Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
File: AhaSppUBf7XEv4wjgHjzA9j78Ic.mft (raw, json)
Hash identifier: ZdH0QO705tALUA4S9WEUHhXLqe6NlbDiLt2LnE5nHBM=
Subject key identifier: 08:B6:AC:A9:41:A3:A9:ED:53:70:AC:A5:9D:6F:5F:60:60:9B:93:2A
Authority key identifier: 02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
Certificate issuer: /CN=021692a695017fb5c4bf8c238078f303d8fbf087
Certificate serial: 0198D473C9D8C7B8B2C670A88590EFBE9729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
Manifest number: 1645
Signing time: Sat 23 Aug 2025 01:03:34 +0000
Manifest this update: Sat 23 Aug 2025 01:03:34 +0000
Manifest next update: Sun 24 Aug 2025 01:03:34 +0000
Files and hashes: 1: AhaSppUBf7XEv4wjgHjzA9j78Ic.crl (hash: N4WftYgMfAlbayDV1qtj/l8Ue8K0SeCLKl1Z7FOb3K4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:c9:d8:c7:b8:b2:c6:70:a8:85:90:ef:be:97:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=021692a695017fb5c4bf8c238078f303d8fbf087
Validity
Not Before: Aug 23 01:03:34 2025 GMT
Not After : Aug 24 01:03:34 2025 GMT
Subject: CN=08b6aca941a3a9ed5370aca59d6f5f60609b932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:78:b1:f3:12:05:73:12:31:03:47:f2:f5:
20:c8:5f:23:39:6c:c2:7c:f6:fe:90:09:a0:09:f8:
2f:d0:16:90:25:86:03:8f:fd:50:2d:84:80:d9:e5:
d9:50:d9:35:e6:22:27:db:13:fc:14:bb:b8:67:7c:
9f:50:fc:ba:0e:b4:40:4b:92:4e:5a:f9:b0:bd:4a:
d9:40:0a:e3:2d:9c:2b:88:0d:b1:8f:30:6f:40:62:
a0:a5:b3:f0:c1:12:89:92:bd:82:5a:39:90:6e:45:
52:fc:1d:e4:b9:ac:b6:bf:a5:1b:28:8b:34:4a:e3:
f9:f4:5c:6a:33:29:08:47:fd:85:d5:b1:9a:49:bc:
5b:70:0c:48:f2:9f:31:80:5e:ea:13:0a:30:80:b7:
08:49:f5:ab:99:ee:55:a1:15:25:c1:12:ed:20:c5:
65:11:ca:29:25:e5:4e:26:26:ab:a8:b5:e0:9d:61:
d2:cb:f6:9e:97:e9:7f:4c:ac:08:97:aa:ab:65:79:
49:b0:c1:b7:1c:6a:e2:ba:9e:c1:e5:25:f6:c4:76:
9b:ac:bb:d5:42:47:26:da:54:0c:7c:33:d3:15:85:
c1:8b:20:67:14:5c:8a:39:5a:76:1b:60:71:75:87:
9c:51:ee:65:c6:60:26:0d:d6:9a:e1:94:cb:34:d4:
0d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:B6:AC:A9:41:A3:A9:ED:53:70:AC:A5:9D:6F:5F:60:60:9B:93:2A
X509v3 Authority Key Identifier:
keyid:02:16:92:A6:95:01:7F:B5:C4:BF:8C:23:80:78:F3:03:D8:FB:F0:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AhaSppUBf7XEv4wjgHjzA9j78Ic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/13bed5-8d34-4d3d-8e05-48d25c0a495f/1/AhaSppUBf7XEv4wjgHjzA9j78Ic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:c1:5e:8a:b2:17:51:cf:5f:f7:c9:93:21:f7:92:52:fc:
15:85:6c:d0:18:45:bd:b0:11:3b:a3:b5:2e:69:e7:b8:c0:68:
26:bf:30:67:27:ba:c9:5c:e3:b9:48:cd:df:a7:5e:e1:ba:9d:
b4:5a:b5:89:f8:1b:b9:2a:b2:4a:2e:9d:be:87:3b:9c:ba:a7:
f8:e5:dd:9c:98:06:3a:99:ad:25:12:57:6f:8c:d3:9a:67:3a:
69:55:60:2f:e8:f4:05:0a:c2:22:ab:06:5d:a2:8e:27:83:c9:
96:cf:e2:7f:7d:48:c2:bc:3e:85:1b:44:0a:c2:4a:a7:0e:49:
b1:bf:0e:46:5f:b4:3d:d6:e1:50:3a:5b:88:62:09:b1:ff:2e:
91:c5:b5:af:93:b0:7c:f7:8f:de:c7:9d:05:c2:4d:c1:1e:49:
d0:29:3a:61:95:8a:38:56:c6:df:90:88:78:f4:0f:3c:2a:e8:
78:83:f7:d4:18:40:43:0d:71:f5:c4:24:1e:07:ce:83:8b:6f:
36:c8:db:fb:fb:5d:9d:2b:f9:25:38:67:b8:a9:5e:0a:9d:09:
54:6a:26:cc:14:3e:e4:31:21:6d:5b:d5:9c:2b:37:b0:93:1d:
e0:58:cb:30:68:2a:9b:c7:85:76:13:df:0f:94:3a:ac:85:b2:
98:6d:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:10:02 2025 by rpki-client