Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: YKLAWO5+ns/4g0SiMb//Wbd7Bnh8towNIzlnYUQ2+Z8=
Subject key identifier: 57:65:1B:8C:6D:21:E9:DB:61:88:B7:3C:B6:5B:FE:FD:DF:D9:F4:64
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 019A71B85A84809263F2940DAAFA776A3BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 171B
Signing time: Tue 11 Nov 2025 07:01:38 +0000
Manifest this update: Tue 11 Nov 2025 07:01:38 +0000
Manifest next update: Wed 12 Nov 2025 07:01:38 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: EP8O/yI2KukYm3Psz+wgxIqC6ecyB3f1Ga0odXSCMUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:5a:84:80:92:63:f2:94:0d:aa:fa:77:6a:3b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Nov 11 07:01:38 2025 GMT
Not After : Nov 12 07:01:38 2025 GMT
Subject: CN=57651b8c6d21e9db6188b73cb65bfefddfd9f464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a5:eb:b7:3a:20:31:b7:d6:83:52:19:19:2d:
c2:45:85:7c:3e:f5:de:fb:ac:8a:38:6c:ca:e9:49:
1c:26:97:79:ab:0a:6f:f7:0d:d3:af:6d:e7:a8:df:
0d:74:01:ef:9f:19:83:36:8a:c1:64:c2:e4:90:1f:
6e:a2:50:64:f5:87:93:0a:3e:e5:6e:69:e0:43:c9:
0a:18:3b:14:74:df:44:6b:28:c7:de:f6:c2:3e:8a:
04:e0:37:f4:3f:bb:0e:b3:e8:4b:be:ed:6b:d8:94:
92:31:6c:8a:30:18:f7:7a:dc:b7:de:15:12:65:ad:
5b:a1:e5:b9:74:14:87:ba:3b:aa:13:bc:e9:e1:73:
be:8a:81:c4:f9:df:01:71:75:0e:5b:bf:84:f0:45:
63:b8:dc:f3:60:19:10:59:88:b3:8c:63:a6:7e:4f:
56:26:6e:16:f2:ee:ac:f9:b4:29:0f:27:5b:1b:44:
21:35:32:31:9b:65:39:34:57:9a:68:82:bc:1f:8d:
55:51:75:f1:48:27:22:bb:b4:2b:6a:57:1a:57:ec:
17:37:83:4e:a7:2f:2c:ba:e4:94:28:d0:09:c1:01:
eb:ee:1a:a4:cc:5e:6e:55:1d:01:20:b5:c4:cd:5d:
f3:56:eb:bd:99:98:0c:bb:2b:36:17:ca:af:cf:11:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:65:1B:8C:6D:21:E9:DB:61:88:B7:3C:B6:5B:FE:FD:DF:D9:F4:64
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:68:00:8a:82:38:f3:b3:ee:28:97:2f:d5:87:27:9d:0e:8f:
ea:d6:58:82:b2:1b:5f:60:a1:17:36:42:f3:7f:0f:b3:b5:54:
7d:18:47:57:3a:5b:bf:5c:d1:89:db:e3:17:83:36:e9:93:4b:
6c:44:c3:ee:51:9a:60:1f:8a:bc:ed:f4:22:69:60:35:01:fc:
ae:95:b0:58:1f:b7:c7:7f:bd:bb:77:59:c1:51:e5:20:09:6c:
6e:36:a8:89:44:9d:7d:07:a6:19:17:24:c1:bd:92:1d:99:1f:
1a:db:6c:b4:f0:e4:99:f4:bd:41:97:f0:a1:6e:1d:e1:7e:83:
eb:85:b8:c0:70:47:72:ae:ce:30:14:9e:89:bb:99:a5:4d:d6:
8b:5d:b4:15:c4:46:4f:20:74:a4:da:f9:cd:3f:bd:2b:f8:b1:
9a:4d:e4:bf:8f:da:6f:c0:d7:8a:e1:4d:b8:45:e4:2c:35:3c:
78:fa:8f:d1:68:4f:91:cb:39:fc:7f:ca:14:95:0a:3b:5b:98:
f9:76:40:22:6d:2f:0a:05:be:c3:c3:ee:33:4b:8b:ef:56:d8:
d4:05:e2:a1:c6:a7:20:cf:6d:1d:2b:57:e6:ac:29:cb:c9:22:
00:08:32:a7:87:e3:b2:01:2a:49:8e:d1:10:58:25:93:4e:7d:
af:20:33:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:42 2025 by rpki-client