Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
File: k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft (raw, json)
Hash identifier: 10Ryt1y1wN9fXNO3voqjSDoGCyfuD6MF9G0HF8eZD0c=
Subject key identifier: 14:A3:DE:4D:8D:72:7E:03:AE:04:38:E8:79:A5:8D:D8:27:94:01:69
Authority key identifier: 93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
Certificate issuer: /CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Certificate serial: 01984A419AEBCFCE458AD9BE3E81650F1A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
Manifest number: 1293
Signing time: Sun 27 Jul 2025 05:01:10 +0000
Manifest this update: Sun 27 Jul 2025 05:01:10 +0000
Manifest next update: Mon 28 Jul 2025 05:01:10 +0000
Files and hashes: 1: OI99xasONPPF-hb_rfYbSQdFoLY.roa (hash: UeUlGFKe3vD+30DqhoTEBeaxMmrZwFQuEXKIyXR/8V4=)
2: k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl (hash: DBhSid26vvnJr/CVYojbFR/0+15/vbd2M20N2kovOUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:9a:eb:cf:ce:45:8a:d9:be:3e:81:65:0f:1a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93f01e9086d40d508f5842e982f253689f7fe4c9
Validity
Not Before: Jul 27 05:01:10 2025 GMT
Not After : Jul 28 05:01:10 2025 GMT
Subject: CN=14a3de4d8d727e03ae0438e879a58dd827940169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:10:85:20:c2:bd:78:77:a8:4e:d0:c8:e2:62:
56:75:07:40:c9:01:b7:10:b4:ee:a1:2c:12:36:de:
d9:44:4a:05:59:9f:50:6c:b6:d9:d0:db:14:22:38:
f4:40:f6:39:75:7a:94:88:e3:af:85:b0:ee:b2:bb:
11:78:8f:4e:4b:ab:7d:45:be:04:68:19:33:af:0c:
86:bf:04:5d:f6:cc:43:fc:8a:47:e5:72:42:74:97:
cf:ad:1a:6e:57:c8:d9:23:a2:a5:64:c4:e7:5c:76:
ea:74:73:5b:84:64:29:6c:55:ef:2d:87:6e:9f:46:
f2:67:66:10:08:d6:04:74:5a:bc:41:bc:fd:b8:aa:
43:33:4b:6c:c4:50:f8:04:9b:a4:78:76:a2:1f:7d:
01:8b:63:91:88:d1:68:b8:77:f0:1f:14:12:41:10:
df:bd:dd:94:6b:b1:5d:8d:04:02:6b:6b:d2:5a:ae:
af:6b:6a:15:6f:0c:93:9f:80:1e:fa:13:11:54:d6:
20:ca:3f:22:65:52:09:62:fa:bc:80:6c:41:eb:70:
ae:ec:96:23:8d:08:dc:0e:31:b1:d2:fd:3b:75:02:
e2:f3:d1:29:b8:34:53:0f:89:90:cb:7c:b6:9e:69:
fa:70:40:9d:0c:7c:f9:5b:2a:88:30:d8:2a:74:2f:
07:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A3:DE:4D:8D:72:7E:03:AE:04:38:E8:79:A5:8D:D8:27:94:01:69
X509v3 Authority Key Identifier:
keyid:93:F0:1E:90:86:D4:0D:50:8F:58:42:E9:82:F2:53:68:9F:7F:E4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k_AekIbUDVCPWELpgvJTaJ9_5Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/625a92-c2d1-4ea8-9ce8-e9c92b71f50c/1/k_AekIbUDVCPWELpgvJTaJ9_5Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:68:c5:cc:04:63:1a:f6:f0:e6:74:d8:be:30:6c:b8:0e:ee:
19:8d:47:2b:48:84:ab:36:ce:67:4c:6a:20:39:77:2f:b0:10:
62:47:5e:c6:3b:e4:f0:89:86:37:81:ac:1b:20:95:1c:be:18:
f5:d1:b1:21:b4:96:84:eb:c7:d6:12:29:02:ed:92:8a:81:14:
98:d5:65:fb:b2:0f:fb:95:5f:66:ae:e2:ce:85:7f:58:34:38:
0d:39:a6:45:cd:19:7d:67:2b:ef:b5:ca:f2:6a:2e:72:59:68:
39:2e:98:25:9c:8e:9d:11:9a:fb:ad:f9:9b:2c:1f:62:0b:48:
ce:09:0a:62:fa:49:4b:8e:86:d9:9d:e4:ec:66:f9:f3:ab:59:
85:48:75:b2:8e:0b:c7:5f:d6:d0:b0:a2:8d:34:fa:b6:9f:4f:
52:f0:b7:af:fd:3c:a1:05:23:02:85:e5:db:52:84:d6:37:f6:
eb:fc:ad:9c:95:9b:b6:95:7a:e3:e4:a8:50:cb:6e:df:da:d3:
14:4c:ca:e1:70:75:9e:a1:ae:ba:b5:0f:91:0a:08:94:e2:c1:
e8:37:32:35:24:78:3a:3e:03:53:85:a6:77:f7:aa:d9:15:d7:
f1:9c:34:bf:59:41:c8:36:1a:67:2b:e6:cd:03:16:ac:be:3b:
27:20:01:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:25:48 2025 by rpki-client