Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: LnI8rpAh4ABgJWcBms8Z4GZAYCL6grehPbmtzQmfA9s=
Subject key identifier: 34:40:31:FB:10:FA:B3:35:94:E0:25:3B:CB:B4:0E:BB:D1:1C:DC:71
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 019A00A2F591B70601456EA1B89681AD79F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 1376
Signing time: Mon 20 Oct 2025 08:01:10 +0000
Manifest this update: Mon 20 Oct 2025 08:01:10 +0000
Manifest next update: Tue 21 Oct 2025 08:01:10 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: fxWxM+Xutvrf5SOQ+xtyPpFZ2nDnE0t4MJfucgOlVd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 08:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:00:a2:f5:91:b7:06:01:45:6e:a1:b8:96:81:ad:79:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Oct 20 08:01:10 2025 GMT
Not After : Oct 21 08:01:10 2025 GMT
Subject: CN=344031fb10fab33594e0253bcbb40ebbd11cdc71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f7:ba:33:f0:78:33:57:c7:a2:a1:f7:1c:6e:
14:e6:a5:23:0c:d3:7c:96:7a:bf:a0:4f:f1:c3:09:
49:4d:04:9c:ad:ed:1c:fe:bd:29:74:21:fc:a6:fb:
34:51:f7:6f:29:bd:b1:be:7c:9b:79:62:12:c5:86:
40:a1:a0:2a:fc:49:bf:3b:93:a2:c5:01:11:ad:43:
c4:af:37:f1:82:a7:3e:f7:14:1c:de:0e:94:a1:43:
c2:4b:32:18:38:59:68:7e:8a:1f:49:48:29:2f:21:
c2:3b:a6:db:6a:52:8f:a3:ed:54:83:74:09:55:1e:
ec:96:57:b9:e2:31:67:96:cd:21:df:28:c6:86:28:
4e:00:92:0b:cb:c3:31:47:a1:31:3d:78:17:c3:07:
94:cf:10:ff:5d:36:64:d8:7a:cd:4d:31:e7:70:15:
a2:d6:77:e3:39:69:03:25:93:8a:89:21:1e:25:70:
66:56:bf:db:40:23:60:3f:42:0c:f8:f9:e3:12:d2:
48:1c:c9:77:df:24:15:aa:2e:44:b1:7d:d8:8c:03:
2d:a4:38:da:d6:52:26:df:d5:4a:33:ec:fb:91:3f:
a7:6d:cd:f1:d6:22:30:9b:db:e1:a6:42:94:f8:89:
6f:41:05:2f:1d:85:07:5f:f9:ff:c9:dd:0e:af:e4:
b9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:40:31:FB:10:FA:B3:35:94:E0:25:3B:CB:B4:0E:BB:D1:1C:DC:71
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d3:c9:0f:2d:5f:82:9b:74:78:e2:ea:67:a6:82:f1:9a:58:
36:cd:98:d7:4c:a2:c3:61:95:8c:2b:45:56:8f:5f:cb:a4:62:
cd:1d:33:c8:9b:c2:9f:2f:1d:0f:ac:d3:bf:11:d7:54:4b:88:
df:57:ba:f7:73:84:07:cc:4a:7d:08:84:a1:c5:e8:eb:8b:29:
61:0e:23:e5:72:aa:2a:ea:82:73:eb:38:67:f6:e1:ae:16:ef:
c3:4d:cc:99:15:e7:69:d1:85:79:15:47:d3:36:4e:62:f6:47:
9e:57:b2:07:bd:05:34:eb:64:a7:44:34:c1:98:75:29:9f:2a:
3e:13:62:2e:d1:6d:b7:0c:e0:f4:b3:0f:38:dd:42:ab:ca:94:
54:1a:8f:12:a4:35:3b:d0:4f:d9:aa:b5:23:07:7b:79:18:4a:
15:11:dc:29:cd:a7:4b:0c:88:68:bc:5b:59:39:d5:26:60:63:
a5:42:6d:80:58:d2:a5:d5:1d:ac:23:c0:03:56:ee:9c:d4:c8:
32:aa:8f:03:b5:3a:4c:0e:86:92:32:59:1d:9d:5f:ff:b4:f3:
99:a2:e5:c9:f8:8e:66:83:fc:fd:ab:59:f2:11:7a:be:de:73:
cd:b1:14:01:75:d2:b5:65:c1:ea:21:d3:8f:4b:b8:6e:4a:56:
a7:47:eb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:58:39 2025 by rpki-client