Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
File: AK26S0B03hPZjWSBmm7IX4Eqeek.mft (raw, json)
Hash identifier: yA/Z9XHZVICAteF1JT9hsXcj80Bb4FyqS6zI/vscDdw=
Subject key identifier: DA:89:1D:C0:3E:22:BB:45:F8:8D:BF:FD:64:7B:60:52:E1:64:EC:9F
Authority key identifier: 00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
Certificate issuer: /CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Certificate serial: 0199240DAE22137C3DD52B13D5F04D9D4396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 12:01:40 +0000
Manifest this update: Sun 07 Sep 2025 12:01:40 +0000
Manifest next update: Mon 08 Sep 2025 12:01:40 +0000
Files and hashes: 1: 6MYFp39ARHMq2YJE5lHJSxTEL30.roa (hash: 5gVWBuoSK8Y4bSXsVg//9ioaebm5O8SmIGV4l8p9YZY=)
2: AK26S0B03hPZjWSBmm7IX4Eqeek.crl (hash: mLtbvx/BFrgN6BAgiVGKgFqmFParUeJ0brK/PVti4RI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:24:0d:ae:22:13:7c:3d:d5:2b:13:d5:f0:4d:9d:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00adba4b4074de13d98d64819a6ec85f812a79e9
Validity
Not Before: Sep 7 12:01:40 2025 GMT
Not After : Sep 8 12:01:40 2025 GMT
Subject: CN=da891dc03e22bb45f88dbffd647b6052e164ec9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:df:1a:01:d9:2f:ee:af:94:4a:49:c8:b8:53:
ed:bb:e9:dd:9e:e4:a4:5a:fb:64:3d:ac:8c:e1:c2:
3b:8a:e3:0a:13:78:31:a9:80:e9:6d:4d:b1:6c:32:
b8:4c:3c:d4:77:75:61:07:5d:0f:af:11:42:c0:0d:
ed:19:fa:b0:e8:77:66:ab:f8:06:5f:b7:78:7c:33:
04:a0:97:f3:8e:65:91:36:8e:e8:6c:a3:1f:58:51:
4d:23:f5:9f:e9:d7:57:25:02:29:0a:ba:e1:86:f2:
2d:5a:74:3c:a2:3e:bc:78:02:3d:d2:25:59:08:ec:
cb:1d:5c:02:7e:d0:50:71:d4:72:dd:9a:3c:ed:66:
56:30:0f:35:21:7c:12:b5:c6:11:78:9b:15:42:4c:
1a:65:0f:67:b4:89:1c:55:a5:51:a4:1b:49:cc:2d:
c7:53:84:a9:bf:30:b4:ec:a1:1b:a2:5d:06:b9:0a:
96:4a:24:e9:8f:28:61:55:4b:4e:25:22:40:01:c0:
c8:0a:f2:05:d3:f2:83:0e:11:7c:8d:fc:5f:76:23:
be:a3:10:eb:4b:da:1a:24:7a:4c:68:75:cd:6c:7b:
2a:2d:82:c7:11:17:42:ef:08:b9:15:1b:79:77:29:
29:39:43:d7:da:dd:3d:f0:24:39:84:e0:82:d0:91:
21:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:89:1D:C0:3E:22:BB:45:F8:8D:BF:FD:64:7B:60:52:E1:64:EC:9F
X509v3 Authority Key Identifier:
keyid:00:AD:BA:4B:40:74:DE:13:D9:8D:64:81:9A:6E:C8:5F:81:2A:79:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK26S0B03hPZjWSBmm7IX4Eqeek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/314a0f-c1d2-434c-871e-b3895b962c52/1/AK26S0B03hPZjWSBmm7IX4Eqeek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a6:51:49:aa:56:c6:4d:7b:82:62:c0:05:2f:0f:cb:53:48:
50:84:43:c3:06:cd:2d:07:04:fe:be:b3:86:1e:bb:da:e3:ee:
1f:83:44:c6:63:cf:4a:10:56:06:c3:f1:3d:55:8d:68:59:14:
6b:44:96:12:9d:32:a4:cf:97:db:28:c7:c9:13:4f:c2:55:d1:
08:93:9d:39:84:2a:1c:74:07:09:11:d5:c2:67:5f:4f:81:30:
c9:48:2f:fd:b6:ed:bb:be:e3:94:bf:ae:cc:f5:2f:1c:8e:07:
71:4a:a0:9f:c2:8c:4f:c8:25:4c:b8:cc:ba:76:54:ed:54:59:
5c:23:df:50:97:86:46:d2:3f:8b:5d:84:b0:ab:a1:75:bf:bb:
d6:90:c5:f0:11:52:09:2c:dc:bc:a2:71:bf:46:5e:52:b6:f9:
5b:8c:0c:33:4b:33:30:54:e4:75:45:ec:c2:7d:d1:89:7a:73:
01:7a:45:b7:9d:8e:12:b5:f7:57:93:4d:58:9a:33:a6:9d:df:
bc:82:53:4a:88:f9:85:3b:4f:42:1d:f6:2c:7b:cb:b6:1c:83:
eb:4b:3d:c8:91:c3:6f:41:20:39:54:23:1b:25:ec:8f:ed:9c:
fc:d5:7e:c8:df:6a:9c:6b:48:56:89:90:f2:67:1d:49:e6:2a:
ee:f9:65:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkkDa4iE3w91SsT1fBNnUOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWRiYTRiNDA3NGRlMTNkOThkNjQ4MTlhNmVjODVmODEy
YTc5ZTkwHhcNMjUwOTA3MTIwMTQwWhcNMjUwOTA4MTIwMTQwWjAzMTEwLwYDVQQD
EyhkYTg5MWRjMDNlMjJiYjQ1Zjg4ZGJmZmQ2NDdiNjA1MmUxNjRlYzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N8aAdkv7q+USknIuFPtu+ndnuSk
WvtkPayM4cI7iuMKE3gxqYDpbU2xbDK4TDzUd3VhB10PrxFCwA3tGfqw6Hdmq/gG
X7d4fDMEoJfzjmWRNo7obKMfWFFNI/Wf6ddXJQIpCrrhhvItWnQ8oj68eAI90iVZ
COzLHVwCftBQcdRy3Zo87WZWMA81IXwStcYReJsVQkwaZQ9ntIkcVaVRpBtJzC3H
U4SpvzC07KEbol0GuQqWSiTpjyhhVUtOJSJAAcDICvIF0/KDDhF8jfxfdiO+oxDr
S9oaJHpMaHXNbHsqLYLHERdC7wi5FRt5dykpOUPX2t098CQ5hOCC0JEhHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqJHcA+IrtF+I2//WR7YFLhZOyfMB8GA1UdIwQY
MBaAFACtuktAdN4T2Y1kgZpuyF+BKnnpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUt
YjM4OTViOTYyYzUyLzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMTRhMGYtYzFkMi00MzRjLTg3MWUtYjM4OTViOTYyYzUy
LzEvQUsyNlMwQjAzaFBaaldTQm1tN0lYNEVxZWVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlqZRSapW
xk17gmLABS8Py1NIUIRDwwbNLQcE/r6zhh672uPuH4NExmPPShBWBsPxPVWNaFkU
a0SWEp0ypM+X2yjHyRNPwlXRCJOdOYQqHHQHCRHVwmdfT4EwyUgv/bbtu77jlL+u
zPUvHI4HcUqgn8KMT8glTLjMunZU7VRZXCPfUJeGRtI/i12EsKuhdb+71pDF8BFS
CSzcvKJxv0ZeUrb5W4wMM0szMFTkdUXswn3RiXpzAXpFt52OErX3V5NNWJozpp3f
vIJTSoj5hTtPQh32LHvLthyD60s9yJHDb0EgOVQjGyXsj+2c/NV+yN9qnGtIVomQ
8mcdSeYq7vllBQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:10 2025 by rpki-client