Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: 2wIwA2GBkY3lJsEPLylRg7eus9TWhzRVkI5aCN2UdQE=
Subject key identifier: A5:9B:48:43:5A:86:E9:04:D7:65:8C:49:E0:C7:3B:D5:99:2E:30:73
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 0197B77CB90E5085AE1D31486091CF008D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:33 +0000
Manifest this update: Sat 28 Jun 2025 17:01:33 +0000
Manifest next update: Sun 29 Jun 2025 17:01:33 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: NSqayXfERWCt78a20R2u0SO+nLUHTaM048lPFvMnHF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b9:0e:50:85:ae:1d:31:48:60:91:cf:00:8d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Jun 28 17:01:33 2025 GMT
Not After : Jun 29 17:01:33 2025 GMT
Subject: CN=a59b48435a86e904d7658c49e0c73bd5992e3073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a3:81:49:b8:94:d2:7a:76:7b:44:01:b9:fc:
56:58:e1:3e:95:cf:a6:cf:c2:54:14:09:9c:37:ff:
d4:a6:b0:81:9e:4f:5a:15:69:81:d9:7f:02:61:c5:
c3:70:13:25:7e:3b:34:47:bf:1f:3c:72:95:84:90:
b5:4c:f8:51:26:cf:85:00:cf:82:7f:ac:f5:01:e1:
bd:cd:53:92:d5:6d:ac:34:b1:a7:17:bb:83:7a:a3:
75:b3:54:e6:3b:7a:26:93:59:d0:2d:24:96:cf:10:
c2:17:ef:a8:14:d9:3f:61:60:21:9b:c7:04:f6:8e:
bb:e1:a2:1a:43:6a:59:7e:c2:57:ad:72:10:c4:7e:
c1:0b:ba:34:19:fd:57:c9:79:55:10:70:9d:94:d8:
b2:52:ea:d7:81:b0:a5:07:87:be:e1:ca:ca:b1:ff:
30:ad:05:4e:ae:d8:eb:3e:0d:c3:4e:3e:62:91:fd:
ea:c4:26:a1:49:ca:37:d5:6a:90:01:36:85:fb:69:
0b:c4:49:03:ea:ea:1c:c9:2f:de:a1:61:81:45:7b:
d4:04:09:ec:94:2d:04:5c:ba:b7:a8:91:c0:03:90:
c5:95:a6:98:d7:6d:81:f0:56:2d:6a:5a:9f:1f:d9:
c4:05:73:dd:40:f7:20:02:5e:ac:45:83:32:57:02:
0d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9B:48:43:5A:86:E9:04:D7:65:8C:49:E0:C7:3B:D5:99:2E:30:73
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:f3:d4:18:e2:a6:92:f4:fa:70:65:96:46:d3:d1:44:86:85:
18:92:b7:c1:e6:bf:f3:e1:f5:3e:4d:e7:36:c4:c2:34:57:35:
b3:3b:66:40:9f:f1:ef:88:9c:42:6f:b7:8e:96:7a:87:b1:7a:
5c:8c:38:4f:a7:46:0f:59:2a:50:b7:e2:7a:4e:b6:d0:60:f1:
e4:33:17:4e:56:ab:fa:81:6e:5c:d3:34:46:fb:d4:59:6e:c3:
b6:fb:45:cd:f2:b0:be:e7:cd:bf:01:9c:65:3a:f3:b6:7f:fe:
c5:52:88:80:fa:2d:82:42:b5:c4:8a:7c:29:ca:85:2a:ea:78:
69:18:77:a9:d6:0d:08:46:2d:4e:8f:cd:ad:65:bf:3e:a3:cd:
c2:2c:5b:5f:9b:db:0f:2f:cb:3a:5d:e4:79:0d:53:42:ae:5d:
b3:c7:37:62:e9:7f:a3:13:79:cd:88:1a:d6:8d:9a:eb:fd:a4:
42:ca:3c:a3:86:d3:59:3a:c8:05:68:86:d8:a1:02:6e:0d:41:
15:c1:a1:b8:df:7b:f0:b7:9b:31:20:8f:7e:fd:ae:b0:15:e7:
94:32:6b:b1:35:4e:a2:e9:67:bf:9d:ee:ba:79:18:46:f0:26:
c1:fb:ea:18:fa:21:0e:c9:79:1d:28:e0:74:66:4d:ac:85:37:
d3:28:d9:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:58 2025 by rpki-client