Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: DgEnXKyUzDNMq8mR1C0bYBxOF7fupB0Y2SBj7sAdZXI=
Subject key identifier: B2:9C:9B:63:BB:E2:92:47:C6:E9:C7:7F:15:D8:82:22:16:3E:26:BF
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 0197B6A0571DB3C340ECF83E62733C144149
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:50 +0000
Manifest this update: Sat 28 Jun 2025 13:00:50 +0000
Manifest next update: Sun 29 Jun 2025 13:00:50 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: TRCiwC92XQvSgiAeS/2dzaGYE6IpJwMFTyGkWZcWroA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:57:1d:b3:c3:40:ec:f8:3e:62:73:3c:14:41:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Jun 28 13:00:50 2025 GMT
Not After : Jun 29 13:00:50 2025 GMT
Subject: CN=b29c9b63bbe29247c6e9c77f15d88222163e26bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:7a:6f:7c:bb:c8:60:bd:fb:3c:bb:c1:5b:98:
42:6d:d1:29:54:8a:d8:f3:0d:07:a4:2c:60:3b:94:
7b:3e:1a:50:32:8a:32:b1:86:b3:f0:0f:aa:fd:a2:
cc:42:54:be:f9:76:07:dd:4b:2d:fb:f2:e4:58:6b:
3f:c5:db:8d:df:82:f7:71:5f:28:12:95:88:80:f2:
e3:94:52:25:cd:af:f6:77:bb:2c:81:63:8b:c3:83:
03:f4:2e:d5:9e:f9:1e:ee:ce:99:3f:47:2b:14:44:
b3:3e:9d:ad:b2:f1:c0:75:ef:9d:88:4b:02:d4:74:
e5:f9:10:01:b4:3e:9b:e6:97:87:78:40:66:96:71:
b9:4e:d2:13:66:06:b7:23:9a:74:f7:07:87:91:dd:
66:6c:1a:73:e9:b3:79:4f:b6:af:16:e3:d1:f3:49:
b6:30:12:69:d9:98:5d:80:e0:25:d3:f7:54:28:94:
50:27:a4:32:6e:49:68:27:b2:b3:83:31:4c:90:5b:
8b:0a:c7:ba:42:db:a0:b2:01:92:55:95:3e:24:41:
2c:cd:4d:d4:8a:93:b4:cf:56:f4:bc:65:01:8d:c5:
f0:8d:35:ba:aa:55:31:20:89:89:71:28:22:e2:95:
d9:4a:18:0f:6e:c1:6d:be:1d:7e:d4:72:25:b3:b2:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:9C:9B:63:BB:E2:92:47:C6:E9:C7:7F:15:D8:82:22:16:3E:26:BF
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:ed:ee:10:30:b2:88:d1:2f:79:fb:6f:cf:95:2b:9a:10:09:
0c:f2:96:37:be:ed:5d:84:50:de:1b:c1:97:43:84:1d:e6:c1:
65:d5:16:18:98:f2:62:80:d5:3c:1c:b6:c6:75:9f:24:36:a5:
3c:85:26:a1:8e:90:de:44:1b:65:9f:ab:1d:de:c1:88:57:62:
5c:f3:97:45:b6:88:1f:4b:75:46:d3:d7:93:92:d0:7d:f3:8f:
ca:2d:62:2f:8a:d6:14:15:02:ab:2e:b0:ed:3b:c5:bb:69:e6:
88:1d:f2:3c:5b:3a:21:98:0d:6a:21:79:f8:4a:e5:06:79:7a:
59:09:35:bb:fc:dc:26:29:0a:a1:fc:55:4a:e4:d2:46:cc:0a:
57:70:7d:17:30:d4:97:b6:8c:5a:6b:01:65:cc:35:07:3b:bc:
e5:23:06:9c:e4:f0:bb:01:3b:53:56:b2:c9:22:4e:57:c9:ab:
a6:1d:b1:6d:f9:5a:e7:d4:34:c9:8b:69:ca:c3:7e:19:ef:ba:
19:61:f0:9f:fc:d4:ba:e8:37:27:12:a3:68:cd:0c:a2:b1:21:
72:d0:f9:8a:cf:a3:05:cc:6f:62:79:8d:57:7c:d3:c0:10:c2:
d4:71:ab:50:50:f6:08:f1:c9:50:a9:f7:c0:85:8d:93:c4:5a:
a3:56:60:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:25:00 2025 by rpki-client