Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: i0/FVw0UYFJZLNFgvil9M7ws9YJayqYEQbQ+APItJaI=
Subject key identifier: 14:4C:8F:67:C7:45:F9:F3:C9:F0:39:80:D3:7B:6C:06:90:35:B7:7B
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 019938E0251BB0192EAB5809CDC030A554D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 13:03:57 +0000
Manifest this update: Thu 11 Sep 2025 13:03:57 +0000
Manifest next update: Fri 12 Sep 2025 13:03:57 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: m+P8vXOD/vmLEqPn1C3NzRjRzUK933U7mU2AvYoH914=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 13:03:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:38:e0:25:1b:b0:19:2e:ab:58:09:cd:c0:30:a5:54:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Sep 11 13:03:57 2025 GMT
Not After : Sep 12 13:03:57 2025 GMT
Subject: CN=144c8f67c745f9f3c9f03980d37b6c069035b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:b5:1a:f1:a9:0b:67:f8:89:30:89:a0:fc:
93:78:72:89:e5:d1:4b:fd:aa:ef:ea:94:1e:46:89:
44:2b:42:9a:a0:a6:7e:5e:06:f2:a5:3c:6f:19:6e:
b1:89:58:9a:9d:20:9e:f2:8e:fa:74:cd:68:dc:bf:
af:58:50:74:ce:74:8b:27:3d:7f:31:92:26:a7:5d:
15:c4:79:fb:d9:ed:f0:2b:d2:ae:43:c4:83:ca:3f:
08:a6:65:8d:d4:dc:6e:b3:0e:0b:c2:30:1b:31:85:
7d:3a:48:1a:67:b5:30:4d:1c:95:e3:2f:34:02:65:
ba:ef:b0:7f:2a:78:06:38:be:c6:6d:86:ec:54:f9:
8c:66:d8:d5:d2:7a:99:b2:ca:ba:3f:1c:0f:7c:eb:
33:08:13:b9:d7:06:2a:ae:e1:38:13:0c:c0:ac:06:
3a:4d:26:6e:44:07:ff:8f:e5:a8:2c:5a:8d:97:5f:
0e:47:11:a1:66:eb:ea:6f:15:4e:7c:68:4f:15:0e:
dd:b1:e9:80:94:a1:ef:7c:54:f7:2c:98:ea:46:25:
ef:f7:3f:ff:24:7b:fe:0f:4b:70:c5:b8:c0:74:08:
2d:ee:9d:7d:12:4e:3d:cf:0e:5d:14:e4:6e:5c:c7:
69:f6:23:73:d8:ee:32:9e:7b:51:23:e0:ce:fb:7f:
ed:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4C:8F:67:C7:45:F9:F3:C9:F0:39:80:D3:7B:6C:06:90:35:B7:7B
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5c:21:24:e5:12:50:0c:4c:12:7b:17:16:aa:39:74:90:33:
ed:56:be:59:0f:86:98:ad:4b:d1:5d:45:ec:55:0a:2d:bb:5a:
d9:d7:0b:62:21:b3:09:43:b1:78:c6:55:5a:57:91:25:f8:8d:
73:a8:91:a2:44:d0:90:d3:93:c9:78:ed:e9:76:fa:d3:13:2f:
b7:6d:20:8e:29:67:91:d5:85:c1:a0:6d:96:bd:ec:fd:24:4b:
2b:1a:bd:0d:4d:b0:5a:0d:8c:67:52:ff:57:cf:47:2a:44:02:
41:2d:7a:a9:0b:2c:f7:e0:df:f2:a8:13:be:ba:3b:8b:35:bb:
d6:b7:f5:9a:1a:04:6b:14:68:9d:3a:e3:1c:a5:6b:74:7d:e1:
f4:40:e0:9a:f4:c0:2d:c0:cd:23:91:ed:d5:3f:7e:d5:a3:7c:
ba:a5:6f:72:c8:85:56:b9:fb:6a:e1:b9:a4:cc:69:fb:51:50:
fb:10:66:7b:b6:08:08:59:a7:23:13:9c:f9:49:9a:e8:3c:db:
26:1d:a3:6c:55:0a:b0:d4:5e:bd:53:07:6a:8c:e7:6a:f5:28:
ce:78:0c:63:97:00:51:26:ed:ba:5f:51:df:35:d5:f5:2c:05:
d0:6b:94:63:f8:d4:79:9f:bc:8b:45:13:2e:f8:79:36:d5:d9:
df:19:20:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 21:46:23 2025 by rpki-client