Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
File: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft (raw, json)
Hash identifier: 4L90FB+vr8oMLVEdOEr7G6rbbhEnT7KCiJ8O5DhRZDA=
Subject key identifier: DA:05:30:C4:83:73:1A:8A:03:AD:61:D2:46:4D:FB:24:EF:7B:70:84
Authority key identifier: 6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
Certificate issuer: /CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Certificate serial: 0199FC58E579DC504774EA1A494B4BD799CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
Manifest number: 137A
Signing time: Sun 19 Oct 2025 12:01:48 +0000
Manifest this update: Sun 19 Oct 2025 12:01:48 +0000
Manifest next update: Mon 20 Oct 2025 12:01:48 +0000
Files and hashes: 1: NCqzEDAkcdOF_5QXBG8yJjG5C8E.roa (hash: 3y6ZaPdmVv7AeJPbPV9rY47Ckca5BlO8ayxRNoPx1Jg=)
2: ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl (hash: W/MLGwpNkP35Kj+aAs9z7MQmLXBRUp0Vzu6TQqLCQNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:e5:79:dc:50:47:74:ea:1a:49:4b:4b:d7:99:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a187ca5b8aee195cc8cadcfb48c544b181477ef
Validity
Not Before: Oct 19 12:01:48 2025 GMT
Not After : Oct 20 12:01:48 2025 GMT
Subject: CN=da0530c483731a8a03ad61d2464dfb24ef7b7084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:27:2a:00:24:8c:dc:12:e0:a6:01:92:09:b7:
be:9b:4c:51:17:9f:05:44:66:05:35:14:1f:f7:b4:
a0:86:b8:6f:9b:b9:79:98:f9:44:ba:a6:2a:da:4f:
d8:c3:57:55:17:f5:ee:69:82:f8:e8:93:ef:9b:8f:
f1:89:dc:03:f7:da:0a:ff:65:2b:ab:c7:9d:5b:a1:
d6:fe:d1:e0:44:6f:92:32:a6:6a:40:d9:44:2a:ae:
d6:fb:09:15:09:cd:26:44:43:35:b4:33:95:8b:d0:
2a:cc:81:e8:21:39:bd:55:5b:10:dd:2b:f7:af:85:
d0:1f:e5:83:12:be:0d:14:e8:9e:34:5f:10:8a:af:
61:ff:59:b5:af:6f:41:f3:01:35:b9:b9:f2:14:46:
ec:ba:18:50:03:0b:5e:66:81:af:2c:5f:f1:be:cc:
f6:77:be:e8:bc:77:3c:19:86:7e:31:11:c6:8a:d4:
53:d7:17:08:52:ae:a9:a2:b0:95:07:85:9b:c6:9d:
7b:17:6e:82:61:0c:f2:d2:f2:75:41:a1:d4:1f:3e:
36:fc:18:82:3d:2e:68:4f:8e:70:6a:56:27:c2:65:
ee:92:33:35:80:37:79:62:55:b1:b7:51:f6:99:e4:
3f:65:63:3e:77:c0:06:a2:a3:ad:bd:e2:a9:b8:2c:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:05:30:C4:83:73:1A:8A:03:AD:61:D2:46:4D:FB:24:EF:7B:70:84
X509v3 Authority Key Identifier:
keyid:6A:18:7C:A5:B8:AE:E1:95:CC:8C:AD:CF:B4:8C:54:4B:18:14:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/95c08b-5056-4386-a42b-bf03dc837900/1/ahh8pbiu4ZXMjK3PtIxUSxgUd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:5b:74:04:41:a4:d6:97:dc:84:30:86:5b:ad:3e:e3:75:6f:
c2:1c:da:f9:8b:b1:53:d0:fb:7a:3d:7f:40:95:04:88:94:3c:
f4:da:08:e3:42:bb:b4:2c:81:d3:0c:f2:b5:06:12:f9:f1:fe:
28:95:1f:c8:9c:6a:9d:86:06:54:aa:26:7b:12:56:d5:03:06:
5a:1e:b9:9f:9b:87:37:6e:04:43:0c:40:d5:e5:2b:90:27:50:
04:ba:90:a1:1f:ab:d7:ae:7f:59:cf:7c:b4:33:fe:eb:fd:bd:
13:ec:6c:d9:42:9a:e7:2c:68:66:2a:08:7b:a3:ef:72:77:ec:
28:85:ef:c7:47:86:05:a4:35:2d:1d:67:cf:09:ad:df:2e:0b:
97:10:26:a9:6c:e2:0c:43:c1:d0:97:10:32:2c:f3:63:6e:1c:
0f:32:48:98:f7:35:3f:86:57:39:7d:3a:d9:08:89:71:b8:df:
7b:8b:ac:a9:95:8e:48:e1:ae:8a:a1:6d:5f:04:d3:45:6d:13:
cc:ac:e3:92:30:6e:f3:b0:9d:4d:2f:76:ab:c8:ed:a9:3a:45:
41:0d:01:2c:f0:54:f6:33:12:d7:6b:bc:3c:40:08:06:4c:d2:
33:a5:d1:35:7e:2b:1c:a1:e2:e7:e3:a2:5c:b1:b3:71:a5:be:
41:70:88:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:05:48 2025 by rpki-client