Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: ju5/oXO8oigFF0pxSAsImXR5RVkEoBS9BGFVblxdxwY=
Subject key identifier: FC:94:F8:17:46:06:58:73:AA:4F:4F:89:A7:64:B6:B4:81:83:A4:27
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 0198D660854CC4AB8B166774B35D184DDFBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:01:46 +0000
Manifest this update: Sat 23 Aug 2025 10:01:46 +0000
Manifest next update: Sun 24 Aug 2025 10:01:46 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: qo08kDt7Q9itk7f6OG2zs7Mn2Q0Qz4/1OPNOUroMvgc=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:85:4c:c4:ab:8b:16:67:74:b3:5d:18:4d:df:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Aug 23 10:01:46 2025 GMT
Not After : Aug 24 10:01:46 2025 GMT
Subject: CN=fc94f81746065873aa4f4f89a764b6b48183a427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:51:d7:48:96:d9:c8:ba:32:08:7d:87:da:9d:
e8:c1:dc:12:33:d0:fc:7f:f1:ba:14:91:13:3f:77:
6c:8e:20:07:b6:00:19:da:8a:2a:1d:c6:08:25:fd:
49:c6:b3:e4:3b:df:f6:7e:12:8a:a8:e4:14:2e:85:
8e:c2:eb:bd:01:41:96:cf:99:eb:c2:79:75:28:14:
c8:7a:df:3c:84:3f:7c:33:f1:e1:dd:ea:7c:d8:1c:
f5:85:a7:f0:49:c9:f2:ab:0c:4e:6a:47:ca:c5:46:
e4:67:14:bf:dd:ab:ba:81:12:e7:a9:91:68:38:aa:
85:d8:b0:3c:19:86:aa:55:e3:65:fa:0d:82:44:0c:
2e:f7:c9:86:d0:5a:76:f6:ed:92:27:0c:89:f9:31:
56:75:c5:fd:bb:62:1e:10:88:fa:1a:04:43:80:a4:
67:01:5c:3f:47:6a:cd:89:85:08:04:e5:79:4f:88:
be:60:fb:aa:86:ea:85:a2:d1:79:0b:7e:24:cf:66:
5e:a6:c8:77:c0:b1:e6:fa:59:5a:11:a5:a2:14:c1:
24:16:bc:81:44:b4:d1:2c:58:f2:22:6f:79:8b:f3:
e2:d3:aa:a0:5e:06:cf:73:78:de:7d:82:e2:36:b3:
17:7f:5e:8e:53:8f:49:22:56:e8:81:08:a9:02:93:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:94:F8:17:46:06:58:73:AA:4F:4F:89:A7:64:B6:B4:81:83:A4:27
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:60:8d:bb:58:7d:75:2a:dc:53:b8:99:fc:20:b5:d8:f9:c1:
a0:02:2c:0a:ad:50:af:0a:99:24:28:20:da:7e:c3:84:39:10:
c9:c6:62:be:07:8d:ce:bb:42:7d:d8:42:ba:b5:e1:4e:14:82:
fc:58:97:14:04:30:eb:0e:3f:eb:5f:fb:34:3e:13:b5:4f:d3:
21:d6:44:6e:f7:39:35:3a:94:f7:39:60:8a:30:34:8e:a0:6d:
42:38:e0:58:bc:74:52:30:a3:84:d9:3c:4e:27:42:2a:e3:ff:
90:ed:3e:a9:51:a6:cc:fc:25:21:93:68:5b:09:f2:fe:ee:76:
2a:94:c7:d9:02:dc:1b:a4:9a:14:58:f8:ae:52:b4:cd:13:d4:
d1:2e:69:20:9f:3e:e3:bc:e9:e5:a1:02:22:be:31:c0:ba:9a:
00:7e:39:29:97:80:bf:ff:c2:7e:43:32:d2:12:24:23:20:60:
10:e9:8f:e2:74:26:cb:96:3c:4d:e4:a3:c9:48:c3:48:fa:da:
fb:c5:a6:8f:c9:56:b6:12:83:ec:9c:0a:76:93:f3:60:83:03:
50:a8:53:dc:74:3b:a7:34:1d:15:22:83:e2:a4:9b:1f:38:b3:
34:32:37:d2:52:90:36:a5:0f:a2:61:b1:3c:72:ba:d0:8a:d7:
f1:17:47:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:15:34 2025 by rpki-client