Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: PtrhRnoktZpzATgPu9PXjHaeaCJzbUFJoAiy7P2tPWQ=
Subject key identifier: B7:E1:50:F6:AF:F8:8E:C0:CE:3B:14:C0:E9:2A:EB:14:11:51:B1:32
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 0197CF17269EA2444B5E80EA2773F4A0DD1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 15C7
Signing time: Thu 03 Jul 2025 07:01:30 +0000
Manifest this update: Thu 03 Jul 2025 07:01:30 +0000
Manifest next update: Fri 04 Jul 2025 07:01:30 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: xWUSh4utd2BuK5JeW/+TbUdG2/+d489hKlj4mxqitzY=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cf:17:26:9e:a2:44:4b:5e:80:ea:27:73:f4:a0:dd:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Jul 3 07:01:30 2025 GMT
Not After : Jul 4 07:01:30 2025 GMT
Subject: CN=b7e150f6aff88ec0ce3b14c0e92aeb141151b132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:30:93:9d:25:3d:14:4a:7f:79:ac:dd:8a:f5:
c1:ed:d0:68:fd:d8:c6:44:0b:b6:16:74:c2:a3:fe:
1c:f7:cd:25:52:bb:49:f3:f5:d5:b4:d1:9e:7e:31:
f7:17:dc:47:5f:7f:d3:ad:fa:d8:e7:7d:5b:0e:0e:
12:05:48:44:84:d3:8b:1e:58:70:fe:cb:49:79:f7:
04:fe:43:eb:8c:00:f7:72:e6:c6:67:c6:f0:f0:2f:
e7:47:a2:de:28:9d:51:4e:18:b2:7e:a3:28:67:b0:
4b:37:0f:f1:ce:de:2d:91:96:59:06:2d:0f:a0:78:
c0:c1:0c:83:4b:45:05:24:9a:16:99:76:ba:b1:b2:
91:74:43:96:b0:87:2a:4e:c3:96:55:c7:ec:31:6f:
e7:cb:21:ae:48:69:74:e1:c7:4a:e1:fa:55:02:8d:
5f:52:57:fe:a2:fc:8f:7e:68:06:ac:7e:44:84:ba:
8a:0c:a0:4f:50:e5:f5:f8:04:35:72:b8:85:09:82:
39:1d:b7:96:5a:39:d0:6e:74:99:14:ea:d0:ee:55:
7a:e8:bf:8e:1c:7a:2e:da:68:0c:d8:1b:bf:e0:e8:
cd:2b:b5:d2:77:44:2b:f3:fd:75:7a:0d:2b:75:52:
92:f3:7a:6d:0d:ad:07:b3:fb:5b:53:12:46:d6:d2:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:E1:50:F6:AF:F8:8E:C0:CE:3B:14:C0:E9:2A:EB:14:11:51:B1:32
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c6:4a:24:12:5b:0f:c1:e2:60:a2:a1:8a:43:ba:f2:5a:39:
cb:6b:10:b3:65:b2:4a:b4:88:13:2c:cb:96:97:50:19:cc:06:
4e:3d:29:30:bc:11:0f:d7:ee:48:af:f6:9b:f9:00:cf:19:97:
76:6f:91:e2:13:e5:f6:20:81:f6:1b:28:16:82:ce:45:cf:fe:
75:bc:98:ef:de:35:8b:3a:8d:67:f5:88:98:70:fb:14:a7:9b:
80:ba:09:98:3c:ab:4e:4c:48:34:c3:05:79:6c:ae:ed:73:29:
57:60:5d:7c:2d:64:02:55:f9:52:ee:e1:38:f8:92:46:1a:ef:
37:82:bb:bd:78:79:78:78:c6:74:ce:47:21:d5:22:91:f7:73:
04:0f:d7:14:a1:99:92:fb:e4:aa:ed:f0:62:e3:8f:74:95:2f:
17:fa:7c:b1:4c:c3:14:42:1b:df:d7:e5:c8:b0:a5:33:08:1d:
aa:2c:3e:36:98:a1:75:d0:ed:d5:2e:3e:c1:34:52:ff:05:a2:
86:1b:b0:56:62:40:a3:c7:f9:81:f1:4e:3f:8c:cf:57:54:52:
94:5d:18:15:8d:6b:c7:43:2d:ba:74:77:75:d1:3e:68:f5:ec:
34:56:60:24:00:3f:b2:b5:6e:91:27:d4:74:9d:77:92:d3:ff:
7f:61:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:39:38 2025 by rpki-client