Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: ojEiA68a7nRTqCxvBigBBMjpEC3U9Ap+JXZZ86Zm/ng=
Subject key identifier: 6D:5D:3A:E8:F2:88:6F:00:3C:4A:34:0C:5C:D1:7C:65:22:3B:CC:62
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 0197B6D739DE66239FAE0CDDC667741DC95D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0718
Signing time: Sat 28 Jun 2025 14:00:47 +0000
Manifest this update: Sat 28 Jun 2025 14:00:47 +0000
Manifest next update: Sun 29 Jun 2025 14:00:47 +0000
Files and hashes: 1: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: bgg6GlpiLvcSH/TVbd3hvh7eWHubxgqLT9NJXiYE398=)
2: F0fLEPNHCyvyIlmIFcsqkPyplGA.roa (hash: km4WfLRxUHxr5HonrrBoTZPZXAmt4eVnZ393OPRJNmw=)
3: I52JmxS8ms2LXewaNvexpBIItdM.roa (hash: wE72dqwKEdun5Ic36ck9eG0u4nkqju4VoFB4cJuV7v0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:39:de:66:23:9f:ae:0c:dd:c6:67:74:1d:c9:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Jun 28 14:00:47 2025 GMT
Not After : Jun 29 14:00:47 2025 GMT
Subject: CN=6d5d3ae8f2886f003c4a340c5cd17c65223bcc62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fb:91:e4:c7:5a:78:c8:d3:14:07:39:10:58:
57:9e:a3:4f:04:60:a1:fb:40:f8:e6:dc:8e:76:19:
6d:5e:62:54:04:bf:b3:9e:8c:e4:0b:18:3e:bf:ca:
eb:d9:35:0e:15:99:03:9b:85:12:f7:21:0e:0a:21:
9f:a3:ec:82:b6:f1:9c:ff:73:ab:2e:22:b0:ed:34:
fe:4f:a5:4d:19:8b:ab:73:e1:17:62:81:50:f7:b8:
07:c6:cf:dc:7e:f1:98:26:65:e1:8a:6a:70:b1:63:
ca:52:87:98:2e:f1:13:d7:d7:c5:21:3b:46:ad:2b:
98:75:d4:97:57:0e:7f:5e:b4:9b:11:58:c0:56:84:
14:71:74:df:f5:af:b8:2a:3f:d9:df:02:81:e8:5e:
0a:21:e3:7e:fc:cf:3c:23:60:dd:c6:bb:e8:c1:52:
c3:8c:77:3b:eb:9b:c3:62:9e:2a:f5:43:33:64:e2:
61:79:2a:af:25:f3:2b:7c:96:4a:ec:58:8d:bd:c3:
a0:e1:64:51:b8:16:f3:a9:9e:ea:43:7d:26:af:03:
a4:42:5e:7a:59:78:a0:67:9b:db:c3:6c:70:9e:6d:
60:8a:27:35:fb:98:be:09:c6:0d:60:1f:9d:32:8d:
9c:fc:c4:fe:d3:07:a8:02:60:d1:06:9f:30:06:6f:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5D:3A:E8:F2:88:6F:00:3C:4A:34:0C:5C:D1:7C:65:22:3B:CC:62
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:19:ac:08:1d:ac:04:43:e1:90:dd:80:66:fe:bd:0f:d3:99:
34:8c:41:52:4f:7e:e4:ec:f4:98:ce:ea:c9:af:80:d1:05:88:
7a:8c:5b:45:d6:52:a6:0b:0b:a8:b8:0b:52:58:99:4d:2c:fa:
95:3f:0a:18:57:e4:ea:6a:90:c6:4d:b9:9e:80:a5:1c:77:bb:
82:6e:8a:23:ff:53:55:e7:fb:5a:05:bd:1e:fa:35:d8:7f:1e:
30:e0:b1:ec:bf:3f:16:da:f0:e4:18:cc:9a:6d:be:4e:fe:fa:
a1:d6:cb:a9:16:d2:4f:63:b3:49:1c:6e:5b:87:72:c9:dd:e2:
c8:7d:c0:a0:58:fd:e6:f7:21:22:d9:5f:8f:c5:7c:63:fb:b7:
ec:e0:95:ef:39:de:ab:f9:f5:db:f4:8a:30:fc:d8:27:6d:96:
9c:ab:52:a7:5a:3d:d9:11:b4:7b:11:ed:14:22:f2:ce:e6:da:
c4:cc:eb:27:fc:d9:ba:dd:0a:62:bf:3c:ae:f2:ac:8e:e1:0b:
9b:95:d9:91:4b:00:22:f9:6e:7e:23:2d:fc:59:dc:07:3c:16:
4c:59:b9:62:fb:07:44:b1:4e:05:a9:31:19:63:9b:62:8e:d1:
22:57:1c:ae:be:f4:cc:2d:c1:cd:d3:2a:cc:56:0d:3c:ca:ce:
8b:cc:a8:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:02:24 2025 by rpki-client