Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: /W1CfbNGJ3nDuyiqKZHXElZmuc/o8UgU1ZdweXiUrSk=
Subject key identifier: 84:9F:3D:39:91:39:6A:5E:11:C2:24:10:E8:12:F7:1B:26:EB:AD:97
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0198D54EA60E8BD874D8DA648B391F59791E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 116B
Signing time: Sat 23 Aug 2025 05:02:37 +0000
Manifest this update: Sat 23 Aug 2025 05:02:37 +0000
Manifest next update: Sun 24 Aug 2025 05:02:37 +0000
Files and hashes: 1: 1-bTG4fJ9woZmiRnGA3mMnt-HFQU.roa (hash: sBL1HNYrxZcmkezvdPWd49u3uAN+SQyINP0GsQYDsEg=)
2: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=)
3: 4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa (hash: tjLnA4xx6xW2o8o0Nxj0RULJ3oVpDUty6jhv+XOFzV8=)
4: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: 839UpxJtIoV/JKJWqXiIZVTdWADDuNmgBTxQ3NOMSgQ=)
5: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=)
6: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=)
7: hBIi_DQsTzzAePmcqEi9LIfGgEo.roa (hash: ixi/61RXmNoCNxlk1fG+litk/y7jlZcj22aPdgR7sWs=)
8: qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa (hash: Tt7WpuJis2cX5dodwxLP2jzWdn56/MoMnk4lBKcxlds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:a6:0e:8b:d8:74:d8:da:64:8b:39:1f:59:79:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 23 05:02:37 2025 GMT
Not After : Aug 24 05:02:37 2025 GMT
Subject: CN=849f3d3991396a5e11c22410e812f71b26ebad97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:be:47:ff:fa:5b:94:61:f9:d1:f5:42:70:
d7:27:fc:01:96:9a:e0:e0:17:68:d3:9a:1f:a3:43:
82:8d:ab:10:c8:91:59:84:ed:bd:3f:b6:ad:af:0e:
31:e4:61:43:cf:ec:ff:67:04:e8:96:ef:a1:11:5b:
a4:76:7f:39:92:ec:0f:39:30:44:18:f2:17:52:2d:
e9:2a:b4:5a:63:27:0d:ff:10:7c:8c:5c:90:2d:a3:
06:e8:19:29:5b:bf:2f:8e:fd:b4:a0:2f:6c:3a:da:
e9:b8:da:1a:af:9e:9a:ea:dc:dc:a8:0c:6b:36:fc:
58:fb:dd:e2:09:9e:21:82:89:e4:c9:e8:07:b0:12:
fa:fb:44:e5:d7:8a:f7:fd:1b:00:c8:ee:0a:26:ed:
bf:16:18:70:82:a2:89:09:03:c3:d7:42:74:8f:5f:
a4:f4:80:dd:79:7e:30:ba:5a:dc:cc:78:48:47:81:
bd:b8:9e:58:2e:19:d3:4d:da:44:6f:e2:a6:4d:4c:
cb:fa:95:be:b4:87:10:1f:61:fd:d0:30:b4:0b:47:
03:e5:57:3f:83:dc:68:e0:80:6e:b1:fd:59:f3:f1:
a8:b2:38:f5:ac:40:02:ed:87:0e:d8:58:7f:f1:16:
f1:53:0a:c5:6d:bf:83:3e:f3:cc:f1:45:61:db:a0:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9F:3D:39:91:39:6A:5E:11:C2:24:10:E8:12:F7:1B:26:EB:AD:97
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:58:4a:05:d7:24:f5:77:33:8a:db:73:4c:a3:cf:fe:73:00:
85:bc:d5:7c:8b:b2:e4:80:16:93:ee:cf:4f:ec:a7:7e:81:14:
d5:5e:10:8b:f0:81:8f:29:9e:55:c2:3b:90:bd:b3:ef:42:86:
64:58:93:a3:3d:e8:bc:d9:48:ec:2a:09:7b:69:02:9a:e4:b6:
48:d9:bc:82:31:df:a9:50:e1:43:0f:51:a7:e0:00:d3:94:40:
b8:9a:4f:c8:0c:dd:73:b1:44:3e:be:f5:78:10:94:b6:5d:31:
88:4c:49:e1:07:ec:ff:13:e2:13:c6:12:f5:72:ec:f6:36:28:
56:94:1a:16:7c:36:90:78:3e:5f:3a:51:05:fc:23:c9:e5:2e:
a3:37:9c:a2:99:38:8b:93:f0:66:8b:9e:12:5d:d1:83:89:25:
f5:ca:67:71:0e:53:c5:eb:b0:85:e5:a7:bc:4c:02:e7:38:d8:
8e:fb:72:4e:a5:22:14:49:07:1c:be:1f:8e:47:15:2a:18:e4:
97:79:96:76:02:ff:37:37:69:18:43:c9:c5:66:2b:8d:78:f2:
4a:09:19:44:bd:cc:ea:74:f8:8e:cf:ce:50:06:4d:03:bb:29:
c2:d3:2a:52:df:34:c3:e3:ca:6d:a9:42:2f:ea:de:0c:4a:f4:
ba:4a:c5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:43 2025 by rpki-client