Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: lETcokp4cz8Mr9aoqigCKx+dsljHPFUky8aikrU+8j0=
Subject key identifier: 27:AA:96:50:3A:9E:DA:59:22:BF:F3:87:F6:07:4D:7A:F2:9D:E0:29
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 01974FD7BC82B4609E5CD4BB0181BD39A6EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1513
Signing time: Sun 08 Jun 2025 14:00:27 +0000
Manifest this update: Sun 08 Jun 2025 14:00:27 +0000
Manifest next update: Mon 09 Jun 2025 14:00:27 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: ZtmyOY5ofu9kXFIwMcsri7UGEX6sjGi54y842IMh7zw=)
2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:d7:bc:82:b4:60:9e:5c:d4:bb:01:81:bd:39:a6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Jun 8 14:00:27 2025 GMT
Not After : Jun 9 14:00:27 2025 GMT
Subject: CN=27aa96503a9eda5922bff387f6074d7af29de029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fd:91:32:57:56:2e:2c:6c:f0:6c:40:7f:fd:
d4:87:4a:cc:e5:fd:27:19:dc:bc:49:2c:fe:fc:0d:
00:31:5c:17:84:2d:48:93:20:7a:90:c5:1d:53:8e:
b9:04:06:f3:c7:87:86:8d:09:bd:0f:40:fb:7e:e4:
b9:7b:84:58:c3:1c:15:1e:33:a7:4f:13:f7:32:64:
56:b1:ec:a7:44:7c:3a:03:ff:da:9c:53:b8:ec:bd:
ae:f0:1d:ba:80:fe:99:4d:6d:62:24:da:79:13:e9:
fa:01:be:b4:90:ef:6f:7d:10:ba:3c:3d:01:fb:66:
f4:fa:51:5f:71:d2:3e:b4:7e:f4:e4:39:49:d9:ea:
fb:4b:2f:c4:22:9c:90:d1:7a:a7:30:c2:6a:87:23:
3c:70:43:77:50:6e:e6:29:9f:c6:f8:97:5f:f1:a8:
aa:04:fb:4f:9e:eb:31:30:cf:97:4f:c2:fe:b1:f1:
8c:57:0f:be:cb:3f:9e:f1:40:4b:c5:a4:41:14:9a:
91:02:bc:b1:4a:1d:f0:f0:59:0c:b3:3c:37:c6:c3:
63:bf:d1:a1:30:88:ed:04:32:01:85:cb:c4:5c:1a:
3b:9c:91:b9:5c:24:c0:d4:58:a0:bb:5d:55:79:93:
2c:68:ca:1a:99:33:18:1e:83:a1:69:f8:40:19:55:
7e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AA:96:50:3A:9E:DA:59:22:BF:F3:87:F6:07:4D:7A:F2:9D:E0:29
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:1a:f4:64:53:b7:cc:93:bb:50:b8:cf:a8:52:e8:a8:e9:cd:
4f:94:9a:ad:a1:0c:6e:c7:cf:89:2d:37:4a:42:a6:15:56:71:
19:9a:10:49:41:91:1c:b8:ab:1f:86:29:e4:f2:b4:3a:cc:ac:
e4:d9:96:ef:1f:7b:15:8c:59:07:b9:a1:06:02:18:76:48:b1:
78:40:3c:8c:4b:d2:86:12:b1:b7:fa:19:b0:bf:62:9f:75:6b:
3e:72:56:d9:0c:ab:fe:ca:a9:bf:4e:a6:aa:4a:1f:61:31:41:
73:31:2a:d2:fa:65:f7:ee:9c:5b:ed:b0:bd:71:e0:1b:4f:99:
2d:44:f9:36:2f:ce:16:ac:f6:5a:f0:0f:e3:57:2d:4a:df:ed:
ef:8e:2b:65:11:1d:85:99:a4:a2:0a:90:9b:81:aa:4d:11:eb:
94:f4:94:6d:7a:aa:b3:c5:e8:28:b2:03:47:26:42:78:2c:91:
9b:c1:b9:ce:ef:f3:eb:aa:1b:04:31:53:66:fa:f5:64:da:65:
1f:05:73:9a:4c:49:d8:06:e8:40:10:4e:3b:8e:e1:47:15:bf:
f7:16:75:d2:cd:0a:f5:56:39:03:c9:a2:54:90:f6:16:bc:1a:
d7:fe:ca:7b:f0:87:93:37:db:ae:18:4c:b3:09:80:d8:8a:d4:
26:ef:7a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 18:17:40 2025 by rpki-client