Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: 6YESWgYnSiiQZ+lwun5r9aNQCvyiGK2cCxUDA0T/4FM=
Subject key identifier: 03:86:05:5E:86:9E:6A:A4:5D:B2:AF:B4:C7:8A:A6:74:F1:76:4C:CD
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 0198D6CDA771CA526D9AA3777C845095553F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 07B1
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: 5Wr3s3710WFh-gqqnOC5HRfGhqo.roa (hash: mRv9qva0cARo5/cUdT7w241MszdGWtnBv2czFRm61Yk=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: T1lh0FlUwgVfaRzYr6Q7CEvIkpYnsRIFgXOGdSoUkBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a7:71:ca:52:6d:9a:a3:77:7c:84:50:95:55:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=0386055e869e6aa45db2afb4c78aa674f1764ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:74:bf:ce:af:d4:99:96:f1:ea:8e:de:68:5d:
5d:e3:f6:05:58:36:52:7a:69:20:4d:db:3b:0b:b9:
62:34:31:c8:db:17:8e:97:f5:87:1f:9a:4a:53:7e:
66:73:d4:43:b1:13:e6:4b:1c:e1:cd:b4:b7:10:05:
0b:75:c1:27:b6:ea:9c:dd:d2:92:6c:10:df:48:56:
55:ad:f6:12:95:a1:23:13:cf:67:d5:ce:bc:d5:b3:
d1:f4:85:9e:5f:a1:03:02:87:b4:56:36:79:0e:44:
65:0e:79:39:f3:24:12:8b:c1:d1:b9:33:0a:f1:17:
b1:73:23:e8:e0:4b:74:a4:0b:87:ea:37:74:5c:96:
7f:1f:2b:ab:fb:e7:63:fd:09:87:17:aa:48:6d:d7:
53:82:ad:b1:b3:e6:4c:58:1d:b5:f2:ad:b7:2c:79:
1b:73:cd:32:2d:83:08:04:48:9a:9f:3a:c8:45:04:
26:8a:b3:2f:4a:ed:44:71:d8:19:ea:5e:ed:59:b4:
8e:af:b7:51:c9:a7:1e:63:18:19:4d:9c:8c:51:12:
4d:47:c8:93:6e:10:c7:4c:83:70:0a:cd:47:40:cb:
fd:91:52:d3:a8:d6:ef:c8:29:05:81:fc:8f:e6:8d:
da:bb:91:8d:a5:47:5c:15:58:35:75:2d:72:f2:be:
52:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:86:05:5E:86:9E:6A:A4:5D:B2:AF:B4:C7:8A:A6:74:F1:76:4C:CD
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e8:58:45:f5:4d:25:46:24:92:65:e9:b6:5d:74:d2:16:df:
4e:d2:93:cd:45:e8:8e:87:33:75:76:1c:a5:51:8c:63:e6:03:
50:23:c0:cf:c7:e6:74:6c:f7:da:29:e3:d5:94:c4:a0:1e:61:
6f:ab:eb:db:5c:1b:bd:0a:78:a6:0a:a7:49:0f:09:63:6b:4d:
a4:c4:63:4c:4e:5b:be:2f:11:c9:e3:18:42:54:b4:f5:33:2c:
69:d4:00:7d:e8:27:a0:4f:80:af:8a:2c:7e:86:52:e6:e8:06:
7b:08:ba:3a:b1:9e:ec:54:05:fd:5c:ed:bc:47:fd:93:ec:41:
d7:b1:bf:d0:85:99:1d:f0:2e:71:16:42:a1:48:32:61:97:06:
68:b6:8f:c1:72:0a:74:e1:d0:7b:5e:07:61:d5:30:ac:a2:6b:
89:b1:4b:d7:cc:0e:14:ec:ef:d9:fe:a3:7b:da:54:3e:5b:2f:
e3:53:a2:ee:df:51:2c:92:69:fa:af:6b:c4:ff:3f:46:0e:c8:
00:de:f1:49:c3:2a:b0:15:0a:0a:ae:b6:3d:1b:84:6e:cd:46:
58:aa:7b:3e:ac:c8:4d:b2:2a:e1:17:df:f3:89:02:68:72:39:
5f:7b:37:92:5c:53:f1:6e:0c:d3:aa:b0:6e:38:c5:43:ba:a8:
d2:b7:93:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:29 2025 by rpki-client