Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: luWpDrm81mARMw5lgSqQ1SHdfKNNa9jBbmmdH4tD2LM=
Subject key identifier: DC:59:E1:60:23:42:45:1C:68:8C:7E:B5:9D:DD:DA:2D:2E:AF:ED:1D
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 0199D1DC00071175A735137FFB78729A1261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 0211
Signing time: Sat 11 Oct 2025 06:01:19 +0000
Manifest this update: Sat 11 Oct 2025 06:01:19 +0000
Manifest next update: Sun 12 Oct 2025 06:01:19 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: r/XMhfwn6K+uh8xZu1iJqLrY/dgGHytUa78fY17lXGQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Oct 2025 02:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:d1:dc:00:07:11:75:a7:35:13:7f:fb:78:72:9a:12:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Oct 11 06:01:19 2025 GMT
Not After : Oct 12 06:01:19 2025 GMT
Subject: CN=dc59e1602342451c688c7eb59dddda2d2eafed1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:20:1c:52:c9:bd:eb:3e:11:a0:71:22:ec:a8:
d0:05:c2:7d:7b:30:5c:63:75:c0:bf:f5:87:74:9c:
35:8d:61:ab:56:88:8a:f1:50:08:4f:42:12:f3:b2:
e8:a0:f8:42:20:fa:b6:11:93:85:30:fc:5f:49:ef:
a9:89:05:f1:bf:86:4f:af:f9:99:e5:da:95:59:15:
ca:91:f0:a9:92:4b:6c:43:6b:9d:5b:c8:e5:b7:c6:
06:d5:e7:80:ef:49:f4:64:c6:26:45:6d:29:41:cc:
59:d2:09:6a:ab:6d:d4:06:d2:98:21:c0:75:09:38:
02:fb:e9:10:d5:46:1e:ba:13:e2:e4:8e:37:af:37:
3a:69:7c:8c:79:cd:2b:21:36:ea:0c:2f:aa:e7:db:
30:f0:3a:89:e8:1d:21:a2:b7:c7:41:40:0a:40:b9:
55:f9:d3:9b:3e:97:68:d6:73:87:fe:a8:e2:60:f2:
aa:c4:5b:2e:33:f8:f7:0b:9f:2f:ac:2e:17:c8:d5:
1a:f5:46:98:df:46:03:12:75:30:33:80:c1:db:e4:
d6:dc:f7:43:73:aa:03:2d:19:55:7e:22:7d:73:cf:
e5:f8:94:ba:66:59:c5:1a:4a:42:4f:f8:88:34:74:
39:a9:f8:63:62:64:9e:8d:a4:bc:f0:be:30:aa:1f:
dc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:E1:60:23:42:45:1C:68:8C:7E:B5:9D:DD:DA:2D:2E:AF:ED:1D
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:25:c6:4e:ef:45:a9:2f:cb:f7:68:47:4b:4c:ba:26:00:68:
31:52:47:22:fc:c3:6c:78:f6:25:4f:30:d8:d3:52:3c:26:6c:
7c:58:0a:89:db:38:a1:cd:14:e3:1d:4a:78:22:c1:0a:a6:c8:
d7:80:dc:80:50:39:3d:bd:d8:78:96:ad:2c:91:cc:1f:a0:4b:
f7:a0:33:89:a1:f2:09:5d:48:e1:75:18:0f:5d:18:0c:ba:b0:
5c:41:dc:14:47:56:2c:f3:57:54:e7:a5:01:b3:61:ab:81:38:
cd:7a:fb:33:ee:75:11:f7:94:d0:22:62:ef:10:86:df:6a:e8:
ac:e7:54:2b:8d:98:4a:00:e5:fd:f4:bf:c4:af:fc:01:24:83:
29:b4:d9:38:93:75:23:b3:25:63:30:8c:e4:9e:59:3a:6c:7d:
f0:72:e5:48:b2:76:13:81:57:3a:3e:0d:44:d8:14:6f:d0:c6:
58:58:a0:28:42:bf:b7:5d:74:a6:8e:bb:1a:e4:5f:65:de:a7:
85:18:7e:41:76:20:66:4a:60:e2:18:74:f3:54:d2:1c:d5:7a:
0b:9b:c0:ec:16:a0:e2:ba:f6:de:99:30:44:dc:d4:d2:d9:ea:
1a:50:87:d1:8c:a5:0d:3c:51:95:c5:e8:d7:c8:e9:db:11:9e:
c0:e2:01:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 11 11:31:24 2025 by rpki-client