f8:ad:8c:4b:88:
b8:c8:8f:09:03:55:80:b1:01:ad:27:e8:3a:c6:1e:1d:2b:ad:
c8:c4:f3:00:eb:c0:1b:cd:63:ec:56:29:27:f2:7f:b2:94:95:
ba:27:9a:1b:93:ca:d2:db:5f:22:d6:cc:4f:74:a1:f9:89:b6:
8c:77:e2:d0:99:d2:89:23:0c:dc:32:1d:05:9b:5e:71:97:5f:
1a:70:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 11:51:05 2025 by rpki-client