Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
File: Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft (raw, json)
Hash identifier: 5oWxn4GyaI++PGggy0PRC/qOd+NM/TlBq+TE6WYYz80=
Subject key identifier: 1C:E7:12:BA:54:BF:86:F9:4D:47:73:7E:52:F5:09:91:12:E8:08:2D
Authority key identifier: 02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
Certificate issuer: /CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Certificate serial: 0197B7451F601DABB1CA6E6D779BD775BAA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
Manifest number: 1093
Signing time: Sat 28 Jun 2025 16:00:49 +0000
Manifest this update: Sat 28 Jun 2025 16:00:49 +0000
Manifest next update: Sun 29 Jun 2025 16:00:49 +0000
Files and hashes: 1: Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl (hash: +d/qU62mb5Ov8Mp7XMdW79/quYZ4CI+DRb3/A+sUT4M=)
2: fVmkukCoNZRcRoc3LS-TXPrqhnE.roa (hash: jN7loYTxoFJMSibKv+JC0+n6QXqAWoukHaK+yW79eHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:1f:60:1d:ab:b1:ca:6e:6d:77:9b:d7:75:ba:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021ab3dd22c333a79b6ff30aab7f2e036fc370aa
Validity
Not Before: Jun 28 16:00:49 2025 GMT
Not After : Jun 29 16:00:49 2025 GMT
Subject: CN=1ce712ba54bf86f94d47737e52f5099112e8082d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:23:c6:54:ba:c2:a7:57:1b:7a:42:49:39:60:
a8:1b:7b:a5:97:bc:4b:3a:bb:20:89:15:da:f0:67:
55:a5:8f:d5:29:f0:5b:d1:94:8f:63:89:f3:76:b5:
e3:9c:a3:14:f8:c5:fb:d7:b5:29:84:14:86:69:73:
c2:68:57:95:69:12:9b:b3:6d:cb:81:62:eb:bf:ea:
b7:e2:5b:82:f1:27:b0:45:92:dc:7c:c8:0d:e9:4e:
56:36:36:62:ab:ec:cb:b8:1c:03:d3:7b:2b:c8:e7:
80:9f:bb:33:bd:18:f8:f3:98:5d:ff:55:38:e4:3c:
04:c9:21:b0:4f:61:85:7b:00:03:87:fa:3c:5b:90:
55:02:e6:75:78:e9:bb:48:ce:59:d5:b9:17:d4:32:
28:cf:0f:82:6f:20:e3:b1:19:9b:1d:3f:e0:f3:b8:
b0:9b:77:a9:f7:ce:37:27:14:73:b8:bd:09:1c:fd:
0b:7e:93:12:b3:3b:f4:f4:64:0e:44:c0:15:1f:96:
e6:61:8c:6c:dd:b7:ab:ed:1d:d4:20:5f:0b:39:75:
63:4c:83:0c:80:d4:b9:28:d2:07:ea:61:da:fa:f4:
3c:51:5b:e8:41:f0:68:cc:6a:0f:38:64:f0:87:4d:
9d:e5:b2:63:83:fa:8d:4f:b0:c8:1b:12:6a:4c:d2:
eb:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E7:12:BA:54:BF:86:F9:4D:47:73:7E:52:F5:09:91:12:E8:08:2D
X509v3 Authority Key Identifier:
keyid:02:1A:B3:DD:22:C3:33:A7:9B:6F:F3:0A:AB:7F:2E:03:6F:C3:70:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ahqz3SLDM6ebb_MKq38uA2_DcKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/00fbb6-dea2-4c7b-afad-4acec647572d/1/Ahqz3SLDM6ebb_MKq38uA2_DcKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2f:b4:85:2c:a4:82:ed:bb:a6:94:ef:59:17:8a:df:01:76:
c0:9b:0f:ab:93:b0:a1:a5:96:0c:17:c6:35:78:27:f6:50:9e:
0f:60:af:d2:c6:79:db:c8:c0:f0:36:25:0f:e3:99:40:3f:be:
8e:ba:54:95:3e:35:0c:25:7a:a0:df:6d:9d:27:ea:eb:9a:6c:
01:9b:3e:e1:2c:e2:8d:04:a1:1f:8a:b4:b6:3e:19:1a:a0:aa:
84:c7:6c:61:e7:c9:e9:df:e8:85:cc:66:a8:d7:b2:95:f9:15:
96:20:54:32:40:ae:7d:64:ee:34:64:e8:f7:ae:3f:50:4e:77:
2a:4d:80:4f:16:4d:96:14:1f:ac:02:90:7b:81:d3:d9:3c:4b:
06:96:be:61:23:5d:58:bd:bb:9c:24:fa:02:f2:71:a3:6b:3b:
eb:1c:b1:fa:72:a7:05:49:57:d2:b2:a3:0c:99:c3:87:29:6c:
1b:17:17:96:91:b6:f9:ab:15:63:78:04:99:ae:62:12:d5:af:
ff:fa:70:3b:12:0a:6e:6c:53:e5:10:91:87:e5:a0:66:8b:39:
61:24:58:fc:17:07:89:73:17:0d:43:7a:93:6b:3a:16:38:40:
7d:fe:af:2a:75:76:89:01:70:c3:dd:2f:fb:5b:42:18:8c:ab:
8b:b3:2d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:02 2025 by rpki-client