Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: lxMcG0Xy1NqeINxr+fTnY+y3i5JU6r9LUyXH9sm/aPo=
Subject key identifier: 30:C9:99:4F:06:16:63:9F:67:EB:BE:C6:ED:16:5B:98:91:0D:DF:5D
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 019A014828E91395C0362362008A673D626B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0B7A
Signing time: Mon 20 Oct 2025 11:01:37 +0000
Manifest this update: Mon 20 Oct 2025 11:01:37 +0000
Manifest next update: Tue 21 Oct 2025 11:01:37 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: H1uCLZ51DGxCkzUNXJADXRF5+szosLptPupo/NR9pjU=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:01:48:28:e9:13:95:c0:36:23:62:00:8a:67:3d:62:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Oct 20 11:01:37 2025 GMT
Not After : Oct 21 11:01:37 2025 GMT
Subject: CN=30c9994f0616639f67ebbec6ed165b98910ddf5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:45:ad:33:95:32:90:53:44:a0:52:b5:1f:3e:
08:24:18:bc:45:c6:34:8f:e9:62:90:76:8f:76:68:
07:c8:3f:56:25:6c:e6:ce:e3:ee:c7:57:e0:68:09:
f1:b6:f7:52:98:ea:99:89:f3:2e:f7:ba:61:90:e3:
87:85:f5:f2:ce:b2:f5:53:56:9a:02:45:9e:d1:d6:
fe:ab:7f:83:c4:64:dd:24:83:c8:ff:5d:0f:39:12:
19:41:af:dd:5e:8d:4d:69:80:3f:b4:ce:db:b4:50:
c9:67:ce:87:24:a2:24:1b:85:ea:92:f0:65:d3:6a:
4d:e6:c5:ab:05:73:d6:2f:7b:ca:f1:fb:6c:b2:a9:
07:7b:43:80:e2:c8:a6:f0:c1:d7:d9:f5:72:61:8e:
81:29:c6:f8:a0:b3:66:c8:b2:2d:9a:6c:29:32:2b:
f5:ac:b7:a1:17:ef:88:69:16:a0:d3:86:96:36:17:
7d:94:d2:72:b5:ba:4b:35:b2:00:30:15:aa:7a:78:
51:fd:94:42:61:ac:08:26:7c:7d:84:3b:41:c7:91:
61:15:dd:00:81:01:60:a0:88:fe:8c:e5:ba:38:18:
17:31:23:40:0d:89:e1:d2:da:26:cf:50:b1:c5:da:
d7:d7:2c:d4:5b:fe:ec:9f:a1:55:63:55:90:10:3f:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C9:99:4F:06:16:63:9F:67:EB:BE:C6:ED:16:5B:98:91:0D:DF:5D
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f5:43:2a:bd:8e:d1:d1:73:2b:69:16:d2:6e:f8:d3:3f:7a:
93:0e:d0:50:1d:5e:0d:db:8e:d8:dd:c2:4f:a5:35:8a:1a:cb:
71:2a:5a:a1:bb:da:d8:9f:2e:ef:c2:cb:2e:0c:ef:cc:6d:b9:
f8:f6:f9:f7:0d:7b:30:31:e2:5a:c7:24:34:16:4a:50:d1:91:
e0:27:02:74:9a:79:ce:15:4d:33:8e:9e:3b:5d:90:d6:d3:09:
3a:bd:02:c1:f9:5f:da:9c:71:45:6f:97:f3:c5:c2:f6:e4:aa:
5c:74:0e:b4:e7:ae:29:a8:13:86:9f:2e:fc:4a:f8:de:c9:ec:
0b:e1:7d:42:0e:c5:1e:74:1c:a9:9e:6f:3c:c3:e6:05:18:af:
2d:ae:2a:28:23:58:5b:3d:2c:71:6b:c9:be:ec:ea:5b:3f:57:
06:80:62:6b:a7:b0:44:d5:c5:b4:86:ca:e3:1b:61:14:3f:48:
7a:93:ec:fd:8a:09:81:85:96:b4:3a:d1:59:4b:73:80:bb:18:
28:88:49:8b:52:7a:95:0a:fd:25:c7:69:34:18:b6:63:04:07:
d0:9c:64:4d:19:6d:3d:3c:4e:38:2c:37:b2:92:c3:40:fe:03:
81:e1:33:5b:8b:65:02:b1:67:9a:a6:62:51:48:93:0a:74:ea:
8e:2c:fa:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 14:57:45 2025 by rpki-client