Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: sPgWAmeAQctgzlQNWUKHc6h+t8TgvS2hVgNRgzwWZpw=
Subject key identifier: DD:7D:8C:43:6E:71:DD:54:DE:1E:C2:64:77:94:5C:94:17:0B:FF:09
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0199FCC64881CBA77C0CBA99B9B48AC079FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 1204
Signing time: Sun 19 Oct 2025 14:01:17 +0000
Manifest this update: Sun 19 Oct 2025 14:01:17 +0000
Manifest next update: Mon 20 Oct 2025 14:01:17 +0000
Files and hashes: 1: 1-bTG4fJ9woZmiRnGA3mMnt-HFQU.roa (hash: sBL1HNYrxZcmkezvdPWd49u3uAN+SQyINP0GsQYDsEg=)
2: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=)
3: 4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa (hash: tjLnA4xx6xW2o8o0Nxj0RULJ3oVpDUty6jhv+XOFzV8=)
4: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: gi7upf1Zo2spj5fGTzZK1SB3eEaW6O23CCRh9uMGjTU=)
5: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=)
6: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=)
7: hBIi_DQsTzzAePmcqEi9LIfGgEo.roa (hash: ixi/61RXmNoCNxlk1fG+litk/y7jlZcj22aPdgR7sWs=)
8: qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa (hash: Tt7WpuJis2cX5dodwxLP2jzWdn56/MoMnk4lBKcxlds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:48:81:cb:a7:7c:0c:ba:99:b9:b4:8a:c0:79:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Oct 19 14:01:17 2025 GMT
Not After : Oct 20 14:01:17 2025 GMT
Subject: CN=dd7d8c436e71dd54de1ec26477945c94170bff09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:5a:13:93:b6:5b:77:45:df:83:09:a5:f4:
6e:25:1d:37:67:ed:d5:d0:99:eb:41:4c:96:2a:67:
6e:9e:0b:4a:f0:5c:31:bb:43:76:08:fb:78:15:91:
b8:a1:ea:a8:21:3b:e8:78:1e:95:ae:c5:bc:32:22:
a4:6e:ed:6f:e9:1b:b2:7c:86:b1:e2:4d:dd:7c:31:
60:30:60:46:9b:f8:b9:37:03:c8:e4:f4:e4:92:9f:
7a:fb:21:5b:ea:2d:99:a9:90:a2:80:4e:10:95:72:
bb:d2:dd:28:d1:10:31:63:af:28:b6:51:06:71:44:
46:3e:a3:9c:6f:b9:60:6b:c7:b3:72:33:93:ff:aa:
56:e7:48:8f:35:1a:0f:9e:d8:96:22:c0:0d:4e:40:
47:32:41:f7:d0:59:ba:c8:33:fc:18:80:d5:5f:c7:
7f:b1:91:1a:50:e0:db:89:4c:07:87:2f:64:63:2d:
b1:e3:cc:d7:e8:63:7a:b9:39:1e:5d:cc:76:de:1e:
33:71:c3:1d:5b:b0:3f:15:12:4d:8f:41:e7:4c:19:
a6:e3:98:22:a5:39:74:0d:22:51:e1:91:75:fb:4a:
59:f7:59:33:ad:49:52:c4:c6:06:7e:7a:94:40:72:
9a:5a:e0:aa:cf:6f:74:5e:06:2b:ec:3f:7f:0a:b0:
8c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7D:8C:43:6E:71:DD:54:DE:1E:C2:64:77:94:5C:94:17:0B:FF:09
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7e:3a:bd:bc:8a:14:e6:35:89:5e:b0:6d:71:94:67:72:b1:
cc:7e:85:c1:22:73:d8:c6:f9:ba:50:6b:b7:60:aa:ae:ae:a0:
e2:0f:5d:79:74:47:d8:97:06:43:61:1b:ab:99:0e:8b:a7:28:
3d:53:90:44:ca:f2:62:36:9e:7c:40:92:d7:bb:85:e5:2b:eb:
3a:8d:56:6d:6a:20:89:fa:2d:4e:95:0b:48:b1:43:bb:fb:68:
6d:64:70:41:93:e1:5e:cd:fc:e1:dd:a4:71:a0:65:64:92:c1:
7f:24:17:82:fe:da:42:2a:a4:62:e2:e0:71:83:3d:da:c4:71:
28:5c:89:1a:50:16:00:54:38:81:44:26:6a:c9:e2:be:41:be:
1e:0b:95:15:51:3c:8e:c2:11:30:9b:81:e4:9d:81:bb:84:cc:
bf:ed:da:47:af:88:21:dd:f1:ff:66:d0:47:c0:4d:3c:a6:0f:
b3:60:0d:7a:48:03:e4:48:23:0b:fe:b4:86:8f:aa:7f:60:37:
d1:11:64:17:b1:15:2c:3c:66:ee:b9:6f:81:ba:00:72:63:85:
d9:58:6d:e1:d2:30:54:8a:df:53:34:79:cd:4d:ae:98:33:d2:
f6:f8:e1:72:0e:13:9a:40:05:91:06:bc:be:fb:51:4b:32:d9:
e9:c6:61:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 18:23:57 2025 by rpki-client