Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: Cnrt4Gx+EEwbOKPrNir97T/2bRXNv0K2pFflGWIQZTo=
Subject key identifier: 65:63:6A:C3:4F:A1:44:E6:C8:41:B9:0E:85:8E:72:C2:05:95:DD:EC
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 01984965669F9499F92E7510DBDE28AD4A5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:00:38 +0000
Manifest this update: Sun 27 Jul 2025 01:00:38 +0000
Manifest next update: Mon 28 Jul 2025 01:00:38 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: OzcFA7xNGN8zf2fxj26Gy4Uo7xNi5yqdFJwFGr56Cb4=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:66:9f:94:99:f9:2e:75:10:db:de:28:ad:4a:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Jul 27 01:00:38 2025 GMT
Not After : Jul 28 01:00:38 2025 GMT
Subject: CN=65636ac34fa144e6c841b90e858e72c20595ddec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:17:8b:8e:d2:ae:c3:6d:03:ac:7d:22:ed:8c:
a8:86:69:2d:b5:0c:42:09:0a:d5:05:23:66:b4:3e:
36:41:f7:dc:c7:07:61:15:7e:9c:a1:8c:d9:df:6a:
39:7a:0a:d9:0f:50:db:15:b3:5d:5f:49:85:62:bf:
0f:27:29:af:b9:fd:b2:1a:72:58:b6:1a:5f:e4:4f:
cb:bf:44:f4:c1:87:25:59:b5:06:6f:5f:f7:6e:d0:
2b:2b:0d:33:89:00:bc:f6:f2:43:0f:bd:81:b4:84:
a2:9e:98:4a:00:7a:13:15:72:09:cc:eb:0f:88:e4:
89:b3:75:10:b8:16:a2:85:2a:80:6b:b6:1b:fa:02:
e3:88:44:63:49:e0:10:a0:92:7e:f4:15:e8:5e:aa:
d4:43:0c:b8:a4:6a:49:24:ad:1b:c3:34:55:41:6f:
32:0d:fb:65:75:8f:32:cf:68:ea:b4:f0:7a:10:37:
83:3e:cb:49:8e:df:39:da:ef:61:d2:76:d4:0d:23:
07:f1:43:11:70:1c:37:23:71:f0:02:7e:ef:ce:30:
26:08:f5:57:87:b2:fc:43:15:b3:de:0a:09:d3:91:
a6:35:e1:c5:78:1f:84:65:ad:c8:db:aa:29:64:47:
96:37:83:13:61:8d:37:59:25:90:32:81:7e:53:94:
e0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:63:6A:C3:4F:A1:44:E6:C8:41:B9:0E:85:8E:72:C2:05:95:DD:EC
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fb:ae:45:2d:6a:ca:31:02:e8:b9:8e:5e:94:35:33:4e:fa:
bb:e0:4a:51:8d:59:fd:4d:13:5c:0b:81:3d:a8:2e:a0:13:b9:
8b:d4:b7:29:cc:ae:17:05:1a:b9:3f:e7:ff:68:83:ea:2b:cd:
68:14:f6:fc:15:4f:a9:9e:4d:bc:01:09:09:df:15:b8:78:4e:
6e:7c:13:0a:c4:ce:d5:7b:9a:8b:35:7c:21:07:6e:23:68:03:
86:47:b1:34:bd:fb:35:e1:e5:ab:dd:51:9d:1f:85:c0:5d:94:
4d:15:8e:a6:78:4c:fa:86:84:1f:cd:f3:57:44:be:f6:41:47:
fe:fc:ed:84:6f:a1:49:1e:79:1c:ea:a9:e9:80:b2:5b:61:b6:
b8:d0:d0:30:35:18:30:67:0e:02:69:bf:4b:58:fa:12:8f:6c:
03:9b:19:c2:8c:a2:d5:42:f4:de:69:a0:9b:db:47:e4:19:fe:
18:68:0c:a5:9c:ed:36:5e:a3:30:04:be:50:6d:3c:23:eb:ad:
e5:4b:de:bb:dc:66:aa:1a:b5:df:50:60:20:48:05:a5:76:69:
eb:e1:e8:5a:f7:ce:12:c8:c9:b2:61:f5:ad:c3:08:f9:79:63:
42:24:10:6c:db:db:ad:24:5c:d2:0a:cf:57:bb:ec:db:f8:b1:
c7:0b:11:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:31:11 2025 by rpki-client