Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: 5oIUF7vM+Y7CQcM3mbswonCR7ZfFASDz/vvH3GSA6w8=
Subject key identifier: 1F:55:54:B4:19:FD:A2:5E:3C:32:01:37:7C:4C:CF:E2:EC:9E:7E:47
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 01984777F544CFE1C2FD025C7DADB9FF2008
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0CF1
Signing time: Sat 26 Jul 2025 16:01:40 +0000
Manifest this update: Sat 26 Jul 2025 16:01:40 +0000
Manifest next update: Sun 27 Jul 2025 16:01:40 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: cYHUkVkOIa1FBKSqUnHIJsx0rZ98duyvSl5EaAYz6Q4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:f5:44:cf:e1:c2:fd:02:5c:7d:ad:b9:ff:20:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Jul 26 16:01:40 2025 GMT
Not After : Jul 27 16:01:40 2025 GMT
Subject: CN=1f5554b419fda25e3c3201377c4ccfe2ec9e7e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b2:d7:2c:49:65:73:80:90:9a:77:bc:56:5d:
3c:5a:57:a0:79:a3:be:87:47:e0:09:83:fd:cb:cb:
ef:51:ff:d8:01:a3:b8:ee:2b:15:f7:e7:a7:7b:c6:
1b:ea:21:57:2a:1c:b3:b5:14:54:aa:05:ba:a7:41:
c9:57:81:61:9d:8b:2a:14:c5:a2:d6:dc:29:b9:cd:
3f:2f:f0:f4:28:98:f2:2f:3a:e2:b8:62:96:c8:8f:
88:2c:4d:13:ac:61:ab:fd:ba:3a:c8:2f:d7:ec:82:
8c:1e:38:fe:48:9b:a3:87:2d:5b:7b:97:a3:81:6f:
54:f7:2b:2c:58:d9:da:e4:22:0a:f1:57:a7:6d:b6:
41:87:86:b2:e8:21:85:fa:be:53:b8:8c:cc:34:91:
c4:79:9e:cf:69:2a:4d:44:f8:2a:16:94:f4:50:0b:
fb:9c:a5:80:3b:8d:64:1b:8a:f0:66:7c:09:9c:d0:
5e:5f:70:0e:b5:4d:91:52:43:1c:90:0a:fc:a8:e5:
c7:09:4a:20:4e:48:52:6e:ac:e1:22:4f:11:bd:02:
ec:7f:da:2f:92:ac:ef:98:a0:82:a9:53:e3:6e:eb:
4d:96:dd:f9:48:fc:a4:a9:71:5a:e6:b8:24:9b:42:
b9:7a:f1:84:8a:98:9c:63:6e:27:b9:c2:73:86:1f:
b2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:55:54:B4:19:FD:A2:5E:3C:32:01:37:7C:4C:CF:E2:EC:9E:7E:47
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:10:bd:e3:f4:33:a9:81:3e:4a:ca:7c:98:f2:b5:96:4e:a0:
3b:04:27:11:be:5d:16:02:c0:09:f1:12:7c:c9:bd:6b:a2:0b:
b1:da:d2:95:0c:95:ba:3b:d8:c5:2a:69:d5:88:36:3c:be:60:
4d:af:3c:16:53:29:a8:52:50:b5:0d:f1:84:50:79:29:23:fb:
7e:a3:e7:f7:5b:6b:69:32:ba:4e:08:b5:1c:ab:9d:ea:73:c9:
22:61:7e:54:bd:13:c2:a2:e0:66:d4:84:b6:42:90:aa:7f:69:
76:b3:f3:3a:51:f3:ed:a7:d5:ca:28:6f:36:e9:35:c3:cf:91:
f6:8b:83:8b:bd:c3:18:3e:a2:a3:e3:db:f0:09:d5:07:8e:14:
7d:d0:e9:9e:8e:cb:07:8f:d9:65:8a:df:3c:0a:f5:06:02:c4:
9e:da:0f:72:75:51:70:c5:51:15:cc:14:0f:ee:4e:eb:ed:57:
58:29:3b:e3:00:17:81:cc:e6:f7:34:b2:2d:b8:4c:31:46:d2:
b3:f4:65:8c:a7:58:ed:b0:89:f3:fd:26:f5:38:ff:7e:22:53:
20:c7:45:dc:74:a6:e1:6d:36:d9:51:3e:31:62:36:d6:78:a3:
fd:6c:f4:3d:a8:ce:20:14:02:7b:46:01:79:e5:25:76:47:0f:
ba:ff:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:47:38 2025 by rpki-client