Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: 5dnlSkcEsICPnENCpHtcQ5yHV5/FiMvgtykeydHRMa4=
Subject key identifier: 6A:03:04:70:8E:04:9B:FA:88:E2:27:70:D2:60:0E:66:82:67:E5:24
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 0197B88FD1268D4747093D9B43FC6CB84846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0CA7
Signing time: Sat 28 Jun 2025 22:02:02 +0000
Manifest this update: Sat 28 Jun 2025 22:02:02 +0000
Manifest next update: Sun 29 Jun 2025 22:02:02 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: nBsuhUHoKXWwHL/2+HIkdPaU6+4p+L+Wj4quFPO/rSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d1:26:8d:47:47:09:3d:9b:43:fc:6c:b8:48:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Jun 28 22:02:02 2025 GMT
Not After : Jun 29 22:02:02 2025 GMT
Subject: CN=6a0304708e049bfa88e22770d2600e668267e524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1d:50:df:cb:0f:45:7a:75:c0:77:3c:c2:97:
fa:0f:ff:66:33:7d:df:c8:ba:f5:60:84:20:44:cb:
d1:5d:4a:19:c3:fc:96:0f:62:f8:e6:5a:10:82:2f:
b4:e1:fb:20:cc:91:08:cb:29:d1:df:e7:2f:db:49:
2d:6f:b8:73:35:4e:7b:ef:e4:fd:ad:e4:8c:cc:43:
da:90:09:a6:40:53:35:19:f6:b3:66:ab:f9:78:66:
7c:b5:e8:f6:7f:42:e3:25:7f:28:aa:d5:56:3d:0e:
5a:f0:40:ef:e8:1e:7d:79:1a:8d:54:be:2f:70:cf:
bc:d5:d5:41:e2:d8:d9:bd:16:d4:7b:c1:49:24:3d:
ca:1e:22:10:30:a0:e0:61:c7:9b:8c:68:de:c5:46:
8b:53:a6:e9:4d:60:1f:65:ca:a4:bf:4c:92:71:2b:
66:23:d7:27:1d:cc:e7:20:75:df:80:10:43:6a:59:
a8:4d:7f:76:8e:40:ce:f3:d7:a2:31:86:f8:e3:9d:
7c:27:14:7f:e4:7a:06:20:7f:8c:31:40:8d:2b:37:
51:d5:87:5a:51:75:89:81:99:7a:a8:ae:a3:dd:2a:
59:3b:e2:18:cd:84:5e:f0:c3:3f:25:37:f8:5c:53:
80:a9:fe:7b:b7:d5:ae:99:87:eb:96:9e:7f:cc:ce:
87:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:03:04:70:8E:04:9B:FA:88:E2:27:70:D2:60:0E:66:82:67:E5:24
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:66:dd:17:84:db:71:24:15:33:75:66:4b:2d:b3:a4:bf:2a:
77:e8:b1:57:a6:8e:e8:6e:7b:bc:73:ed:34:c2:5d:61:b2:4b:
2d:9d:38:74:f6:b7:26:13:c4:2e:fa:d4:73:01:89:b6:ce:8d:
bb:95:04:36:4c:ce:cf:64:b5:53:96:24:b8:6a:3c:d5:0f:91:
a7:4c:03:64:9c:46:71:87:61:10:af:d6:0c:92:a7:b7:37:b6:
b6:d1:7b:b1:12:f9:e9:21:4f:2d:2a:3d:4c:59:49:8d:6f:ab:
1e:d4:d8:f8:8a:44:5e:06:bd:18:79:9b:29:94:95:55:c6:27:
db:f0:27:6d:f7:d9:5f:67:4e:01:1a:6a:a5:e8:05:77:64:69:
9d:cd:3d:39:4c:ac:73:23:66:5f:22:93:8b:01:aa:e3:be:8b:
63:e9:8a:d7:0c:f3:a4:84:79:05:20:3a:a9:19:a2:03:6b:ce:
97:47:96:29:0b:59:dd:8e:ab:fc:79:54:ef:0a:b5:80:9d:a4:
e9:f5:a4:43:ff:b8:b7:a0:2c:63:8a:71:cf:6a:ac:54:7b:3d:
2e:53:d9:dc:fe:6f:e0:ff:20:05:2c:37:fa:9d:cc:ca:2f:97:
a6:64:a2:f1:99:3a:21:ee:25:b3:2e:5c:58:4e:ad:53:ec:07:
50:9d:6e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:55:40 2025 by rpki-client