Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File: AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier: kPQVNDWFrKRd7faHuGWSrcAwzl9h/r/punwopWKEjqw=
Subject key identifier: 28:7D:FA:E2:C9:BD:F2:63:4C:83:C7:99:80:6C:FD:4E:C4:7C:23:1E
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 0199FC589335C0DCE4A22C5D760F813D5F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number: 16E3
Signing time: Sun 19 Oct 2025 12:01:27 +0000
Manifest this update: Sun 19 Oct 2025 12:01:27 +0000
Manifest next update: Mon 20 Oct 2025 12:01:27 +0000
Files and hashes: 1: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (hash: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=)
2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: gu203FLpssivhnQRE0YMWX/Xjhib+0oKK8sZRHEwWtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:58:93:35:c0:dc:e4:a2:2c:5d:76:0f:81:3d:5f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Oct 19 12:01:27 2025 GMT
Not After : Oct 20 12:01:27 2025 GMT
Subject: CN=287dfae2c9bdf2634c83c799806cfd4ec47c231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:90:c5:ec:27:a0:05:e4:9f:32:f9:51:45:db:
80:ee:60:f4:db:19:08:e7:81:ee:7e:79:c2:a6:f4:
04:c7:df:1e:05:5b:cd:e9:6f:9c:88:a3:62:c3:b9:
ee:4c:eb:49:cc:e1:50:6a:5a:b0:e9:bc:27:1d:21:
fd:ae:73:99:35:b7:91:d4:89:8d:e3:c7:09:dd:54:
c0:21:ce:92:c9:db:ff:b2:cf:12:14:4f:f2:55:20:
e1:10:7c:74:cc:99:18:60:74:73:72:36:d2:57:29:
17:6c:53:95:cf:8e:fc:ca:b0:0d:03:7d:0b:60:bd:
69:fc:61:ab:72:ae:7c:80:b3:4f:02:ac:73:77:2e:
5a:12:df:41:2c:2a:4f:c1:f8:98:a1:d6:7b:82:b5:
39:c5:c7:91:42:e3:82:8a:42:56:63:bc:30:50:fb:
31:a5:5c:3f:2c:85:d9:da:f7:5c:db:7d:59:df:b9:
5c:cf:29:a5:04:4e:7c:34:a8:56:e6:a3:bf:ca:d5:
77:45:12:5e:69:b8:f2:48:d7:dd:5f:c0:c4:ef:65:
4b:95:f0:08:e4:89:6c:51:86:a8:7b:99:90:21:58:
cb:e8:3e:aa:bf:93:c5:4c:c1:1e:97:48:87:13:20:
c2:66:95:bd:cc:b0:6e:3a:11:a3:51:8e:66:e4:04:
53:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7D:FA:E2:C9:BD:F2:63:4C:83:C7:99:80:6C:FD:4E:C4:7C:23:1E
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:cb:86:b5:05:a5:82:f4:6e:05:8c:81:05:f8:8a:97:dd:05:
0f:0c:37:3f:28:d3:10:4e:32:76:d8:0b:08:83:ea:21:c7:c5:
d5:38:a5:8e:ad:de:f2:be:81:a3:ad:70:81:88:25:c7:55:fa:
bf:4b:a3:c4:b1:5d:40:db:5b:dd:4e:05:b0:ab:25:c4:ab:3e:
2c:a0:98:b8:63:a7:dc:6a:3e:e5:32:56:9f:f7:34:21:16:09:
a6:30:bc:1b:88:01:04:b5:ed:ab:d4:f8:53:be:f3:ca:8c:65:
3f:36:7b:ad:8f:20:f4:b4:0c:0c:63:50:92:5d:37:ee:5e:00:
5c:36:bf:6a:09:e5:5c:f2:47:7c:6d:33:55:00:4c:3e:0a:ed:
3c:ad:df:0a:f0:05:f7:60:a1:16:3d:a4:84:18:f6:cd:88:2f:
22:9a:46:b4:16:72:f7:cb:ca:70:94:35:91:26:c8:0a:ea:a7:
4d:27:90:0c:9d:af:2e:6a:12:41:c8:9d:ee:58:ec:8f:3f:1a:
41:c9:7a:46:65:59:65:db:ef:51:dc:76:10:04:19:2e:34:e2:
9a:ba:b4:0c:04:96:9b:e5:32:29:a7:eb:5b:1b:fa:e7:b1:1d:
11:5d:c4:56:b1:99:c4:47:91:a5:1d:c2:85:9d:db:9c:ed:4e:
50:19:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:33:48 2025 by rpki-client