Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
File: AhtowZzVXWul-GX7DdDW-MnZ49o.mft (raw, json)
Hash identifier: VVwyTE8C2U29LGduDdvEJSTVxUzVkoXaBoTCsnWHFAk=
Subject key identifier: A3:D1:11:75:94:0F:45:75:DC:08:29:8B:A9:4B:C8:6B:67:B1:89:59
Authority key identifier: 02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
Certificate issuer: /CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Certificate serial: 0197B6A235A18B88677EC155AF3230EA2C16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
Manifest number: 69
Signing time: Sat 28 Jun 2025 13:02:52 +0000
Manifest this update: Sat 28 Jun 2025 13:02:52 +0000
Manifest next update: Sun 29 Jun 2025 13:02:52 +0000
Files and hashes: 1: AhtowZzVXWul-GX7DdDW-MnZ49o.crl (hash: OBcVXkD+x98I6y2FVsOPa6PPhXcSaT0GdyHhh8uwfYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:35:a1:8b:88:67:7e:c1:55:af:32:30:ea:2c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021b68c19cd55d6ba5f865fb0dd0d6f8c9d9e3da
Validity
Not Before: Jun 28 13:02:52 2025 GMT
Not After : Jun 29 13:02:52 2025 GMT
Subject: CN=a3d11175940f4575dc08298ba94bc86b67b18959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:57:cc:61:22:03:61:e8:06:18:ce:05:90:8b:
20:8e:2d:e7:25:ff:72:0a:d8:0f:b3:f3:5d:76:ed:
54:2c:30:59:61:c0:57:33:f6:ba:87:3a:c5:7e:c5:
d7:9e:49:b9:3b:b9:04:cd:85:f0:1e:32:b2:67:19:
9c:02:10:08:c4:c4:26:5e:e2:e5:f3:7b:36:6d:6a:
8d:1c:80:82:1a:dc:5b:b5:c6:36:eb:62:a1:a1:2a:
2b:6e:16:22:1f:2f:bd:23:e0:dc:de:51:02:0e:68:
d0:eb:24:8e:94:43:bf:c1:cd:93:dd:25:55:36:34:
5c:f2:ed:0c:68:ce:f6:12:88:ca:2c:2d:02:dd:5e:
b8:86:53:f6:67:44:9b:01:22:b2:d0:6a:f6:69:a1:
eb:08:41:03:57:18:0a:76:4f:fc:40:75:08:01:cc:
41:59:64:f4:6a:cf:ad:34:5e:0a:e3:64:d3:c2:0d:
3b:e9:9a:0c:b5:d7:21:9f:79:31:00:7b:99:79:54:
7f:dd:73:8d:35:91:8d:20:92:52:68:26:1b:46:ac:
25:92:fb:c6:8e:77:c6:ce:44:2c:26:cb:7d:4c:42:
36:dd:e0:ab:4c:a9:1d:81:72:b3:15:df:f0:9f:75:
cf:b0:a6:77:8c:3e:e2:c7:ee:6c:9b:6e:d1:93:10:
8a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:D1:11:75:94:0F:45:75:DC:08:29:8B:A9:4B:C8:6B:67:B1:89:59
X509v3 Authority Key Identifier:
keyid:02:1B:68:C1:9C:D5:5D:6B:A5:F8:65:FB:0D:D0:D6:F8:C9:D9:E3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhtowZzVXWul-GX7DdDW-MnZ49o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/9c6167-ff9d-451b-84eb-7770e790720f/1/AhtowZzVXWul-GX7DdDW-MnZ49o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:41:88:f7:df:6f:7e:7a:cd:1c:33:f6:a7:7f:47:1e:e1:1e:
ed:0d:97:83:95:44:c4:90:c3:6f:89:cf:8b:f8:7b:44:c4:5b:
1d:f4:b6:9a:91:c1:16:a0:2d:65:75:b8:72:3f:2f:d8:88:9a:
5b:45:63:01:d0:7b:7c:3b:65:79:ca:70:8d:66:cd:22:49:ce:
19:06:9a:83:ac:db:36:68:d1:b8:50:6e:8a:b1:dc:79:2a:82:
6f:2e:6d:c2:58:dd:17:5a:2c:58:76:79:ba:b2:29:96:27:8b:
5d:7e:a8:3c:8a:81:8f:c5:03:ad:1c:9e:4c:0d:d1:d8:e1:b5:
0a:cc:99:3e:61:5d:d9:a1:21:64:07:bf:d7:f9:53:21:49:03:
e0:2c:7b:d2:ca:bb:28:65:d9:32:6c:27:ce:23:39:55:84:71:
53:d6:69:8d:32:a9:e2:d3:f6:71:ff:41:23:bd:4a:83:5b:d7:
cc:ae:5c:65:86:28:04:8d:74:39:50:d2:f8:75:1b:d2:27:87:
3f:77:66:69:33:3a:ad:85:60:b2:cf:ab:d1:22:d3:1b:2f:54:
3c:9b:28:c9:bd:92:56:2c:50:3c:36:8a:1a:c6:cc:01:87:17:
f2:dd:39:d4:1c:c5:7a:c0:a3:87:89:f6:03:77:26:ce:bc:56:
c1:ef:0e:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ojWhi4hnfsFVrzIw6iwWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyMWI2OGMxOWNkNTVkNmJhNWY4NjVmYjBkZDBkNmY4Yzlk
OWUzZGEwHhcNMjUwNjI4MTMwMjUyWhcNMjUwNjI5MTMwMjUyWjAzMTEwLwYDVQQD
EyhhM2QxMTE3NTk0MGY0NTc1ZGMwODI5OGJhOTRiYzg2YjY3YjE4OTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVfMYSIDYegGGM4FkIsgji3nJf9y
CtgPs/Nddu1ULDBZYcBXM/a6hzrFfsXXnkm5O7kEzYXwHjKyZxmcAhAIxMQmXuLl
83s2bWqNHICCGtxbtcY262KhoSorbhYiHy+9I+Dc3lECDmjQ6ySOlEO/wc2T3SVV
NjRc8u0MaM72EojKLC0C3V64hlP2Z0SbASKy0Gr2aaHrCEEDVxgKdk/8QHUIAcxB
WWT0as+tNF4K42TTwg076ZoMtdchn3kxAHuZeVR/3XONNZGNIJJSaCYbRqwlkvvG
jnfGzkQsJst9TEI23eCrTKkdgXKzFd/wn3XPsKZ3jD7ix+5sm27RkxCKBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKPREXWUD0V13Agpi6lLyGtnsYlZMB8GA1UdIwQY
MBaAFAIbaMGc1V1rpfhl+w3Q1vjJ2ePaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi85YzYxNjctZmY5ZC00NTFiLTg0ZWIt
Nzc3MGU3OTA3MjBmLzEvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi85YzYxNjctZmY5ZC00NTFiLTg0ZWItNzc3MGU3OTA3MjBm
LzEvQWh0b3daelZYV3VsLUdYN0RkRFctTW5aNDlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo0GI999v
fnrNHDP2p39HHuEe7Q2Xg5VExJDDb4nPi/h7RMRbHfS2mpHBFqAtZXW4cj8v2Iia
W0VjAdB7fDtlecpwjWbNIknOGQaag6zbNmjRuFBuirHceSqCby5twljdF1osWHZ5
urIplieLXX6oPIqBj8UDrRyeTA3R2OG1CsyZPmFd2aEhZAe/1/lTIUkD4Cx70sq7
KGXZMmwnziM5VYRxU9ZpjTKp4tP2cf9BI71Kg1vXzK5cZYYoBI10OVDS+HUb0ieH
P3dmaTM6rYVgss+r0SLTGy9UPJsoyb2SVixQPDaKGsbMAYcX8t051BzFesCjh4n2
A3cmzrxWwe8Ogw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:45 2025 by rpki-client