Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: Bt36GiK8J/DTqou7KeVm4c/4jItw1rTBB74ChcS5txc=
Subject key identifier: 04:33:9D:CD:25:E9:C0:B3:8B:A5:38:BA:F8:DA:B3:57:ED:FD:8C:64
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 0198D472D24D7F0B4DBB9487604FBE3DB339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0D3A
Signing time: Sat 23 Aug 2025 01:02:31 +0000
Manifest this update: Sat 23 Aug 2025 01:02:31 +0000
Manifest next update: Sun 24 Aug 2025 01:02:31 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: bDrRJXP0NI3Q/6jqNiYGUMMut6fkS9zDDQEPgoWwObk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:d2:4d:7f:0b:4d:bb:94:87:60:4f:be:3d:b3:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Aug 23 01:02:31 2025 GMT
Not After : Aug 24 01:02:31 2025 GMT
Subject: CN=04339dcd25e9c0b38ba538baf8dab357edfd8c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:b6:af:52:bd:a0:2a:11:54:b1:06:c2:ba:1e:
86:fa:c7:9c:12:f6:22:4a:a9:8b:ea:2a:b9:9c:81:
90:07:f9:62:ed:46:b0:53:2e:73:ad:7c:c4:66:1f:
9f:69:86:91:41:cc:7a:22:33:7b:50:bc:f3:3b:d6:
b7:11:93:c2:4f:2a:d6:4d:d1:dc:02:0e:ad:da:02:
00:e8:c4:53:09:1e:99:fa:eb:f9:bf:c6:38:b3:ab:
01:63:88:41:d5:35:5b:63:7d:2a:1f:0a:a0:bb:a9:
b4:39:03:9e:62:5a:f7:58:76:c3:bf:ef:ae:bf:48:
0f:a1:18:34:53:cd:a4:d8:0a:40:bc:9c:61:cf:75:
5f:ac:d5:2b:48:14:dc:5f:11:2c:c7:55:70:75:83:
84:4a:fc:70:d4:cd:99:ab:6e:13:07:b3:69:a1:da:
7e:b4:59:69:22:57:c1:56:e4:f8:5d:6b:40:74:fa:
e5:d3:9d:f2:7e:3b:17:a8:22:09:c8:62:f9:09:d2:
4a:02:80:19:a6:ad:91:7b:14:97:20:c8:9d:76:d3:
81:82:e2:b7:2a:e7:16:58:28:02:82:d9:00:5f:de:
17:a5:10:a3:1d:ac:fe:66:ac:c5:c6:63:90:72:6c:
a6:ef:35:cc:22:b7:bb:e2:60:5f:09:c4:fa:68:07:
df:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:33:9D:CD:25:E9:C0:B3:8B:A5:38:BA:F8:DA:B3:57:ED:FD:8C:64
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:1d:55:0e:f7:4a:af:ab:df:22:54:fc:dd:25:d6:a0:bc:38:
c1:1c:7c:58:83:7f:8f:61:1a:a5:bf:a8:5e:6e:b3:11:10:72:
42:41:36:43:47:5f:08:7b:03:8b:75:0a:e2:24:3f:c2:4e:7e:
55:99:86:5f:a6:d2:38:f3:68:a2:c6:a7:5f:c9:cc:ea:41:7b:
ec:3b:6d:7e:05:af:c1:da:a7:c4:bd:5c:14:82:c6:df:1f:1e:
55:48:71:65:b5:9a:f2:f0:e0:80:9d:3f:f6:6f:a7:4e:27:25:
4e:c9:3b:ff:23:9d:3f:86:0d:32:08:fb:61:ef:91:37:2e:64:
bf:cd:8d:60:31:e4:74:57:21:9c:ee:f3:db:c8:e7:a5:fe:ab:
45:19:d5:84:4a:11:f8:55:7c:74:a1:5e:4c:a4:73:f6:ce:dd:
3f:b6:f8:bc:e4:d6:bf:49:2d:ee:8e:06:2d:00:da:64:0e:de:
20:c7:44:43:bc:74:9e:d8:dd:dc:a7:dd:97:4b:68:99:2e:2e:
d3:84:3b:53:8c:a3:e1:83:07:54:c2:80:ad:57:0e:6b:8a:d5:
e6:4a:7c:47:be:67:a5:3b:3f:5d:62:c1:6e:09:ac:1b:73:13:
6c:88:04:b9:6f:89:a9:a2:38:2f:a8:fb:c3:b3:dc:e8:af:dd:
5e:7f:3f:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUctJNfwtNu5SHYE++PbM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDEwNjNiMmQ1N2U0ZWZhZWY2ODI0ZjYyM2Q0NjVhMWMz
N2I4NDMwHhcNMjUwODIzMDEwMjMxWhcNMjUwODI0MDEwMjMxWjAzMTEwLwYDVQQD
EygwNDMzOWRjZDI1ZTljMGIzOGJhNTM4YmFmOGRhYjM1N2VkZmQ4YzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LavUr2gKhFUsQbCuh6G+secEvYi
SqmL6iq5nIGQB/li7UawUy5zrXzEZh+faYaRQcx6IjN7ULzzO9a3EZPCTyrWTdHc
Ag6t2gIA6MRTCR6Z+uv5v8Y4s6sBY4hB1TVbY30qHwqgu6m0OQOeYlr3WHbDv++u
v0gPoRg0U82k2ApAvJxhz3VfrNUrSBTcXxEsx1VwdYOESvxw1M2Zq24TB7Npodp+
tFlpIlfBVuT4XWtAdPrl053yfjsXqCIJyGL5CdJKAoAZpq2RexSXIMiddtOBguK3
KucWWCgCgtkAX94XpRCjHaz+ZqzFxmOQcmym7zXMIre74mBfCcT6aAffnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAQznc0l6cCzi6U4uvjas1ft/YxkMB8GA1UdIwQY
MBaAFAJBBjstV+TvrvaCT2I9RlocN7hDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQt
Y2IwNzVlMjM5YTU2LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jMjY1YmEtYjAwYS00MWFlLTk1ZGQtY2IwNzVlMjM5YTU2
LzEvQWtFR095MVg1Ty11OW9KUFlqMUdXaHczdUVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh1VDvdK
r6vfIlT83SXWoLw4wRx8WIN/j2Eapb+oXm6zERByQkE2Q0dfCHsDi3UK4iQ/wk5+
VZmGX6bSOPNoosanX8nM6kF77DttfgWvwdqnxL1cFILG3x8eVUhxZbWa8vDggJ0/
9m+nTiclTsk7/yOdP4YNMgj7Ye+RNy5kv82NYDHkdFchnO7z28jnpf6rRRnVhEoR
+FV8dKFeTKRz9s7dP7b4vOTWv0kt7o4GLQDaZA7eIMdEQ7x0ntjd3Kfdl0tomS4u
04Q7U4yj4YMHVMKArVcOa4rV5kp8R75npTs/XWLBbgmsG3MTbIgEuW+JqaI4L6j7
w7Pc6K/dXn8/pw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:40:27 2025 by rpki-client