Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
File: ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft (raw, json)
Hash identifier: yZnHDj7vGK9pXrXrsgJhrGOO9QjmA61+nMkTAV/VjNE=
Subject key identifier: 67:3A:96:D4:6F:21:20:87:4C:46:EF:6D:07:52:74:C7:B5:A9:1A:77
Authority key identifier: 6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
Certificate issuer: /CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Certificate serial: 0198D5F17D5A4507F67211E696EF48499A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
Manifest number: 0248
Signing time: Sat 23 Aug 2025 08:00:29 +0000
Manifest this update: Sat 23 Aug 2025 08:00:29 +0000
Manifest next update: Sun 24 Aug 2025 08:00:29 +0000
Files and hashes: 1: ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl (hash: 2sGzh8emjhjWmTGy5+0Sg8xa+vT8JGJJeowpDxcVrU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:7d:5a:45:07:f6:72:11:e6:96:ef:48:49:9a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a1c4819d0e19dfa740d8451af1398d230c6d84e
Validity
Not Before: Aug 23 08:00:29 2025 GMT
Not After : Aug 24 08:00:29 2025 GMT
Subject: CN=673a96d46f2120874c46ef6d075274c7b5a91a77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:d8:92:69:05:5b:6b:2c:02:74:27:d8:84:
1d:48:e0:e9:a7:4a:f8:47:af:af:86:45:47:17:01:
25:b2:71:be:56:60:c0:de:7e:da:ef:ae:dc:89:85:
ad:c3:b3:40:e9:81:88:f1:93:28:93:5a:f9:27:81:
9a:eb:d9:db:38:18:78:c2:ad:64:23:84:8e:89:48:
0f:c9:64:f6:69:0c:f0:19:3f:75:6e:b2:66:3d:cc:
c3:0c:87:45:6a:ba:98:17:86:a1:03:9b:57:37:6a:
56:6d:5d:19:55:20:ab:10:a1:20:2e:61:1e:7c:78:
21:b7:75:64:c6:f5:6e:98:c0:0e:43:b5:5f:38:21:
e4:bc:88:4c:29:90:95:26:e5:75:44:de:96:63:db:
b4:06:f1:1a:17:0e:13:9b:6a:19:65:fe:56:b5:9c:
62:b9:07:4c:f9:c0:40:79:33:c8:86:14:96:75:6e:
1d:f1:2d:a5:55:7c:ad:95:a7:b8:ec:a6:9c:46:7b:
63:39:d6:9e:34:1d:22:b4:a6:fd:c2:ac:8a:13:76:
a4:31:95:78:9d:e5:4e:78:15:26:41:b0:3f:ce:e9:
c3:1f:26:df:01:69:84:64:4f:52:c4:b2:23:18:17:
a6:77:c2:c3:80:f6:84:b1:93:e3:2d:5b:62:64:2d:
6f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3A:96:D4:6F:21:20:87:4C:46:EF:6D:07:52:74:C7:B5:A9:1A:77
X509v3 Authority Key Identifier:
keyid:6A:1C:48:19:D0:E1:9D:FA:74:0D:84:51:AF:13:98:D2:30:C6:D8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ahxIGdDhnfp0DYRRrxOY0jDG2E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/1a3f4b-b08a-45ab-a476-d7b28d2a82b1/1/ahxIGdDhnfp0DYRRrxOY0jDG2E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:da:7b:c2:bf:7a:28:5c:bf:8e:ad:2d:d9:bb:fc:34:4f:d1:
c2:91:23:0f:cc:15:b8:2a:69:4b:c9:09:3a:e0:94:1d:bb:2b:
e6:7f:b3:f9:b7:60:5b:6b:34:f0:72:12:54:5b:d7:09:ab:a7:
2d:1a:43:1f:63:cc:0f:cc:70:4b:04:76:05:0f:0f:da:db:6c:
fe:d5:ef:2c:5b:7e:68:20:89:ac:bc:ac:70:bb:e9:ec:be:a4:
35:56:fd:bc:6a:c9:04:70:74:fb:c1:a0:b0:eb:fb:07:29:d4:
b6:63:83:57:db:b1:53:9b:5b:13:eb:dc:06:d4:a2:c7:29:33:
11:c7:f0:5e:c9:b3:71:b3:50:f3:c8:35:9d:85:00:b7:65:48:
0b:24:87:a5:15:44:f6:98:88:76:d3:74:30:d7:d8:e5:85:66:
35:9e:2d:a8:d9:10:31:28:78:a1:3c:c5:dc:1a:c1:02:4e:5b:
8b:1e:df:7e:84:a6:9b:0b:a6:8a:7a:2c:4f:3e:a0:de:17:9f:
f5:fc:a6:30:8a:32:d4:c2:8f:2f:a8:eb:06:c2:e9:20:ae:8a:
47:b0:c7:17:83:7e:39:0f:6e:3c:33:13:71:2f:9c:e9:2b:e0:
38:04:4c:01:71:9e:a1:1d:08:ce:33:93:46:5c:f3:29:04:e8:
3b:ae:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:42 2025 by rpki-client