Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: mXIyC+AAO4XypEwwUHcedsiM2ODv7h7pVEEd3i97Bgk=
Subject key identifier: 1C:D9:67:86:2B:F9:BA:04:3D:89:69:02:A7:B6:E9:92:96:89:05:0C
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 0198D5BBB22487F3C30D5E98515F95ABC259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 164F
Signing time: Sat 23 Aug 2025 07:01:44 +0000
Manifest this update: Sat 23 Aug 2025 07:01:44 +0000
Manifest next update: Sun 24 Aug 2025 07:01:44 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: Hy2qLTGkZBF6SjKAQF/i6+FCO1+8sXRLFK4MN88noUY=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:b2:24:87:f3:c3:0d:5e:98:51:5f:95:ab:c2:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Aug 23 07:01:44 2025 GMT
Not After : Aug 24 07:01:44 2025 GMT
Subject: CN=1cd967862bf9ba043d896902a7b6e9929689050c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:58:23:bf:ad:6b:43:cd:d3:3a:d4:92:cd:11:
d5:84:1b:e8:33:30:c5:00:14:76:f1:40:24:84:04:
b9:c7:72:11:4d:d9:36:8a:51:01:54:c8:7b:ec:29:
7e:82:fc:20:95:7d:65:22:01:e7:60:21:bc:bf:6d:
0c:71:2f:d3:e4:e3:c0:0d:2e:d3:8f:3a:03:a3:ab:
77:c0:a9:00:96:5f:a8:0a:fe:a3:5d:77:42:20:54:
f6:6a:d7:8b:a8:1a:8f:67:14:d9:b2:7b:d7:72:93:
25:f1:3a:c4:02:68:47:3e:4f:e9:af:c1:05:bf:c4:
12:0c:25:68:59:12:fa:ab:85:ad:14:38:95:53:ed:
54:0e:79:84:1d:75:58:10:94:fd:09:49:9b:e5:9b:
d5:73:66:57:4c:5f:d0:ef:94:63:af:d4:ee:55:7e:
fa:db:60:d1:4d:2a:22:27:d2:98:ea:25:9b:88:1c:
5e:db:c3:e4:3b:31:05:d2:ee:f2:44:68:33:af:b4:
71:0c:5d:c1:ca:07:7a:09:9b:a5:81:2f:63:db:1a:
6a:ac:ef:3a:1f:ae:56:cb:b8:56:89:b6:d6:41:ed:
50:1f:bb:c4:93:de:bd:b9:53:08:f1:a5:be:9c:0b:
d7:00:84:5e:16:3e:76:4a:1c:a8:d6:ea:bc:70:ab:
3e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D9:67:86:2B:F9:BA:04:3D:89:69:02:A7:B6:E9:92:96:89:05:0C
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:2a:b3:67:8b:86:ef:4f:e5:39:36:8d:91:45:db:7b:7a:eb:
b1:5c:75:88:d3:e9:c5:5d:78:06:73:80:e4:12:0b:2a:84:c2:
c1:d5:c7:2b:1b:25:33:9c:47:7b:7a:34:d3:eb:88:b6:93:68:
4b:8e:48:25:d1:9e:51:4b:e3:df:89:5b:b2:7f:c4:75:9a:37:
de:10:05:89:33:7e:06:b8:cc:1f:2b:30:15:d9:8a:4b:f2:37:
81:de:7d:48:d3:6e:75:f7:ea:73:38:14:38:2c:89:b9:68:b9:
d1:a6:c6:b1:97:ce:74:12:e4:59:07:1f:bb:f5:17:62:ed:14:
97:a9:58:b2:3e:12:c7:f4:8e:63:bc:58:5c:40:80:84:87:f6:
d1:06:4d:27:ba:91:45:43:55:2b:b7:62:34:a2:00:01:24:83:
17:30:a7:a2:c4:cc:71:29:92:3f:41:2f:9d:25:90:f2:d9:d2:
f8:ee:f8:9f:2f:ca:81:0d:66:d5:46:69:bb:28:fd:85:f0:d4:
5e:95:86:70:c6:f6:c7:ec:80:c6:39:4e:6a:0b:7e:dd:55:ab:
83:8d:6d:ec:fc:1c:2e:a0:45:0f:7f:58:e2:e2:d4:f3:a1:35:
71:69:4e:bd:fb:11:b9:8f:cf:01:60:92:5a:45:a3:99:8e:37:
11:89:0e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:48 2025 by rpki-client