Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: +3UFlfoU7fiF3UxNQtzqgd2862QwMMsIjI1J6KDOsdU=
Subject key identifier: 57:01:91:79:90:DF:AC:36:2F:72:B2:80:62:B1:37:AF:79:62:4C:E8
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 019935A572834FF6B943D477773A2AEF987D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 1159
Signing time: Wed 10 Sep 2025 22:00:59 +0000
Manifest this update: Wed 10 Sep 2025 22:00:59 +0000
Manifest next update: Thu 11 Sep 2025 22:00:59 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: DBKIczV+mUjJaxiyXwcaTQz9fvxPMtj87L+omqg+YS4=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:72:83:4f:f6:b9:43:d4:77:77:3a:2a:ef:98:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Sep 10 22:00:59 2025 GMT
Not After : Sep 11 22:00:59 2025 GMT
Subject: CN=5701917990dfac362f72b28062b137af79624ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:79:64:f9:11:85:40:ec:d5:84:c4:94:c5:3d:
7e:38:9d:96:19:bb:b4:cf:a4:80:7f:ba:66:65:9f:
1f:ec:31:b0:1a:11:12:b2:71:00:7a:25:66:b7:fa:
42:b6:cd:20:fb:63:4c:04:2f:e5:21:52:45:d9:39:
3f:73:0f:84:a9:20:b5:e8:4f:01:cd:78:2a:bb:a7:
8e:c1:c6:6f:93:ad:fb:7b:f8:09:f0:ad:a7:1d:e4:
b8:a1:74:ff:38:c3:1c:de:a5:eb:cf:9d:cd:45:9c:
19:50:0f:ea:48:5c:cb:74:44:6e:69:c2:80:2a:4d:
32:d1:06:1c:2b:a7:e6:bf:93:4e:79:ab:f0:78:8a:
3b:8a:05:d8:7c:ad:0b:0c:25:5c:14:b4:d1:0c:b2:
fc:b4:6b:8d:2d:02:5a:55:47:6a:23:d2:8a:52:e0:
2a:bd:65:4d:1c:99:e9:89:8d:f9:5a:49:48:09:8b:
15:05:db:85:43:62:cd:a4:aa:eb:15:23:07:10:96:
db:9f:2a:53:80:9c:6a:97:bc:da:1e:4b:c2:9c:01:
54:26:f1:ac:5c:93:be:5f:8e:05:21:ae:fd:bb:d6:
b9:aa:17:cb:e6:fb:0f:32:4a:29:08:82:57:13:81:
3c:83:8c:d1:53:c0:b1:8d:42:87:d6:a3:5f:a1:cc:
39:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:01:91:79:90:DF:AC:36:2F:72:B2:80:62:B1:37:AF:79:62:4C:E8
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:e9:dd:c3:a4:fb:e3:11:6e:aa:41:ed:53:70:48:7b:fb:32:
22:90:6d:9e:15:c9:04:a4:de:52:bf:d9:0a:08:ba:15:39:e5:
7d:2b:b9:81:81:ac:86:78:c9:cc:51:75:b0:69:27:77:6f:11:
df:2c:c8:49:a6:c3:af:ad:23:7f:e6:01:b9:3d:c4:f7:9c:37:
7c:a6:dd:b1:70:cf:5d:5b:69:b7:71:fc:87:38:0e:2c:15:ba:
7d:98:08:ec:02:e0:38:fb:80:ac:95:3f:a6:78:2f:6b:4b:01:
31:6d:74:46:59:ad:7a:33:67:db:e4:2c:1c:3b:8c:4b:62:0d:
c6:e9:f8:21:db:94:d8:8f:7b:4c:ff:72:59:05:b7:52:7d:fd:
f2:04:6f:a3:7c:83:cf:c4:85:d4:ac:6c:02:43:40:58:0a:29:
cb:c5:45:4c:88:20:42:c2:a6:42:c7:b3:46:c1:ee:d7:09:72:
e0:b7:5d:de:1b:ac:98:5a:4e:58:b6:36:44:d2:55:00:3e:2e:
90:09:ac:2c:f8:f1:53:fc:95:0b:b3:ae:18:ef:49:9a:77:f4:
54:ee:71:ba:18:2c:f0:32:5a:00:2f:e1:53:9c:8c:d7:03:77:
62:9a:b9:a6:21:db:f9:18:74:7d:81:39:60:4b:f5:7e:82:71:
ee:0d:2e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 01:02:25 2025 by rpki-client