Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: ixa2pO/DevhLQkNsjJm0HQQ9fyrHvE6Oe2sBex/fVP0=
Subject key identifier: 83:66:3D:78:46:77:E3:CA:61:D3:AD:67:8D:CC:F9:DA:77:01:9E:63
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 0198D660449096F3A85949210F99172D6DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: FE
Signing time: Sat 23 Aug 2025 10:01:29 +0000
Manifest this update: Sat 23 Aug 2025 10:01:29 +0000
Manifest next update: Sun 24 Aug 2025 10:01:29 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: 52m1tOFlf4mx5ETqiMLBAYx/pzHrQR1JninD8IPL6G8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:44:90:96:f3:a8:59:49:21:0f:99:17:2d:6d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Aug 23 10:01:29 2025 GMT
Not After : Aug 24 10:01:29 2025 GMT
Subject: CN=83663d784677e3ca61d3ad678dccf9da77019e63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a6:2d:b0:0a:2c:8d:81:29:b4:ea:24:d5:5c:
31:d9:47:d8:44:5d:6f:3c:86:4f:5a:36:09:1f:07:
c2:62:e2:cb:23:b3:b4:5c:33:c3:8c:9e:76:5d:5e:
d0:a4:f8:c9:50:5e:0e:02:ec:2f:9c:10:5c:fc:10:
00:aa:5b:0a:78:2c:de:72:be:36:ed:85:6e:d8:6e:
37:bd:d6:d1:d0:c5:2d:83:21:7b:06:90:6a:7f:ae:
6e:6e:63:f1:53:49:28:ca:6c:78:a0:ea:93:20:91:
d2:ce:08:a0:f0:67:66:41:a1:7b:ad:c7:2b:db:c9:
41:22:61:84:55:4c:4b:05:a1:af:84:52:45:d0:8e:
77:24:e6:96:6f:ea:1c:b3:eb:d7:8a:f7:21:c4:59:
53:3f:a1:43:a5:2e:f2:8b:45:34:13:fa:5f:01:4b:
1e:d1:6c:33:b9:2e:52:5b:17:fe:a3:dd:f7:0d:f9:
68:be:4f:4a:f5:d8:3e:78:e0:64:41:23:58:a5:e6:
28:41:2c:37:68:83:28:4d:f5:43:88:84:0e:23:30:
ea:8e:e5:d8:2d:92:c1:9b:fb:d2:1b:67:95:f6:4b:
5f:25:f9:ca:c5:5d:59:e3:a9:8c:2d:43:b0:62:49:
14:73:cb:84:3b:bf:1d:ee:d6:09:95:6c:e5:c4:d1:
a0:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:66:3D:78:46:77:E3:CA:61:D3:AD:67:8D:CC:F9:DA:77:01:9E:63
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:73:af:c9:1f:e8:b5:00:ff:10:94:27:dd:41:a1:ec:76:e8:
22:dd:a3:86:f4:c0:90:8a:64:07:2d:6b:da:40:b6:88:dc:33:
53:35:e3:af:66:6c:33:f9:08:d3:9e:0a:10:16:96:3d:e3:fd:
1e:df:03:c4:1d:38:69:7c:d9:32:db:77:ba:bd:59:72:80:05:
ac:1c:81:f9:7c:38:96:15:a3:73:21:fe:f9:b7:90:4c:e3:a5:
29:0d:f6:48:e1:37:04:12:82:cc:61:df:69:34:dc:c2:b3:35:
a0:b0:a1:c7:ba:63:60:61:3e:00:bd:64:76:c4:1b:08:1c:03:
c3:3c:a7:a6:22:a2:d0:13:d3:9a:ce:90:81:9b:bb:df:cb:0d:
3b:c0:ea:e0:02:87:00:a1:4b:9c:fb:a1:fe:73:30:6a:03:75:
08:14:2e:10:90:c5:f5:f7:3e:48:cf:72:a7:af:cc:43:61:d4:
d4:21:d5:39:f6:0b:9b:fd:47:9a:b0:49:c5:56:7b:a2:f4:53:
b2:86:99:d0:8c:16:3a:c6:02:9f:c5:49:b6:f0:6f:a2:2b:46:
77:a8:12:29:b5:65:d8:4f:44:61:18:c1:cd:d2:a7:5c:9e:8b:
ea:31:f9:e8:d4:db:20:76:55:78:d7:e7:6b:d0:42:8b:c7:e6:
7b:fb:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:19 2025 by rpki-client