
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File: AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier: K0++WtdD9r8fOlXQLd3cICCT0aI7vlpPfOX8fyB7Mxg=
Subject key identifier: 90:17:18:31:0B:12:0B:14:E6:9A:9F:ED:82:FD:3D:0E:0F:51:29:B1
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 0198D4E0B9FF0517D8C71D712D7ACB0C4909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 03:02:34 +0000
Manifest this update: Sat 23 Aug 2025 03:02:34 +0000
Manifest next update: Sun 24 Aug 2025 03:02:34 +0000
Files and hashes: 1: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (hash: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=)
2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: 5spVQooiNLhwx6DLxL11QwIsuOPik6g6D1yoLrKMMSs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b9:ff:05:17:d8:c7:1d:71:2d:7a:cb:0c:49:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Aug 23 03:02:34 2025 GMT
Not After : Aug 24 03:02:34 2025 GMT
Subject: CN=901718310b120b14e69a9fed82fd3d0e0f5129b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:09:00:e7:0c:84:fb:a2:c6:1a:4e:34:1c:81:
fc:52:cb:02:35:20:7e:7b:f9:1c:28:fa:45:f6:ba:
78:09:6b:85:8f:ea:bb:2f:35:47:14:9d:92:34:3d:
cd:c6:89:9e:16:12:0e:55:08:d8:35:9d:83:a6:9d:
2c:46:61:26:40:67:ba:2e:53:be:d5:ea:b4:ee:a9:
be:cd:63:0f:cc:86:18:4a:65:ec:49:3b:01:a2:9a:
59:32:2c:79:02:21:bf:ad:78:2c:b8:55:20:23:f6:
dd:1f:0b:b4:07:dd:08:c6:e1:15:ff:2b:42:fd:51:
af:c9:17:83:d4:84:bb:3f:22:40:a7:ef:4e:bb:4c:
53:d2:22:ac:87:f9:88:12:b6:5e:40:bf:d9:d3:5c:
71:0f:ab:56:6b:c1:70:df:47:27:4e:9a:c3:a7:2e:
6b:ef:3f:4a:3e:ab:a1:72:fd:fb:f9:7b:04:5d:ad:
ed:4b:a6:9b:04:6d:8c:ff:2c:5a:65:46:22:53:79:
72:2a:d6:2d:21:1f:5a:eb:ff:f7:25:1b:6e:30:d5:
2b:88:e7:89:10:0e:fd:10:53:66:a4:ca:84:a2:bb:
00:51:b5:a1:f3:d4:49:89:d9:d7:35:42:8e:e1:b8:
03:05:de:c2:7a:c6:fb:9b:f1:6d:ed:a0:20:9c:8e:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:17:18:31:0B:12:0B:14:E6:9A:9F:ED:82:FD:3D:0E:0F:51:29:B1
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ab:68:bd:74:88:33:2e:fa:80:be:64:6a:55:ad:9c:78:78:
72:b9:83:a9:a3:ac:85:52:a8:10:98:2f:92:83:99:ec:d4:40:
72:e7:47:81:bb:9f:be:b2:46:60:73:3c:11:16:54:51:cd:e3:
11:b8:b1:ad:4e:78:05:62:22:c9:d1:7b:54:48:68:32:3c:2f:
e7:d1:91:01:88:00:87:b3:79:c3:b5:5e:9b:48:97:29:64:22:
24:b1:b5:a5:cc:79:a0:04:54:7e:43:c2:df:ba:0b:0c:75:ed:
a7:c0:d4:4e:6f:0e:07:6c:12:b7:c5:32:6b:c0:b5:8a:48:07:
23:f3:5c:54:cf:c2:88:5b:8b:42:94:1b:6e:e9:94:a3:3b:b4:
ee:7d:72:95:0f:e0:b2:09:7f:21:51:00:a5:41:2c:e7:c8:a9:
08:b4:3a:2b:ba:0e:40:f3:d1:4e:f5:a7:57:97:c0:c1:ba:dd:
90:f4:f0:26:cb:19:ab:a6:67:14:e0:28:26:5e:0b:2c:8f:16:
5f:91:dd:a2:24:d7:81:aa:3a:2c:85:c0:27:10:fa:ac:5e:b9:
9f:ad:16:0f:d1:dd:78:e0:d0:87:e1:b6:f1:e8:98:51:ea:36:
ad:b0:a6:25:db:73:57:1c:24:a7:6e:f1:c2:01:6a:2c:fb:ab:
88:3c:49:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:26:53 2025 by rpki-client