Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: Ky+p/fQYvRq0Nr6REIyMDEeE/lku3cPmmtfSw4SoQm4=
Subject key identifier: 01:BF:4F:35:EE:40:4F:84:6F:0F:8B:71:8F:FE:EA:43:24:E6:AA:9C
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 01991B4088BCCB613D96D2A284E31DCD04FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 1673
Signing time: Fri 05 Sep 2025 19:00:37 +0000
Manifest this update: Fri 05 Sep 2025 19:00:37 +0000
Manifest next update: Sat 06 Sep 2025 19:00:37 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: h+ZOi+wBy0i0tT/7h3nMqlVpZcaS/gyfixZwpgLXJMw=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 17:17:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1b:40:88:bc:cb:61:3d:96:d2:a2:84:e3:1d:cd:04:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Sep 5 19:00:37 2025 GMT
Not After : Sep 6 19:00:37 2025 GMT
Subject: CN=01bf4f35ee404f846f0f8b718ffeea4324e6aa9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:3d:87:ec:14:c3:ff:bd:8a:56:3b:f7:08:
aa:42:0e:98:6e:b0:e4:9e:74:9c:9c:3c:df:22:b8:
a3:83:2d:cc:99:a6:91:4a:1d:3a:24:c2:c6:91:4f:
38:fe:84:40:6a:ea:d9:d0:d7:d5:7d:d9:da:10:89:
eb:9e:73:13:2d:2f:65:b0:27:b5:18:74:7d:b2:b8:
27:15:c9:ca:2d:b3:d7:42:3e:30:e0:74:2f:21:db:
ca:40:c0:b2:cc:87:7a:51:67:8a:7e:0c:7b:da:66:
6f:59:86:8e:b5:ec:33:9e:9d:a6:a4:ff:ee:d9:5b:
fa:3d:a8:74:e3:f2:54:53:da:e6:9f:02:32:a5:eb:
bf:14:19:62:ec:0f:4b:d7:bd:c1:e7:fa:e3:82:59:
df:38:e2:67:2f:ca:59:21:49:16:c7:5c:6c:bd:c3:
25:53:bf:5f:1c:d9:13:22:e7:37:9e:8f:32:bb:c6:
6f:17:a6:8e:c3:0d:26:a2:87:4f:99:c2:9d:9e:fa:
38:a9:36:8a:70:c1:ac:94:b2:d5:41:c0:c3:b0:99:
dc:30:98:e5:10:fa:41:d8:10:20:d3:50:d0:5f:c9:
8e:b7:dd:5e:f3:27:53:42:cb:b2:3d:c3:4c:50:f7:
dd:2a:3b:43:fb:a4:c3:cb:50:a0:5d:d8:36:73:d2:
6f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:BF:4F:35:EE:40:4F:84:6F:0F:8B:71:8F:FE:EA:43:24:E6:AA:9C
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:06:67:60:0e:f2:3d:2d:03:fe:c2:e1:85:0f:c4:aa:95:7e:
67:9a:d6:61:4d:b8:24:ac:e7:aa:21:70:6a:a7:46:eb:4a:fe:
df:31:d0:fd:f1:2d:b4:07:43:bc:4c:97:c5:c4:2c:5d:f3:1e:
47:7a:80:82:84:79:a1:0b:20:84:6c:cb:26:0c:6e:1a:e0:41:
78:12:8f:4d:42:b2:55:34:3e:db:ca:b4:df:37:58:c1:5f:39:
d0:da:03:82:5e:15:4c:d2:19:94:7b:71:c2:ab:74:d6:07:69:
90:9b:88:64:37:78:e7:ce:33:16:e7:c6:5c:6d:d7:f9:1e:c4:
01:b6:b5:42:16:b2:2a:61:34:af:f6:c7:de:3b:73:da:3f:54:
49:77:83:09:59:b7:de:3b:3e:b6:1c:da:a5:3c:06:b4:27:d5:
01:c5:13:a2:c2:86:0f:7c:e7:b7:33:0f:d0:0a:7c:e3:50:54:
f2:b6:97:a4:ef:f5:83:e9:3b:32:04:7f:32:f4:d2:b0:bb:c3:
e2:63:bb:6f:f3:3d:6a:eb:f1:78:69:2b:b3:2e:5f:6f:a0:c0:
b6:91:da:45:89:4c:f8:19:ca:f2:a9:f0:4d:ee:56:c0:06:b9:
e1:79:b6:4e:3b:db:b0:87:70:42:1a:c7:8a:69:01:27:91:21:
e6:c1:87:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 6 02:09:07 2025 by rpki-client