Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: SsGnflZUXUgITqs2hBA2FuwDTePVWpjQHyGKH1c9RKU=
Subject key identifier: BF:16:25:15:77:CA:F2:DF:49:05:39:50:6A:5F:3E:37:C4:3F:0B:F4
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 0198D5F156EC9BAC99D55B5E0CA3EC7FAB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0ADF
Signing time: Sat 23 Aug 2025 08:00:19 +0000
Manifest this update: Sat 23 Aug 2025 08:00:19 +0000
Manifest next update: Sun 24 Aug 2025 08:00:19 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: X6tY1rjH5Obsra6t36skq0sjvpGO6kn0WpQWYzi0BC4=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:56:ec:9b:ac:99:d5:5b:5e:0c:a3:ec:7f:ab:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Aug 23 08:00:19 2025 GMT
Not After : Aug 24 08:00:19 2025 GMT
Subject: CN=bf16251577caf2df490539506a5f3e37c43f0bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:33:a1:a4:1c:d3:68:0b:19:30:ad:6d:aa:
54:52:ca:f5:95:aa:e0:2c:2d:7c:7d:19:ad:98:d7:
75:0f:2f:ae:48:0e:a0:c8:55:18:2c:74:cb:10:f6:
ef:cf:77:b2:46:c9:e3:ac:44:64:8a:e7:46:7c:0e:
8a:01:2e:df:b6:47:be:3d:b3:95:d7:37:dc:e5:6f:
fa:f2:18:a1:66:da:2c:64:a9:70:e0:81:9f:c9:ec:
82:18:29:71:10:d4:e3:56:82:8b:3b:be:b0:a8:8d:
43:3f:2a:f6:47:37:1d:f5:97:aa:93:89:12:71:ae:
99:a5:05:08:f4:02:d4:f7:56:03:1b:87:c2:2e:a2:
35:cb:20:9d:76:39:7e:51:ea:e4:8b:08:50:09:04:
29:f6:bd:e0:93:46:77:82:30:73:ae:49:77:1d:75:
75:f9:ba:56:26:34:4f:3c:f8:8c:35:fe:d9:f4:d0:
70:5a:a1:cb:0e:86:27:0c:50:30:31:08:cd:bb:00:
3c:3c:bb:03:42:b9:ea:23:f1:47:ec:c1:88:73:12:
2d:d9:d6:85:9a:32:f1:af:ed:2b:6a:95:e1:08:ff:
8c:5c:d8:e2:cf:c1:13:34:ab:fd:86:e9:d6:63:f6:
f5:fe:7d:49:27:f4:b7:68:85:10:1f:31:30:d0:cf:
6b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:16:25:15:77:CA:F2:DF:49:05:39:50:6A:5F:3E:37:C4:3F:0B:F4
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1d:91:0d:e8:f5:cb:05:75:14:f4:ba:1d:8b:fc:e1:c0:55:
95:7e:9f:34:d9:9b:e6:86:83:e5:77:63:e5:73:78:89:40:19:
6b:5d:e4:91:b6:53:4d:85:a1:22:6a:29:63:34:29:74:e0:46:
f9:cb:d4:7c:2e:27:1f:35:4e:71:e1:6a:83:83:2a:b3:9a:b5:
1c:a3:72:56:c4:f4:15:ee:92:d6:1a:51:8c:74:98:65:65:25:
cc:fe:cc:15:20:cf:d1:4f:6c:2a:50:80:c1:5e:38:e1:bb:f7:
23:fc:3e:a1:c5:cc:dd:86:f5:f8:d8:e2:09:70:70:c0:eb:41:
fd:da:c5:da:07:6b:19:9b:8f:59:9a:5e:6a:7e:a0:4b:ca:40:
ce:2a:d4:2d:72:b0:34:87:b9:36:57:f2:ad:0d:67:8d:e1:41:
d6:f5:1e:12:b2:cd:7c:4a:26:7d:12:f8:46:00:4b:64:fe:2b:
f6:b4:71:9c:52:a4:91:8a:49:40:38:7d:6b:09:fb:f6:12:c8:
f4:97:00:3e:95:9f:f1:ea:9d:be:a7:cd:fb:27:f0:7b:e3:da:
63:07:05:b6:23:91:24:99:39:2c:cf:71:f1:93:09:4c:9a:40:
f7:b3:dc:98:ec:2e:38:25:22:6f:69:50:6d:00:6b:11:3c:a2:
66:a5:94:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:07:39 2025 by rpki-client