Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
File: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft (raw, json)
Hash identifier: rf8/OHWkZt+cF8dfTXE34ksknxfcp6W+rz5N/tdutPU=
Subject key identifier: 29:D9:B3:24:6F:3C:2F:3C:33:62:D2:57:A4:3B:33:F3:27:30:14:BE
Authority key identifier: 00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
Certificate issuer: /CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Certificate serial: 0197B6325EF6E705ED0601159B6B594B890F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
Manifest number: 1548
Signing time: Sat 28 Jun 2025 11:00:43 +0000
Manifest this update: Sat 28 Jun 2025 11:00:43 +0000
Manifest next update: Sun 29 Jun 2025 11:00:43 +0000
Files and hashes: 1: AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl (hash: /jEZFj9MFFOOJpVzHNT+KyibFNUs/dexhh4wfmBvaLM=)
2: RZsQW2mn0p77cUSrDj82xlpY4kU.roa (hash: PgZwlEZ/SO6/ySPSoJ7naRU3kSxO9+Lme8pB8HNwF8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5e:f6:e7:05:ed:06:01:15:9b:6b:59:4b:89:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0074ec3ec53f52f7f52835bb510ab6bedaa00a3d
Validity
Not Before: Jun 28 11:00:43 2025 GMT
Not After : Jun 29 11:00:43 2025 GMT
Subject: CN=29d9b3246f3c2f3c3362d257a43b33f3273014be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:33:51:74:b4:4c:4f:26:a2:a8:e8:10:16:b7:
36:51:6f:d3:24:5f:42:12:d8:10:ce:fe:58:83:c2:
d6:55:87:ae:8c:fb:5e:7d:2c:80:7c:5a:63:d7:be:
fe:59:5e:0a:2e:1e:3a:37:10:dd:a6:11:2e:4a:18:
1b:8c:dc:5c:88:a0:09:15:d5:04:d1:88:70:c0:43:
24:db:33:a6:01:cd:d4:2b:7f:bb:18:9b:39:6a:30:
23:af:83:9c:52:06:b8:57:36:37:a2:20:97:dc:36:
18:3a:a9:f2:8f:01:b7:cd:33:62:0d:35:c3:9e:95:
d7:55:ca:a6:20:b8:0d:52:db:d0:9f:db:17:a5:e3:
7d:29:19:b5:60:fd:03:b0:86:c3:fd:26:85:e2:11:
d1:8a:d1:ac:89:f8:c8:ad:d9:4f:4a:18:0b:6c:fc:
c7:90:17:09:0e:04:5b:3d:4e:c5:6d:a6:16:af:a9:
e0:1a:b3:56:4a:70:03:81:9e:89:8b:3f:6f:02:42:
80:38:32:99:47:24:96:7b:f5:a6:de:1f:3c:0b:45:
a2:80:37:15:f8:40:d7:c3:e0:d9:1e:ed:ee:88:05:
70:76:3b:7d:d8:97:fe:7b:44:e6:9b:fa:0c:5f:4b:
86:3f:a6:34:f1:4a:8d:6d:e8:d0:8d:7a:e3:f6:72:
f1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:B3:24:6F:3C:2F:3C:33:62:D2:57:A4:3B:33:F3:27:30:14:BE
X509v3 Authority Key Identifier:
keyid:00:74:EC:3E:C5:3F:52:F7:F5:28:35:BB:51:0A:B6:BE:DA:A0:0A:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/908a8a-58db-4509-a285-1ac2edda8e2a/1/AHTsPsU_Uvf1KDW7UQq2vtqgCj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e4:58:0e:8c:fc:97:c9:b4:08:8b:bb:2f:f8:b6:28:91:3a:
0d:72:67:aa:20:d5:8d:61:2f:ac:b7:62:5f:50:a2:a5:0b:f3:
a0:06:7e:26:cf:f6:f6:ce:96:91:f3:a1:a9:15:99:03:97:51:
91:ad:0e:7f:ea:9d:f7:74:60:9c:33:a8:4c:6c:55:b5:29:e5:
4c:db:48:d6:26:e2:48:08:5c:4d:8d:9d:a7:f7:47:3d:96:28:
3f:15:e5:ba:b4:ea:d9:fc:91:38:9f:7e:c9:35:42:82:6e:ce:
cd:76:e4:6f:9b:ce:68:11:1e:46:0e:c9:c2:b2:16:f7:24:2b:
b0:4e:6b:54:b6:7b:62:a6:a0:97:6f:8b:8d:d3:2d:60:27:43:
21:d2:ff:7f:bf:1d:2a:64:ab:f8:f7:f5:30:82:d4:7a:8d:fd:
94:58:fe:6c:ed:22:19:de:0a:7e:e4:80:58:eb:27:8e:66:5f:
6b:80:9a:a3:f0:60:7b:e8:f0:d9:69:c4:91:50:36:95:5f:8e:
d9:80:01:5c:07:30:34:ec:76:b7:7d:ea:0a:39:35:3f:fb:17:
e3:f6:9b:44:aa:04:4c:f8:e9:4c:e5:ca:3f:70:94:7f:18:55:
e2:c3:77:31:34:45:57:7e:d3:f0:e7:58:ab:9e:68:dd:2d:79:
5e:db:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:50 2025 by rpki-client