Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: Jezg0hKjdsdWQb8SybUgfWgxzKmurUrlec08xcepzNk=
Subject key identifier: CE:4A:CE:6B:7D:48:2E:EB:5F:DC:DA:78:45:AB:30:A4:3E:59:8B:00
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 0199FBEB53F0BA140158405E3C7E851A3E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 16DE
Signing time: Sun 19 Oct 2025 10:02:07 +0000
Manifest this update: Sun 19 Oct 2025 10:02:07 +0000
Manifest next update: Mon 20 Oct 2025 10:02:07 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: vvAH8WQCbfxXVNETVNOUypk2DDms9iyv7QNk0ZnnSr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 10:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fb:eb:53:f0:ba:14:01:58:40:5e:3c:7e:85:1a:3e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Oct 19 10:02:07 2025 GMT
Not After : Oct 20 10:02:07 2025 GMT
Subject: CN=ce4ace6b7d482eeb5fdcda7845ab30a43e598b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:b9:f6:a8:5a:59:c7:a6:48:e5:c4:b2:ed:
d5:8d:a1:3c:47:9e:68:a0:8c:61:cd:65:6e:12:e2:
05:55:00:dc:4b:fd:8d:7b:21:b7:89:42:2d:7f:a7:
77:41:7d:3c:8b:c6:d4:17:d1:c6:20:92:76:cd:83:
71:7a:2f:17:4c:36:b3:86:84:8f:70:17:34:96:96:
98:d4:6f:59:de:d8:bd:ab:49:f0:3d:a8:90:ea:6b:
e8:95:49:5f:59:56:19:cc:8c:5d:64:14:e2:59:e4:
09:fe:a3:66:cf:f7:c3:cb:09:32:fc:0d:ee:48:c9:
f6:d0:fa:fa:66:0a:59:f2:5b:90:b6:6e:a4:ca:b4:
a4:8e:e8:55:65:a3:a8:52:d7:b0:77:a8:0c:92:6b:
05:9c:5f:a5:27:d3:e1:f6:ed:99:70:bb:31:db:e8:
8b:ff:55:a5:f0:6b:dd:68:0c:35:c5:cd:2c:34:7c:
75:2a:d1:55:9b:24:ba:95:61:dc:54:54:39:6d:f5:
a7:94:e0:5a:33:cc:16:52:1d:57:7b:c0:53:41:99:
ec:01:f5:db:4d:7a:8d:ab:30:c6:91:35:6d:b2:62:
de:f5:01:00:55:01:80:51:83:d1:63:2d:47:16:44:
18:1c:99:be:73:a4:2b:ea:c1:9c:6e:d1:eb:0e:6f:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:4A:CE:6B:7D:48:2E:EB:5F:DC:DA:78:45:AB:30:A4:3E:59:8B:00
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:fc:d7:e8:83:ff:39:8c:d4:f6:17:d6:1b:bf:7e:8f:fa:30:
b2:d1:da:fb:a5:dd:2b:69:85:66:d1:eb:f9:0b:5b:0b:4a:1f:
24:7a:32:03:92:a9:e0:1b:ba:3d:a7:b3:8c:40:07:66:ee:48:
3b:2f:21:35:6c:b5:49:f1:19:39:aa:76:5c:36:73:a6:7d:1a:
94:4a:ae:38:24:e1:83:af:0f:6a:21:47:43:97:de:6e:a4:42:
e1:bb:96:65:86:6b:d6:fb:f7:22:84:10:76:66:cb:0c:88:d6:
ba:4b:a4:7f:6a:80:64:4b:50:ff:8a:96:a2:bd:57:dd:ee:2b:
39:f9:e1:41:ee:55:7d:c6:b5:8c:69:74:3d:d9:8a:a5:15:c7:
83:79:2e:ca:f6:74:c1:b9:1a:b6:6f:6a:86:aa:78:84:41:ec:
cb:fe:fc:0b:f0:79:d4:4d:40:5d:27:da:75:6b:a3:4f:62:94:
29:4b:34:2e:97:bd:99:ad:d4:88:55:f1:a1:d7:2f:1d:81:34:
34:dd:31:bf:2a:ea:71:8d:52:57:54:d2:28:5b:21:bb:b7:dd:
8b:42:cc:e3:2b:3a:26:97:e2:5f:82:a2:89:1d:e0:98:ea:b4:
ac:6d:18:10:2b:83:79:aa:d2:29:03:ce:1d:b9:f2:15:d2:14:
1d:0d:80:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:27:06 2025 by rpki-client