Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: GV1oV/RlVYEwpPhb/4omVCGKWT213G3vrRx2tE9av14=
Subject key identifier: 27:A1:B2:8F:67:4C:E5:15:62:AF:D2:08:A1:04:F0:A1:BF:3E:5F:9E
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019A0110DEB2EEA0BF97DC8CB9741752401E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 16EA
Signing time: Mon 20 Oct 2025 10:01:14 +0000
Manifest this update: Mon 20 Oct 2025 10:01:14 +0000
Manifest next update: Tue 21 Oct 2025 10:01:14 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: zEOxQOahPNG6+belqEsJejnkRvd9rm7NzrTLuNA4ays=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 10:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:10:de:b2:ee:a0:bf:97:dc:8c:b9:74:17:52:40:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Oct 20 10:01:14 2025 GMT
Not After : Oct 21 10:01:14 2025 GMT
Subject: CN=27a1b28f674ce51562afd208a104f0a1bf3e5f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:c8:38:9c:5c:62:95:ab:c4:44:bb:82:2c:
79:d0:11:e5:b9:84:ec:df:fe:54:a6:a9:46:be:0c:
45:6c:67:2a:ad:95:f1:91:a0:58:b1:80:1e:8c:86:
8f:aa:5f:e1:c3:17:ba:ee:8d:29:a7:26:56:ed:1a:
a2:3c:03:12:32:30:bc:59:09:fb:a3:f1:18:34:3c:
d3:86:8d:71:55:1c:70:82:2c:16:27:4c:3d:43:70:
39:e0:bd:81:cd:16:bb:3e:c4:7c:46:81:f8:26:75:
cf:43:bc:3f:9d:14:61:b7:e4:c2:fe:ee:7f:d4:e1:
3f:d0:ff:e8:85:23:3d:18:0c:85:5d:34:a6:3b:67:
03:9d:7f:37:7e:17:47:10:9b:71:5d:64:46:2a:7c:
63:99:84:ff:da:06:55:ad:2d:76:33:76:a6:7b:0f:
bd:ff:9f:13:b1:dc:8e:0d:3c:59:e3:1f:fb:2f:1d:
b9:8f:a0:a3:27:f6:61:f2:45:cf:16:c7:e7:a2:c7:
fb:35:15:ed:12:a0:6c:1e:a1:bf:9c:51:3d:ab:b0:
4c:ad:43:47:90:2c:9b:3b:50:8a:48:96:da:01:62:
01:68:49:36:17:13:b1:58:5d:9f:72:24:5f:78:6e:
bb:92:86:3a:8f:77:d2:d6:68:07:f5:1f:c4:ab:b3:
39:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A1:B2:8F:67:4C:E5:15:62:AF:D2:08:A1:04:F0:A1:BF:3E:5F:9E
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:fb:e6:df:0a:ad:4c:37:39:3e:c6:06:cc:3b:70:3a:46:2b:
9a:99:3e:d2:34:39:f6:a1:eb:5e:e1:06:9d:e4:e0:0f:46:0a:
e8:39:98:9a:80:df:17:65:27:38:f3:08:fc:e2:3f:fb:e7:21:
bb:63:3e:3d:cc:66:50:19:f1:81:f7:1d:73:dd:75:fa:ee:9e:
12:7f:f1:e9:67:4e:6a:d5:11:2b:75:d4:4b:54:0d:a7:b0:a3:
78:f3:aa:b0:63:60:f8:00:20:dd:6b:05:d4:96:dd:8f:d7:fd:
b3:14:46:cc:0a:30:ae:95:b5:22:44:28:52:0d:d6:cd:49:bc:
00:87:58:39:50:70:9f:35:fb:b5:7e:6b:89:eb:01:b6:d1:d4:
4c:b8:05:1b:da:57:5a:e5:c1:ac:dd:7a:93:a6:65:2a:6b:9e:
21:95:a0:77:c9:7d:66:53:d0:be:b0:be:7b:cc:27:3e:70:51:
9c:a0:9d:6a:55:68:ec:71:70:93:25:17:4c:6d:f8:1f:b3:fc:
33:44:02:3f:54:ab:e3:7c:59:6f:c6:b3:2e:5c:87:5b:d5:46:
02:ca:de:31:dc:28:37:7c:35:1f:20:90:50:35:0a:83:68:d4:
96:0d:e3:89:f0:83:3c:fd:f8:dd:f5:cb:e4:1c:18:0d:9d:88:
ac:9d:db:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 16:12:49 2025 by rpki-client