Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
File: AkHvRDYUJQbyZZODwW69oeKbT4Y.mft (raw, json)
Hash identifier: nLF5k5GtyI0HhlR1GABhWEqEW5UncVWEO8nKLpBVuXI=
Subject key identifier: 9B:40:ED:D2:23:F5:2F:3E:06:97:8A:17:83:D3:3A:36:4A:D1:BA:38
Authority key identifier: 02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
Certificate issuer: /CN=0241ef4436142506f2659383c16ebda1e29b4f86
Certificate serial: 0198481BC152F441D5A37861667D67FCD6E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
Manifest number: 0EC3
Signing time: Sat 26 Jul 2025 19:00:35 +0000
Manifest this update: Sat 26 Jul 2025 19:00:35 +0000
Manifest next update: Sun 27 Jul 2025 19:00:35 +0000
Files and hashes: 1: AkHvRDYUJQbyZZODwW69oeKbT4Y.crl (hash: fQCUBDbfsIx80ci10ai6pA133DZ0NYYn8cj/RugeVjA=)
2: NDyhuvBiD7Dcf-VvAcHjeKP4Wls.roa (hash: oeDnEopXVy5MJcNbGxGeEZ1ceng1jmSd304y/xLBjoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:c1:52:f4:41:d5:a3:78:61:66:7d:67:fc:d6:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241ef4436142506f2659383c16ebda1e29b4f86
Validity
Not Before: Jul 26 19:00:35 2025 GMT
Not After : Jul 27 19:00:35 2025 GMT
Subject: CN=9b40edd223f52f3e06978a1783d33a364ad1ba38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:10:6d:d4:47:4d:1f:1e:37:3a:1f:e4:56:eb:
5b:66:f2:99:9d:d3:03:16:c3:c0:0b:22:2e:ad:03:
9a:53:aa:dd:60:c1:a7:b6:ad:b7:93:d6:6e:d7:5c:
f7:cf:d1:8b:82:17:d0:64:df:37:66:e1:35:5e:2a:
ce:11:5c:8e:d9:66:9c:18:73:b8:2e:6c:02:e7:b6:
af:f5:5c:15:8c:03:36:43:92:ca:a3:4a:a6:63:7a:
e0:8e:2f:88:6a:d4:57:4a:be:b5:fc:87:38:41:75:
08:d0:01:30:c8:7c:ce:d5:d9:a6:9a:a3:e7:0a:fe:
3b:02:3c:a0:11:d5:cc:ad:c8:02:a8:a8:cb:1b:f2:
b7:82:87:40:2e:48:6d:5f:8b:a8:34:69:d3:40:a6:
6d:07:af:2a:9b:a7:82:ce:15:91:bd:79:77:88:45:
a8:9e:63:44:90:55:48:26:83:e4:12:63:5c:fa:48:
48:28:a9:8d:21:42:4b:e2:c5:77:b6:18:05:0c:0f:
c1:a0:86:30:1c:d1:fd:81:e2:b0:34:ba:f6:9d:a4:
e0:f5:0a:57:eb:6c:e3:63:e5:0d:c4:8e:92:2d:7c:
bc:34:2e:40:75:6e:cd:88:2c:51:50:c4:0b:78:24:
bf:f6:4a:3c:51:73:65:6a:92:fa:83:ea:ec:2d:68:
e4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:ED:D2:23:F5:2F:3E:06:97:8A:17:83:D3:3A:36:4A:D1:BA:38
X509v3 Authority Key Identifier:
keyid:02:41:EF:44:36:14:25:06:F2:65:93:83:C1:6E:BD:A1:E2:9B:4F:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkHvRDYUJQbyZZODwW69oeKbT4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9ee202-b9b3-47f0-8c9a-9fdf4c15f9a6/1/AkHvRDYUJQbyZZODwW69oeKbT4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:1d:1c:87:f5:ce:b6:a0:11:18:da:9f:39:73:19:4b:43:a4:
1d:f7:be:5c:04:f1:59:d4:52:65:e7:17:d6:63:dd:88:d0:ef:
00:ea:4b:94:1d:0d:e7:da:f2:fe:4f:fe:56:c2:bd:35:ac:97:
95:30:c8:ba:91:8b:6d:53:25:9f:c3:39:59:a9:00:49:b0:78:
0d:4e:08:39:82:14:45:df:52:1f:ef:41:c6:5f:a2:4a:74:3f:
10:48:f8:88:bb:0f:f2:07:26:75:0f:1c:88:44:c5:a9:d3:b3:
9b:22:f3:24:6d:bf:72:d7:8e:4c:9d:43:dc:0e:56:c8:2b:fd:
6d:d9:97:56:aa:00:ea:15:e4:3b:09:91:e3:8b:36:87:61:69:
74:b6:98:11:7a:dd:2c:46:12:19:5c:c4:5b:e1:1d:fb:31:24:
93:d9:4d:83:bc:36:6a:28:0f:16:68:25:17:86:91:95:27:6d:
d7:31:6a:49:62:d4:e9:04:4e:a9:69:07:db:8d:4a:75:ca:4e:
0a:e3:d8:2a:1b:a2:2b:55:21:67:4d:e1:ef:98:40:41:c0:28:
8a:cf:d6:82:fe:c5:ca:a9:a0:3d:32:3e:82:a7:9a:51:eb:8b:
ed:ff:c5:a9:76:33:06:6b:e5:be:e9:e6:62:f0:26:9f:00:da:
56:34:1c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:35:04 2025 by rpki-client