Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: nsivkS27qpgnrLIdRBUVpVr6PBrrExDleMXDe+8T7Do=
Subject key identifier: A4:2A:AC:FA:B7:CF:94:6D:50:C5:4A:00:7D:44:0C:A2:BC:28:C2:D0
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 0199FCC69BF22B9B6D5973066AE65BEE5FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 16E2
Signing time: Sun 19 Oct 2025 14:01:38 +0000
Manifest this update: Sun 19 Oct 2025 14:01:38 +0000
Manifest next update: Mon 20 Oct 2025 14:01:38 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: b9quH905rA69d7Fg3OfaFWDlgdVk/zbFz3a4ly7rJgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:c6:9b:f2:2b:9b:6d:59:73:06:6a:e6:5b:ee:5f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Oct 19 14:01:38 2025 GMT
Not After : Oct 20 14:01:38 2025 GMT
Subject: CN=a42aacfab7cf946d50c54a007d440ca2bc28c2d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:f9:5b:f5:f4:59:98:b1:98:91:de:8f:26:
c2:7d:c7:30:7c:a4:dd:ba:65:e7:c0:c2:ab:00:65:
9f:07:ef:84:bd:2b:52:fd:e0:bc:ea:dc:18:ef:46:
7e:00:01:db:c4:1f:1d:f7:88:68:51:2e:bd:35:97:
8d:66:3f:55:e3:7a:d9:87:7f:72:67:81:9d:1c:a0:
9f:de:f0:54:c2:b2:96:ba:00:ca:ce:e7:78:1e:ed:
5e:f5:36:93:1b:29:17:eb:39:6b:f1:d9:05:56:1e:
0a:34:ce:58:8c:40:0e:f2:b6:d7:d3:48:e4:46:4c:
da:60:8b:5d:76:52:eb:15:67:56:17:2a:fb:15:66:
02:41:8b:57:c8:55:f3:87:10:48:42:76:18:65:05:
fd:e5:25:d4:6a:69:85:4f:73:94:6f:fc:40:b8:5d:
98:23:3a:35:19:6b:50:cc:d0:58:fd:0e:51:61:99:
2f:bd:60:e3:ec:f1:39:c5:d2:a2:22:81:e3:de:c3:
0b:dc:03:d3:76:aa:52:ca:82:a3:85:d8:01:b7:64:
f6:9c:2d:f1:7b:b2:c7:e6:9a:d5:15:92:b4:11:61:
ff:bd:a9:4a:1a:4b:0c:20:7a:c6:f6:b2:1c:ea:e6:
97:00:83:7c:40:fe:33:0f:5f:c1:38:4e:18:ec:47:
fb:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:2A:AC:FA:B7:CF:94:6D:50:C5:4A:00:7D:44:0C:A2:BC:28:C2:D0
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1f:c0:47:dc:d1:9f:4e:9c:93:16:fc:56:3c:9a:c7:ce:e8:
4a:72:8a:2b:ae:a7:33:d4:88:15:fd:9d:a8:e4:03:ab:93:44:
4a:3c:d8:58:c3:71:83:0a:1e:7b:aa:fd:3d:ba:40:84:d3:92:
4b:1c:23:bc:31:e4:3d:85:08:ac:a7:e4:1a:46:47:59:06:94:
22:0a:c2:08:df:3b:ce:95:37:49:c4:26:28:69:f7:b4:e7:dd:
33:63:1e:8f:e1:4f:2c:e2:5b:54:e9:04:bd:04:82:11:ad:5c:
53:ce:69:23:01:fd:67:c2:b9:e1:e8:ab:33:84:0f:8b:72:3d:
e7:72:f7:c2:78:1f:a4:f8:ad:06:e8:02:b4:c2:67:39:76:7b:
3b:10:5d:21:10:88:02:1a:f3:93:04:be:96:21:87:e9:1f:48:
2f:0c:ba:41:89:ff:de:6b:17:17:c2:fc:e4:d7:ab:87:fc:7f:
71:64:bc:9b:c4:fe:cf:69:1a:d6:d9:2c:29:03:bf:ae:c4:3f:
12:02:04:8e:16:04:cc:62:2c:6f:2d:dc:4f:d8:34:c2:7f:3d:
73:4d:88:b2:18:68:69:36:e3:d2:ac:31:d8:d5:0a:ae:21:50:
08:69:71:0c:ff:9e:ad:32:09:73:44:16:73:dd:bf:61:3e:c4:
b0:62:1c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 17:33:23 2025 by rpki-client