Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: sl6sG3FAKjjXCysFsnRgsUegw72tVE3/WgWXBnzQk8Y=
Subject key identifier: E8:FC:77:AA:18:99:A4:0A:D1:B5:C1:00:5D:58:0D:D0:CE:E7:94:1C
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019A71B8E71611C3855EB88D66E4222349EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0E10
Signing time: Tue 11 Nov 2025 07:02:14 +0000
Manifest this update: Tue 11 Nov 2025 07:02:14 +0000
Manifest next update: Wed 12 Nov 2025 07:02:14 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: KK7tk8V+elDwKrGWh1Y2731sga9D9n/ooyEjBzKMp7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:e7:16:11:c3:85:5e:b8:8d:66:e4:22:23:49:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Nov 11 07:02:14 2025 GMT
Not After : Nov 12 07:02:14 2025 GMT
Subject: CN=e8fc77aa1899a40ad1b5c1005d580dd0cee7941c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f8:b9:79:33:81:76:d4:20:17:2d:01:50:81:
92:38:47:4f:10:df:7b:eb:f9:19:e2:bc:5c:b7:94:
36:d2:06:3b:21:b9:72:05:ef:84:43:1d:50:77:23:
75:db:0b:aa:f2:81:d8:a3:0c:e7:97:e8:3f:c5:5c:
2b:de:7a:c5:a9:af:e9:56:a9:dd:9f:bc:4b:59:5c:
f0:e4:ad:f3:86:21:ce:01:a0:17:bb:ff:16:f2:c7:
8d:f1:6f:e3:c1:92:84:c9:f7:5b:df:a4:89:60:a2:
45:ab:3a:c8:90:2d:80:fe:04:56:c6:ef:bd:e6:46:
4f:59:cc:4c:12:a7:4e:6b:ab:5b:0d:83:74:86:ed:
ec:9a:d1:7f:1e:94:78:ad:4c:1f:41:67:c3:5c:bd:
85:2f:79:48:6b:75:54:6c:bb:be:e2:5d:ac:3b:21:
17:de:0e:1b:aa:ff:e9:d9:ea:dd:67:b5:72:33:8a:
ef:e8:72:0c:2e:4d:11:dd:64:b0:7f:4b:2d:ae:d0:
fa:02:7d:58:d3:80:08:ba:8c:33:9e:2f:64:fc:79:
14:83:c3:80:68:16:90:b7:4e:35:45:4d:4d:64:4b:
d4:1d:0c:03:b4:f0:52:54:80:c5:31:5a:d3:4c:33:
89:c5:b6:3c:62:c7:21:64:03:4c:90:d7:75:95:f5:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FC:77:AA:18:99:A4:0A:D1:B5:C1:00:5D:58:0D:D0:CE:E7:94:1C
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:1a:2e:0a:3d:a2:be:10:25:b4:12:43:44:ad:a0:7b:28:6d:
30:ed:9f:16:8f:ba:a0:68:fa:c9:22:a5:1a:a2:b7:11:eb:e1:
3d:a7:35:b9:89:b3:c2:08:01:4b:20:b2:84:76:61:c8:23:b0:
87:2b:51:ed:65:1a:98:ed:39:a5:cf:09:e5:8e:ce:67:8a:c4:
dc:a5:0c:da:cb:8f:e1:69:65:53:1f:c3:0a:13:3c:d4:a8:12:
bd:bb:13:ab:f5:bd:5e:fb:5c:1a:18:95:95:76:1d:d5:9a:7f:
16:3e:66:02:6d:b0:61:d5:5f:0a:89:13:d4:20:07:f4:01:4f:
20:ab:32:b4:81:5c:e0:18:d3:4b:cc:5b:24:02:e2:b4:ee:35:
45:6f:a0:2d:8d:c8:7d:e2:0f:89:03:36:0b:e4:84:7e:63:4c:
d0:8f:51:51:fb:d1:07:c8:18:30:c6:2c:66:32:c6:cb:90:e1:
f5:58:1b:fc:6b:06:a1:23:4b:db:77:6b:33:93:c6:97:6a:04:
e3:68:5e:a6:92:70:27:8e:83:33:e1:86:3e:b3:93:ce:1f:8a:
15:31:9a:29:bd:8b:c5:03:76:7c:20:f3:93:d2:8c:99:56:55:
cd:4e:a7:c0:0f:ae:00:b9:45:9b:6c:e5:1c:ef:07:6c:2e:24:
12:f1:ca:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:19 2025 by rpki-client