Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
File: AkhBfH_pzOxbnarMCPznmdZzCIw.mft (raw, json)
Hash identifier: wvrksRvdmLA4auvww7jy88CuW60Kkmc7UB14lX/SJ5A=
Subject key identifier: 6F:8D:E2:A6:8A:E9:0A:82:C0:61:F6:AE:1B:20:BD:02:3D:B8:A8:C3
Authority key identifier: 02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
Certificate issuer: /CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Certificate serial: 019A71B91DBA6477DCC5676807201FA18500
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
Manifest number: 0F55
Signing time: Tue 11 Nov 2025 07:02:28 +0000
Manifest this update: Tue 11 Nov 2025 07:02:28 +0000
Manifest next update: Wed 12 Nov 2025 07:02:28 +0000
Files and hashes: 1: AkhBfH_pzOxbnarMCPznmdZzCIw.crl (hash: HDZjlZB3lJEjUQGC9czPEcb7KuJH+APPHGmgME/3j7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b9:1d:ba:64:77:dc:c5:67:68:07:20:1f:a1:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0248417c7fe9ccec5b9daacc08fce799d673088c
Validity
Not Before: Nov 11 07:02:28 2025 GMT
Not After : Nov 12 07:02:28 2025 GMT
Subject: CN=6f8de2a68ae90a82c061f6ae1b20bd023db8a8c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:73:b3:33:70:87:9f:24:80:dd:92:72:06:bc:
98:0b:9a:f1:e7:74:b1:46:f6:cb:f2:97:ca:3d:85:
b9:a7:48:ca:ed:63:5a:14:c0:b0:64:c7:d5:c4:2e:
c2:b3:cf:2f:f1:3d:27:16:48:c2:d3:4d:68:eb:2a:
99:13:d6:3c:d4:48:ef:fd:6f:f9:9c:ab:52:b4:d7:
8b:1a:c8:c3:a3:32:00:c3:d3:1f:00:e2:b9:6d:b2:
d6:22:28:61:d0:4a:c2:53:c2:eb:3e:06:c0:6d:ae:
a6:d2:11:c5:5a:f6:32:d9:a5:6f:72:fe:04:cb:de:
52:23:4f:71:79:a1:2e:38:97:e2:12:d8:29:71:f7:
48:b4:9e:6f:d1:4c:87:77:18:7d:84:c2:29:ba:93:
7a:e4:d3:72:17:bb:a7:2d:99:74:6b:4f:6c:2b:2e:
62:ef:a5:45:e5:9a:e2:cc:8d:e6:45:60:20:de:99:
6f:c2:29:06:cc:75:e2:a5:01:68:9f:de:36:3f:d7:
8d:33:71:6c:43:19:aa:db:df:8b:c1:16:70:8e:2d:
19:95:18:28:70:1e:bd:34:79:c9:2f:9d:8e:eb:58:
4e:c4:36:1e:e7:cd:80:b7:c8:b6:55:b8:9d:19:6c:
7c:5c:d1:65:fd:a4:e5:7b:6d:7b:f6:51:40:6d:76:
3b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:8D:E2:A6:8A:E9:0A:82:C0:61:F6:AE:1B:20:BD:02:3D:B8:A8:C3
X509v3 Authority Key Identifier:
keyid:02:48:41:7C:7F:E9:CC:EC:5B:9D:AA:CC:08:FC:E7:99:D6:73:08:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkhBfH_pzOxbnarMCPznmdZzCIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/f1678c-ddcc-4253-8595-63c707441ba6/1/AkhBfH_pzOxbnarMCPznmdZzCIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d5:f5:e8:78:45:3e:01:98:8b:ca:f8:a0:e4:5f:3b:0e:ca:
68:4e:4b:77:35:c3:60:ac:3e:ba:1b:13:af:d3:cf:3e:6f:0a:
0d:04:20:ce:95:07:62:66:da:45:5e:af:cf:32:7e:cf:7a:1e:
6a:62:c2:5f:e2:d1:a2:17:33:13:40:35:58:5f:11:e0:02:88:
aa:a2:bc:5e:99:81:ff:56:82:e2:1f:c7:c7:fa:47:d6:7c:22:
b2:eb:d2:5b:e3:dc:a8:e6:7a:2d:e3:1e:d7:da:5e:53:5c:c6:
9a:8c:38:0a:b5:0d:4d:09:8c:0d:48:fa:ce:5e:56:11:d8:25:
7d:38:87:da:a3:08:00:82:21:3e:c2:7e:48:b5:f4:ca:1c:65:
8c:08:ac:4b:99:e6:d9:5a:fe:6d:80:5a:5f:d4:6c:3f:54:75:
cb:dc:f1:b8:db:86:3f:4d:f1:04:2d:90:54:b2:3e:a0:4e:b8:
e8:4b:95:3a:ac:7a:c2:b4:a4:a0:d9:9e:4a:2f:4e:d2:5d:b3:
2a:98:83:67:b3:29:12:1c:23:98:44:f0:d9:8a:e2:dc:4e:d7:
19:87:fb:b7:28:e1:9c:67:3a:1a:91:8a:f6:e2:ca:e5:87:21:
79:cb:91:bb:8a:5c:31:94:e0:86:62:a6:97:af:69:ca:ae:83:
0d:b5:80:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpxuR26ZHfcxWdoByAfoYUAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyNDg0MTdjN2ZlOWNjZWM1YjlkYWFjYzA4ZmNlNzk5ZDY3
MzA4OGMwHhcNMjUxMTExMDcwMjI4WhcNMjUxMTEyMDcwMjI4WjAzMTEwLwYDVQQD
Eyg2ZjhkZTJhNjhhZTkwYTgyYzA2MWY2YWUxYjIwYmQwMjNkYjhhOGMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXOzM3CHnySA3ZJyBryYC5rx53Sx
RvbL8pfKPYW5p0jK7WNaFMCwZMfVxC7Cs88v8T0nFkjC001o6yqZE9Y81Ejv/W/5
nKtStNeLGsjDozIAw9MfAOK5bbLWIihh0ErCU8LrPgbAba6m0hHFWvYy2aVvcv4E
y95SI09xeaEuOJfiEtgpcfdItJ5v0UyHdxh9hMIpupN65NNyF7unLZl0a09sKy5i
76VF5ZrizI3mRWAg3plvwikGzHXipQFon942P9eNM3FsQxmq29+LwRZwji0ZlRgo
cB69NHnJL52O61hOxDYe582At8i2VbidGWx8XNFl/aTle2179lFAbXY7KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG+N4qaK6QqCwGH2rhsgvQI9uKjDMB8GA1UdIwQY
MBaAFAJIQXx/6czsW52qzAj855nWcwiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUt
NjNjNzA3NDQxYmE2LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9mMTY3OGMtZGRjYy00MjUzLTg1OTUtNjNjNzA3NDQxYmE2
LzEvQWtoQmZIX3B6T3hibmFyTUNQem5tZFp6Q0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9X16HhF
PgGYi8r4oORfOw7KaE5LdzXDYKw+uhsTr9PPPm8KDQQgzpUHYmbaRV6vzzJ+z3oe
amLCX+LRohczE0A1WF8R4AKIqqK8XpmB/1aC4h/Hx/pH1nwisuvSW+PcqOZ6LeMe
19peU1zGmow4CrUNTQmMDUj6zl5WEdglfTiH2qMIAIIhPsJ+SLX0yhxljAisS5nm
2Vr+bYBaX9RsP1R1y9zxuNuGP03xBC2QVLI+oE646EuVOqx6wrSkoNmeSi9O0l2z
KpiDZ7MpEhwjmETw2Yri3E7XGYf7tyjhnGc6GpGK9uLK5YchecuRu4pcMZTghmKm
l69pyq6DDbWAZw==
-----END CERTIFICATE-----
Generated at Tue Nov 11 12:52:05 2025 by rpki-client