Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: XvIs6xXtHE/lawD8XsiieMC0YIqY1TdfPlrfm+zbLl4=
Subject key identifier: 67:15:CF:7E:18:F9:6F:C2:31:6C:9F:AC:FB:AC:7A:50:B0:49:C6:0A
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019A02FE74A0D6C84C90D2D1601C25745851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 16EB
Signing time: Mon 20 Oct 2025 19:00:21 +0000
Manifest this update: Mon 20 Oct 2025 19:00:21 +0000
Manifest next update: Tue 21 Oct 2025 19:00:21 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: MAuCTzos3wPfmVZUNMZmuesqHscwbtJzxjXVAZ/PinY=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 13:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:02:fe:74:a0:d6:c8:4c:90:d2:d1:60:1c:25:74:58:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Oct 20 19:00:21 2025 GMT
Not After : Oct 21 19:00:21 2025 GMT
Subject: CN=6715cf7e18f96fc2316c9facfbac7a50b049c60a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:f0:e1:a6:51:da:04:fe:8b:b7:34:5d:11:
9a:d8:29:2a:f5:5f:1f:a1:75:24:18:28:6b:73:fa:
53:82:c2:23:37:11:cc:13:46:2b:98:43:0f:bf:b2:
08:48:9c:b7:3f:9f:47:cd:49:bd:3b:29:ba:8d:64:
43:0a:d2:8e:d8:c6:b8:a3:f5:7f:98:bd:2d:64:8f:
96:75:f0:ac:ea:91:23:58:a7:a8:75:ac:c7:2d:d6:
0a:53:18:0b:fc:c6:d3:20:28:ab:2d:99:db:06:62:
0e:4e:fa:44:67:28:a4:54:c1:fa:3a:cf:d2:02:73:
cf:43:99:32:5c:f3:54:ee:44:58:c4:f9:02:f1:f5:
e8:d9:36:1b:12:af:da:3c:9d:0f:43:b8:5d:83:ce:
03:e5:7a:a3:26:9f:2e:28:fb:29:dd:11:38:0f:94:
c3:4f:d0:48:b3:49:ca:f1:bb:c3:cd:ef:c6:49:e9:
b6:6f:8c:8c:21:00:c2:62:4b:f5:00:28:56:ab:b5:
a2:65:6a:84:52:54:c9:12:a4:06:88:ce:6b:9c:fe:
59:6c:6d:bd:c7:a1:bf:d6:9d:bf:ab:a8:81:fe:bd:
fa:18:94:a0:08:ed:32:1b:0f:fc:df:99:67:09:9c:
7c:78:2f:a2:e7:ae:fb:70:d7:c3:db:d0:e6:f0:e7:
2e:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:15:CF:7E:18:F9:6F:C2:31:6C:9F:AC:FB:AC:7A:50:B0:49:C6:0A
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:33:bd:1f:1a:da:71:c6:ae:47:dc:36:8a:dc:e0:83:f6:a5:
2a:5e:43:e8:38:4a:99:02:ee:40:e1:ed:43:9e:95:f7:14:bd:
27:2d:b1:7d:9a:ee:9d:bc:27:74:cf:d7:12:76:73:97:1d:d7:
48:d3:c8:27:a0:fb:c8:f2:c9:bd:42:4c:48:e6:ce:04:b4:25:
f3:38:46:8d:0f:2d:ea:35:9d:75:33:3b:d1:a3:a0:9d:3e:b9:
ef:cb:a1:dd:5a:1f:52:39:e4:16:da:e8:f5:6e:37:e7:e4:3f:
bb:e6:53:9d:06:ea:e7:14:02:b6:17:fa:70:7f:55:b5:18:28:
b5:c1:2c:c0:88:12:d3:6d:77:a0:45:b1:67:36:be:6f:7f:a7:
bc:64:7e:bb:16:8e:bd:54:75:ed:a9:8f:44:e1:b1:f1:b1:42:
68:ef:fb:b5:d8:b9:a4:50:ef:ea:3e:15:3b:c4:7a:56:f3:0a:
78:10:c3:51:83:2b:45:b5:82:08:2e:b0:b3:c2:81:d8:58:63:
61:7d:a3:96:6a:b6:29:3a:d1:bd:28:2d:7c:40:62:a3:97:80:
ed:27:9f:2f:70:53:9b:0e:c4:b0:2e:05:68:7e:a5:08:b5:ee:
20:ba:58:8b:c7:3d:58:95:15:a3:c6:2e:a0:96:73:06:41:bd:
cb:6b:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 21:41:43 2025 by rpki-client