Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: cdAvpMHlTzn9ZPNCktkRK7LRditMd6GufS9pr6FxaLI=
Subject key identifier: D5:E8:5F:71:5B:A2:1D:27:EC:05:16:31:3B:32:31:24:DD:7B:92:BC
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 0197B6A08F7914C8F49A3295C6CFA4E7A94F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: 1wyNOHTImNCpdpitoS/NzTnN6u9D0W/VXfC6lY/3Kfw=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8f:79:14:c8:f4:9a:32:95:c6:cf:a4:e7:a9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=d5e85f715ba21d27ec0516313b323124dd7b92bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e6:7c:a7:61:97:54:34:87:77:4e:b5:4f:f1:
28:d1:d6:03:75:dc:37:83:3a:4b:cf:5a:80:6d:31:
19:fc:e9:f4:13:3b:b5:d2:ee:61:65:a3:4d:e3:3f:
9e:08:82:91:ba:e0:ee:85:75:2d:d9:c0:2a:7d:09:
3d:9d:c1:6f:eb:74:72:df:b7:9a:ac:57:72:0e:4f:
df:a3:c0:b9:25:5f:b7:bd:a6:ee:2f:3e:20:4d:43:
c9:f1:73:c9:98:27:34:3a:e4:25:ac:45:f3:78:5f:
58:78:ce:2d:f5:a9:de:2c:26:54:87:aa:21:98:28:
cb:74:ec:d9:dd:a9:00:4c:9b:ad:0e:14:f8:5c:20:
74:ca:6d:0a:ff:bc:bf:6d:92:01:c0:96:9b:bf:69:
be:17:69:67:77:28:cf:8f:a1:98:ba:ca:7b:ea:07:
7b:43:df:61:1a:b8:2f:ac:00:4d:d0:fe:f4:23:98:
88:1f:37:b4:d2:a8:4f:62:06:a0:1c:03:65:db:b0:
3c:b6:0e:dc:31:1a:b5:78:d6:63:da:3f:d9:42:36:
d6:6a:23:bc:cf:9b:81:a9:2b:07:2d:d5:e7:5c:94:
6a:b9:27:a4:d2:30:df:a4:e3:92:e3:83:c3:53:33:
e7:9b:91:4f:a9:ac:dd:b9:85:97:3e:89:64:1f:fe:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:5F:71:5B:A2:1D:27:EC:05:16:31:3B:32:31:24:DD:7B:92:BC
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:9a:9e:88:3c:e4:43:0b:ff:4f:0a:1c:b8:94:1e:76:97:b8:
b7:29:5e:3e:29:20:df:73:06:6c:49:7a:64:c7:d2:65:3b:1d:
99:67:23:46:1e:f1:8a:ea:2a:5a:02:bf:04:10:b8:48:d5:0d:
de:09:4d:41:96:f0:c9:2f:b4:bd:0f:c7:5e:f3:d0:90:0f:87:
e0:37:48:7f:ce:ad:99:cc:56:e9:64:2e:d2:13:47:5c:af:87:
4b:4f:0c:57:55:c8:0d:3b:24:80:ec:59:0f:65:3e:41:02:6c:
18:0d:0e:ba:1b:45:5f:c8:3a:f4:20:16:a5:84:9a:f8:2f:30:
d5:e9:94:15:e5:cc:f3:67:88:b0:9f:af:f8:4d:83:5c:fb:b8:
ca:84:51:d7:0f:a4:50:15:d5:e4:d5:cc:0c:77:af:cf:79:60:
57:e9:6a:2e:f7:2e:7f:15:7b:2c:93:79:b1:30:00:4c:6d:b1:
bd:65:67:fc:43:1e:d6:0c:30:0b:af:bd:3d:aa:62:c5:fa:73:
d0:e4:b9:28:4f:9d:83:fd:8a:61:1e:47:e3:fc:60:b6:30:58:
ec:0c:07:de:ae:f1:a1:6c:95:cf:ce:ad:10:80:7c:a2:4b:c1:
15:c6:49:f3:81:82:f1:05:c3:9e:d9:ba:70:d2:d9:1c:9d:7e:
8f:9e:8e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oI95FMj0mjKVxs+k56lPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWY5ZGRhMzA3Y2I1MjUzODVlZjkwZjUwNmQwZDU3YmI5
ZDJiZjIwHhcNMjUwNjI4MTMwMTA1WhcNMjUwNjI5MTMwMTA1WjAzMTEwLwYDVQQD
EyhkNWU4NWY3MTViYTIxZDI3ZWMwNTE2MzEzYjMyMzEyNGRkN2I5MmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uZ8p2GXVDSHd061T/Eo0dYDddw3
gzpLz1qAbTEZ/On0Ezu10u5hZaNN4z+eCIKRuuDuhXUt2cAqfQk9ncFv63Ry37ea
rFdyDk/fo8C5JV+3vabuLz4gTUPJ8XPJmCc0OuQlrEXzeF9YeM4t9aneLCZUh6oh
mCjLdOzZ3akATJutDhT4XCB0ym0K/7y/bZIBwJabv2m+F2lndyjPj6GYusp76gd7
Q99hGrgvrABN0P70I5iIHze00qhPYgagHANl27A8tg7cMRq1eNZj2j/ZQjbWaiO8
z5uBqSsHLdXnXJRquSek0jDfpOOS44PDUzPnm5FPqazduYWXPolkH/6BbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXoX3Fboh0n7AUWMTsyMSTde5K8MB8GA1UdIwQY
MBaAFACvndowfLUlOF75D1BtDVe7nSvyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTkt
OTBlYWNlOWUwNTllLzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9kMGUyZjQtYjYwYS00MGIyLTkyZTktOTBlYWNlOWUwNTll
LzEvQUstZDJqQjh0U1U0WHZrUFVHME5WN3VkS19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5qeiDzk
Qwv/TwocuJQedpe4tylePikg33MGbEl6ZMfSZTsdmWcjRh7xiuoqWgK/BBC4SNUN
3glNQZbwyS+0vQ/HXvPQkA+H4DdIf86tmcxW6WQu0hNHXK+HS08MV1XIDTskgOxZ
D2U+QQJsGA0OuhtFX8g69CAWpYSa+C8w1emUFeXM82eIsJ+v+E2DXPu4yoRR1w+k
UBXV5NXMDHevz3lgV+lqLvcufxV7LJN5sTAATG2xvWVn/EMe1gwwC6+9Papixfpz
0OS5KE+dg/2KYR5H4/xgtjBY7AwH3q7xoWyVz86tEIB8okvBFcZJ84GC8QXDntm6
cNLZHJ1+j56O+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:47 2025 by rpki-client