Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: ezxZCaS1dNsDx4aMxzWcCtARPu7uT2jNac4LSFHuX3k=
Subject key identifier: 9F:D0:58:CA:F8:90:52:07:E0:1A:09:0A:F0:3D:E8:21:E4:3C:4D:0C
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 019A08C99DD670D2402D388F4766A48637EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 16EE
Signing time: Tue 21 Oct 2025 22:00:22 +0000
Manifest this update: Tue 21 Oct 2025 22:00:22 +0000
Manifest next update: Wed 22 Oct 2025 22:00:22 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: Equkden12U7xr5gybFKg5WvgUR+hN0gyC7+PofegMyE=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Oct 2025 22:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:08:c9:9d:d6:70:d2:40:2d:38:8f:47:66:a4:86:37:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Oct 21 22:00:22 2025 GMT
Not After : Oct 22 22:00:22 2025 GMT
Subject: CN=9fd058caf8905207e01a090af03de821e43c4d0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:60:91:5d:15:72:95:c9:e6:12:af:80:12:ea:
d2:95:af:38:92:18:41:b0:b8:de:14:42:87:81:b8:
ca:2f:58:85:59:35:62:42:7c:8b:27:02:50:6d:50:
20:41:c1:cc:39:bd:df:bd:64:6c:69:a3:c3:6b:32:
42:27:20:23:f3:23:e8:b3:3a:82:68:8e:4f:5f:44:
37:db:f0:c8:c6:7a:61:78:4d:3e:11:7d:ef:e1:32:
5d:10:91:06:65:c4:35:a0:3c:54:cc:24:82:bb:3e:
ce:c5:0e:5a:ea:ea:7f:09:22:c5:e8:54:7d:77:50:
7a:e8:98:69:67:4c:e5:0d:c7:d3:9f:53:f7:5c:23:
98:a1:eb:47:e5:92:da:f3:98:10:64:70:b4:a4:b8:
c5:df:49:75:cb:b0:94:9f:93:34:15:25:23:7a:f8:
c8:ca:91:d6:4b:88:23:37:a4:d9:1a:0a:ea:d8:46:
11:cd:82:f0:af:ab:51:0f:77:7d:ab:5a:a3:bb:d7:
94:c9:a4:41:f0:6b:58:42:5c:1f:8b:78:37:55:0b:
ba:75:4d:6b:2b:f7:7b:f6:03:3c:cc:fc:74:47:f1:
e8:e2:28:16:91:bb:1a:bb:f1:4a:1d:58:ff:d2:31:
16:f2:17:07:af:91:d9:72:6a:2a:01:f1:66:3f:b4:
2b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:D0:58:CA:F8:90:52:07:E0:1A:09:0A:F0:3D:E8:21:E4:3C:4D:0C
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:fc:41:11:76:a9:83:0b:ad:20:2c:2e:6e:00:f0:ca:ea:6b:
8a:e0:61:2d:3a:f7:15:b5:ae:49:31:16:6a:61:c2:14:e9:4e:
56:ad:89:bd:1d:96:5f:df:fa:97:85:23:25:32:21:5a:c9:17:
18:cd:6b:93:55:8b:1e:1a:04:d3:86:d7:66:d8:67:37:f8:45:
2a:b6:3e:32:a2:06:3a:e2:41:1b:55:ad:8b:15:61:66:9c:12:
f6:7e:39:77:25:68:21:4f:09:9d:a6:2b:62:9e:f7:3b:e4:c8:
c5:cb:3c:f1:7a:83:c2:e2:22:84:3a:42:5a:65:4a:9d:36:3a:
6b:d6:39:77:e0:d1:69:1a:20:7f:0c:b3:32:eb:e4:1f:89:cf:
e6:13:7f:0d:eb:dd:6f:33:43:6a:96:12:a1:bd:a4:6a:a4:96:
cd:db:7b:de:bd:b9:77:cf:21:00:61:9b:2c:fa:59:fd:9d:f2:
32:8f:4b:95:c9:4c:ff:1a:31:d8:d9:1e:8e:2c:22:79:17:6e:
b9:6c:84:68:21:36:05:a0:ed:18:23:4a:1c:e8:cb:1c:4d:04:
01:5d:3d:e1:02:00:9e:40:4f:da:21:d3:05:71:16:32:42:3b:
74:86:b7:df:9e:4e:db:ba:e9:0b:06:7c:e4:b3:b7:f6:84:49:
f8:ac:2a:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 22 07:31:11 2025 by rpki-client