Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: FFNjkWJQgSKg09EafSf9qtc7pUwORSCV5Yd5iQa38v4=
Subject key identifier: 6F:6A:A6:B2:DD:99:51:89:DE:68:3A:E8:71:3D:D8:06:A0:6D:30:65
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 0199FD6B2205123CD2FA042FFBD65365A770
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 02E1
Signing time: Sun 19 Oct 2025 17:01:20 +0000
Manifest this update: Sun 19 Oct 2025 17:01:20 +0000
Manifest next update: Mon 20 Oct 2025 17:01:20 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: AoGHtHrlPzvX8f+t9J6OnOFMnaJ2v2OzwvJgCw59i3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:6b:22:05:12:3c:d2:fa:04:2f:fb:d6:53:65:a7:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Oct 19 17:01:20 2025 GMT
Not After : Oct 20 17:01:20 2025 GMT
Subject: CN=6f6aa6b2dd995189de683ae8713dd806a06d3065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:37:7a:cb:a2:7d:6c:11:2d:83:af:03:08:
08:f2:23:90:19:46:74:9b:c1:d4:3c:d3:81:b5:71:
70:b4:98:18:f5:b3:82:24:e0:95:66:96:a2:47:64:
84:11:f8:0a:28:8b:77:ed:eb:9c:37:1b:5a:8b:b0:
53:5b:dd:42:04:86:25:1f:02:33:3f:02:01:41:38:
6d:54:ba:35:6e:84:79:70:13:46:8b:b2:40:8d:3b:
76:2d:fa:09:87:07:c7:d6:c4:c0:b2:ce:a4:7a:fc:
9f:ef:0a:52:c4:40:5b:38:3d:86:ce:40:c2:26:bf:
69:4b:fd:b2:5e:93:38:6a:15:5c:03:58:b1:7e:fb:
88:37:20:80:7e:ff:23:37:89:24:ee:90:7c:71:9e:
c9:de:25:e5:6a:2b:4e:06:1a:7e:2b:cd:8e:81:ef:
a6:1f:ef:3a:62:62:72:f7:2e:32:21:37:62:1a:48:
87:b3:1a:97:3c:dc:9d:1f:e6:ba:de:ee:fd:25:d4:
e1:fa:e2:65:36:bc:da:65:fd:eb:95:85:fe:b5:21:
2a:5c:44:d3:81:63:d0:5e:a3:85:9e:5e:8e:00:b4:
71:8d:e9:4a:f2:6a:60:43:ce:37:88:e4:91:b3:e8:
04:3b:f3:79:38:5f:ce:94:a8:08:fb:f8:a7:16:2e:
02:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6A:A6:B2:DD:99:51:89:DE:68:3A:E8:71:3D:D8:06:A0:6D:30:65
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2d:f0:d6:df:5a:f7:c2:3b:7e:d4:7d:18:96:af:51:5e:fa:
92:2a:2b:68:1d:13:f0:ec:43:40:fc:bb:0c:56:5a:17:3e:9c:
bb:6e:74:be:25:65:a4:fb:db:17:dc:85:e8:1c:d6:d0:c0:f2:
36:80:f1:a9:fe:fc:39:c8:c8:86:47:5d:f3:22:f2:f8:ac:49:
f8:a3:fb:d3:14:bb:bd:f5:b1:6b:e3:d1:62:3a:fc:e1:6c:ac:
a0:d7:73:15:ed:d9:aa:f7:b1:83:79:ba:af:a2:f5:1a:62:f2:
37:02:5e:ca:4c:8b:ac:f6:f9:1a:58:77:39:49:95:ac:cf:c6:
a5:46:e8:01:db:57:71:55:17:7e:6a:ae:40:13:c6:23:c7:c3:
56:38:81:e9:eb:c2:1c:40:32:c4:e8:4b:97:65:cd:df:a7:fd:
3c:7c:43:93:c7:b4:41:65:ac:9d:d8:4b:68:12:b5:81:8f:38:
13:de:f7:bc:92:89:a0:e9:2e:17:42:54:95:c6:46:d2:b4:a6:
eb:f0:eb:0e:de:d8:2c:78:a9:87:f2:ab:78:ba:88:4d:14:be:
53:b7:2a:a1:0b:c8:1b:9f:9f:d4:64:f4:7b:d4:3f:3f:7e:ca:
47:1e:b8:be:f9:83:73:08:9c:c0:28:cf:3d:f0:97:cc:1b:8b:
28:34:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 22:37:00 2025 by rpki-client