Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File: AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier: uUD9Ft82VzBhbI41mdLm/l+idiHC370fjWa5r6Si5UI=
Subject key identifier: 1F:8B:EC:90:7A:B9:91:57:DE:17:BA:9C:C1:0D:C1:4D:01:45:F8:77
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 0197B70F477C9FAB18525A586FE1AFE65772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:02:01 +0000
Manifest this update: Sat 28 Jun 2025 15:02:01 +0000
Manifest next update: Sun 29 Jun 2025 15:02:01 +0000
Files and hashes: 1: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (hash: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=)
2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: 2klAj/GeTmwXkk7CG4zsrZRUzIb3DLRbVVgRe91dhoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:47:7c:9f:ab:18:52:5a:58:6f:e1:af:e6:57:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Jun 28 15:02:01 2025 GMT
Not After : Jun 29 15:02:01 2025 GMT
Subject: CN=1f8bec907ab99157de17ba9cc10dc14d0145f877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5f:bb:d8:12:06:80:d0:16:0a:52:e1:9d:5c:
0d:9b:8f:2e:77:fe:b4:4d:42:86:c2:1b:de:f9:80:
34:1e:dd:19:66:a6:72:65:b9:4f:cb:f5:a0:d6:4f:
26:e5:3d:b5:67:6d:b0:91:18:76:7f:4e:9b:73:21:
65:f6:ad:9d:51:e3:a0:ea:ed:b7:aa:f4:92:bd:75:
ba:48:4f:13:0b:17:f7:ad:a2:73:8f:5b:79:49:ac:
4f:4b:2c:22:29:2b:fb:97:b2:3d:04:21:7d:13:36:
5e:e3:30:d9:43:f4:ca:fa:e6:02:c9:5f:c5:48:cc:
90:a7:ee:61:0c:76:68:57:d2:00:e0:81:6b:0f:63:
49:5e:ff:49:82:f2:eb:c4:67:04:df:d9:4b:a7:a7:
05:0b:e2:b2:3b:4b:54:05:8a:5b:90:99:ee:15:63:
19:ed:d1:4a:b0:a0:ef:72:c0:55:ca:97:a5:7a:d0:
1c:78:ba:a3:26:5a:be:68:d0:62:4d:26:7e:14:d9:
8b:61:6b:7d:04:13:79:32:4b:02:a2:44:26:55:fc:
d5:82:84:e3:83:33:1a:5c:a3:08:23:39:24:02:36:
d1:07:ca:f2:b3:56:0c:94:a8:aa:b6:3b:29:d3:3e:
c6:62:2d:e8:5b:19:1e:db:97:f2:b5:d5:6c:36:f8:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:8B:EC:90:7A:B9:91:57:DE:17:BA:9C:C1:0D:C1:4D:01:45:F8:77
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:55:a3:7c:dd:44:73:0f:25:7d:60:76:21:c2:d2:7b:d7:2f:
50:d1:62:6b:c6:a7:cc:e4:b5:c1:dc:58:be:58:58:35:99:76:
bf:84:da:da:0d:2f:ac:d3:14:2c:08:b2:94:d3:4d:8c:b5:79:
90:04:fc:5c:de:a9:e3:49:af:42:80:26:b1:5a:af:a1:b3:22:
58:3c:06:73:74:ed:e2:88:43:8d:05:b6:c9:a8:66:a9:e8:eb:
13:e2:e7:6c:98:12:f9:1d:e8:34:29:c0:43:eb:ac:0d:7d:22:
2e:b4:d4:98:3e:7d:11:d5:cf:72:e6:ee:1f:23:45:14:c6:93:
ba:12:4d:02:e8:d3:b8:48:8d:07:63:a9:0f:57:e3:18:c9:9a:
ee:86:2d:60:f5:09:c5:ea:34:8e:eb:eb:6b:08:f2:8c:1a:8a:
79:96:a0:12:94:f6:66:5a:a2:a4:94:9e:e0:57:8f:13:03:b7:
12:9f:30:e3:58:92:3c:0a:c9:2b:1c:41:ab:b7:88:f1:ae:af:
06:99:09:ea:62:4f:ef:d5:09:d5:b6:47:1b:a3:86:77:c5:71:
b7:ee:27:88:68:24:b3:a3:6c:ba:1f:05:1c:7e:38:6a:5a:e0:
1f:6f:d7:76:0f:7d:1a:2e:c5:c0:87:60:77:ec:b6:43:4f:a9:
bf:d3:04:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:23 2025 by rpki-client