Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: pGqt9WKaYKqJ3TKDPMoyBKXA8M/lOKKIetk1qJVpNBM=
Subject key identifier: D6:7C:D4:48:EA:16:44:07:72:DB:66:1B:12:1D:AC:6B:78:A9:F5:5D
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 0198D54EC3F8CBFF09E5A76E21C029F4A8A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 12DB
Signing time: Sat 23 Aug 2025 05:02:45 +0000
Manifest this update: Sat 23 Aug 2025 05:02:45 +0000
Manifest next update: Sun 24 Aug 2025 05:02:45 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: HUnlhBOIunBMnAkCehhENEdGZipkbxcUJBMYtIGi1qE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:c3:f8:cb:ff:09:e5:a7:6e:21:c0:29:f4:a8:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Aug 23 05:02:45 2025 GMT
Not After : Aug 24 05:02:45 2025 GMT
Subject: CN=d67cd448ea16440772db661b121dac6b78a9f55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a7:7a:1d:74:b2:60:df:ea:fc:6a:ae:38:71:
b5:c3:d0:7e:91:4a:f4:80:80:98:ca:ba:a3:97:2b:
55:91:3d:0c:b8:6d:a8:f0:36:97:bd:05:53:2a:5b:
82:d9:a4:c5:f3:41:49:cf:e8:e3:14:ee:4b:9f:f5:
2e:a4:62:f7:bd:fb:c7:1d:e7:b9:dd:2b:48:3f:d3:
1c:d6:c2:26:de:19:cb:16:77:31:98:d0:e7:57:be:
c4:43:b9:30:51:f0:9b:63:39:c2:e9:a3:48:ed:ee:
de:fa:8a:fd:62:87:f7:8a:d8:07:38:e6:fd:88:6b:
21:bf:1c:28:b4:79:cd:b2:ba:d6:ef:aa:20:95:a7:
29:5a:1a:05:41:f0:42:6d:a7:48:51:d6:a9:71:a0:
ff:9f:01:6b:98:c2:de:51:38:8f:e5:a9:da:bc:3b:
53:f6:15:ae:c1:b0:18:2d:87:0a:65:1c:39:e4:b1:
3d:04:9d:7a:fa:84:8c:2e:33:37:9e:ed:e8:8a:34:
94:84:b9:22:e8:ca:7b:99:e6:c1:d8:04:0f:a0:61:
51:78:84:a4:72:8b:5a:27:fb:b4:d1:bc:9d:72:f9:
bd:90:98:74:bf:3e:3c:28:35:d2:60:b7:cb:cd:86:
61:07:b0:b7:9a:26:ef:67:cb:ee:69:ac:a3:c8:6f:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:7C:D4:48:EA:16:44:07:72:DB:66:1B:12:1D:AC:6B:78:A9:F5:5D
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:1a:c2:e4:26:18:0b:33:35:ce:f8:52:98:18:38:0f:95:36:
0a:a1:b4:bc:d5:78:87:a3:c2:1e:9e:05:55:3e:87:70:24:c3:
d3:32:1f:8c:af:f0:71:24:39:27:96:af:bd:3b:6d:b0:a6:9f:
79:68:5a:f4:24:e7:36:75:38:7b:29:42:63:cd:2e:4f:85:40:
c9:c1:9d:af:aa:2c:23:8f:8f:5d:75:89:a5:5d:d9:a2:14:e1:
51:8a:0d:1f:ba:3f:cb:a0:ab:1d:19:9c:7b:fc:6e:31:96:ea:
a4:44:c2:12:4d:18:a9:6a:0b:5d:58:86:4e:f6:a8:2b:01:a2:
ce:36:eb:50:b2:5b:f6:5b:66:5f:06:c3:86:8d:e9:89:e4:4a:
14:75:0b:ae:e8:4f:27:9a:8a:fb:55:8b:bd:55:4a:7d:7d:c6:
28:de:50:c4:5b:4b:11:42:cd:70:f2:98:64:32:df:d4:59:0b:
ac:1e:73:ff:8f:65:18:41:f0:a4:55:e5:a8:0c:65:89:72:f3:
a5:9f:68:1a:8f:df:63:5c:1b:72:3f:c7:de:20:7c:c3:f8:0c:
d0:46:c9:8f:be:8b:6d:e3:d7:6b:05:4d:92:dc:22:7f:de:eb:
c2:35:c9:cd:ba:ea:7f:be:3c:bf:cf:02:28:64:13:c9:7c:c1:
df:ca:6a:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTsP4y/8J5aduIcAp9KipMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZjAxZTkwODZkNDBkNTA4ZjU4NDJlOTgyZjI1MzY4OWY3
ZmU0YzkwHhcNMjUwODIzMDUwMjQ1WhcNMjUwODI0MDUwMjQ1WjAzMTEwLwYDVQQD
EyhkNjdjZDQ0OGVhMTY0NDA3NzJkYjY2MWIxMjFkYWM2Yjc4YTlmNTVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKd6HXSyYN/q/GquOHG1w9B+kUr0
gICYyrqjlytVkT0MuG2o8DaXvQVTKluC2aTF80FJz+jjFO5Ln/UupGL3vfvHHee5
3StIP9Mc1sIm3hnLFncxmNDnV77EQ7kwUfCbYznC6aNI7e7e+or9Yof3itgHOOb9
iGshvxwotHnNsrrW76oglacpWhoFQfBCbadIUdapcaD/nwFrmMLeUTiP5anavDtT
9hWuwbAYLYcKZRw55LE9BJ16+oSMLjM3nu3oijSUhLki6Mp7mebB2AQPoGFReISk
cotaJ/u00bydcvm9kJh0vz48KDXSYLfLzYZhB7C3mibvZ8vuaayjyG/dAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNZ81EjqFkQHcttmGxIdrGt4qfVdMB8GA1UdIwQY
MBaAFJPwHpCG1A1Qj1hC6YLyU2iff+TJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgt
ZTljOTJiNzFmNTBjLzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC82MjVhOTItYzJkMS00ZWE4LTljZTgtZTljOTJiNzFmNTBj
LzEva19BZWtJYlVEVkNQV0VMcGd2SlRhSjlfNU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAahrC5CYY
CzM1zvhSmBg4D5U2CqG0vNV4h6PCHp4FVT6HcCTD0zIfjK/wcSQ5J5avvTttsKaf
eWha9CTnNnU4eylCY80uT4VAycGdr6osI4+PXXWJpV3ZohThUYoNH7o/y6CrHRmc
e/xuMZbqpETCEk0YqWoLXViGTvaoKwGizjbrULJb9ltmXwbDho3pieRKFHULruhP
J5qK+1WLvVVKfX3GKN5QxFtLEULNcPKYZDLf1FkLrB5z/49lGEHwpFXlqAxliXLz
pZ9oGo/fY1wbcj/H3iB8w/gM0EbJj76LbePXawVNktwif97rwjXJzbrqf748v88C
KGQTyXzB38pqhg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:45 2025 by rpki-client