Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: DJC/TZrby0A3zPSLttOwkdLXlqp9JfyAICfivUwo1aU=
Subject key identifier: 1E:75:0E:EE:2A:DA:89:46:81:88:E7:FC:37:EE:6F:EE:78:44:FE:2B
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 0199FC8F1DEB14D63572AF54E806CB9D33FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 0FA5
Signing time: Sun 19 Oct 2025 13:01:01 +0000
Manifest this update: Sun 19 Oct 2025 13:01:01 +0000
Manifest next update: Mon 20 Oct 2025 13:01:01 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: EKDZfgWkPw65PdvPCFOaqTCT6Vd2ogALgwCCZQ7V90Q=)
2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:8f:1d:eb:14:d6:35:72:af:54:e8:06:cb:9d:33:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Oct 19 13:01:01 2025 GMT
Not After : Oct 20 13:01:01 2025 GMT
Subject: CN=1e750eee2ada89468188e7fc37ee6fee7844fe2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:17:f6:d8:59:f5:e2:75:6c:f2:ec:5c:1a:
e8:47:fa:e9:bc:14:ff:f8:df:9a:64:40:4e:52:b8:
52:be:88:a9:ff:43:a8:cb:f5:a2:5b:98:df:2f:3d:
da:7a:80:47:e0:cd:c3:47:5b:a9:52:77:91:63:51:
6b:f7:6d:47:af:29:c5:c5:4e:ed:86:89:63:f2:3c:
c5:4b:14:a7:3d:9c:17:11:12:c2:1b:49:aa:9c:ee:
1f:a7:d1:13:72:d1:96:42:38:5f:e0:62:8d:ce:47:
2d:d2:17:bb:9c:11:2b:66:ee:3b:86:57:49:25:4f:
a5:8c:ad:fe:37:db:a6:ac:42:69:2b:75:b7:84:de:
7e:a6:c4:21:1f:53:01:ad:e1:62:ae:71:f8:d9:5f:
c5:fd:f4:5c:85:ef:71:19:ab:a1:ad:8e:be:bd:06:
a9:90:fa:9c:9f:49:29:a1:90:f6:5c:68:a7:33:58:
a9:b3:68:c9:0c:e1:84:b2:f1:a2:43:c3:d2:be:54:
f5:6c:3a:00:fa:f5:10:e0:d8:10:a3:15:3c:9a:17:
11:60:72:16:85:9a:db:a3:29:1f:53:97:cd:01:08:
f0:46:46:15:f7:75:a1:29:d4:02:bf:8d:25:59:9e:
ab:24:7c:28:41:62:e1:8e:86:bf:dd:89:9c:80:f6:
f7:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:75:0E:EE:2A:DA:89:46:81:88:E7:FC:37:EE:6F:EE:78:44:FE:2B
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:60:34:7b:ac:47:a7:4b:27:85:be:cb:b2:84:9a:02:a6:4e:
ae:b4:50:cd:25:fa:94:d6:31:de:30:07:f2:a8:5b:3b:06:f3:
50:cf:82:40:b9:87:1d:9b:54:b2:94:ba:76:7c:01:dd:75:bb:
42:70:48:32:36:a5:dc:20:ad:54:e0:8a:22:cc:3f:2f:61:14:
df:76:f7:28:60:b2:ce:fc:06:66:15:27:94:01:55:e7:a5:a4:
b4:89:76:a8:0f:9c:08:65:de:fd:d0:f1:99:93:fd:d3:00:e0:
95:bc:6b:ee:85:ab:2d:60:f9:b3:9c:50:1f:f2:0e:5a:66:98:
f9:99:5c:bc:27:5d:08:2d:14:c3:ed:d3:6e:b1:20:5e:2a:34:
b3:d3:26:70:1b:c2:ef:a2:63:db:96:a8:5a:5c:5c:31:c4:d8:
b2:81:90:62:79:a3:97:1c:78:b8:02:85:77:66:03:93:8f:52:
f3:01:7e:81:b7:4b:32:06:b1:b6:76:51:dc:7f:42:44:51:8f:
b5:e5:6d:d4:0d:a1:8f:91:7a:dc:81:73:e7:a2:c6:ec:b1:24:
48:3c:e1:43:87:f9:38:92:2d:27:58:de:d2:13:93:01:93:e9:
d3:17:9b:03:71:ef:b5:4c:56:95:09:19:b0:39:9b:5d:7e:52:
26:0b:91:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:37 2025 by rpki-client