Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: yTbc0fGHTyJ6nDXO/ik3QXb0Qyo9C6ObsrntI7hA+c0=
Subject key identifier: A9:66:2D:DA:21:52:55:5C:80:81:35:1E:06:58:8E:0D:46:10:CE:74
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01992330CF7F2B5791D291D622B4121DB88D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0B07
Signing time: Sun 07 Sep 2025 08:00:25 +0000
Manifest this update: Sun 07 Sep 2025 08:00:25 +0000
Manifest next update: Mon 08 Sep 2025 08:00:25 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: 933/hioTEqDyrSTfHE/iCzcaKhhFcHd1hOq0+S1RV0k=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:30:cf:7f:2b:57:91:d2:91:d6:22:b4:12:1d:b8:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Sep 7 08:00:25 2025 GMT
Not After : Sep 8 08:00:25 2025 GMT
Subject: CN=a9662dda2152555c8081351e06588e0d4610ce74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8c:7b:40:4e:9d:b0:24:e1:8d:43:5f:29:62:
9e:af:82:95:84:5d:95:08:d6:04:59:58:0b:32:54:
2b:7a:90:26:ad:d4:ef:f0:83:fb:8f:75:a3:2e:29:
0c:d6:d9:bf:11:70:5d:d6:53:03:51:4a:91:15:a7:
06:8b:80:f7:d9:20:2f:cb:0c:70:65:f1:06:3d:67:
f0:75:3f:7b:b3:70:79:54:ce:52:3a:62:95:79:c9:
dd:f5:42:49:9f:42:cf:19:bb:ba:3c:85:60:d3:c1:
93:f0:48:73:25:51:55:d2:e0:87:a6:f0:c7:33:b5:
5b:ec:68:e9:86:33:9c:aa:12:33:46:1a:9d:e8:e8:
d4:a1:50:e0:c5:93:90:1b:1e:27:82:c8:8a:d4:6c:
ef:8a:1d:cf:a8:66:c7:6c:92:c9:8b:f2:e4:e3:ed:
68:b6:fb:93:4b:bc:76:5c:f2:f2:07:3d:35:44:83:
03:14:ea:cd:30:2b:93:36:71:34:57:35:3c:76:a7:
f6:61:13:eb:72:c9:43:16:15:ba:61:54:65:5e:04:
5e:96:0d:01:53:c4:6f:67:92:66:17:49:9a:40:b1:
96:57:3a:88:08:d7:51:a8:78:25:98:79:3c:d2:46:
8d:d4:0b:15:88:9d:8a:8e:7a:8e:54:37:81:a3:17:
96:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:66:2D:DA:21:52:55:5C:80:81:35:1E:06:58:8E:0D:46:10:CE:74
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:66:25:e1:3f:37:9a:a4:ed:fd:8b:15:78:bd:31:27:57:74:
a0:8d:03:60:0b:4a:50:5c:1b:da:65:3c:c8:78:92:ec:5c:ac:
d9:9e:3e:6d:69:ce:39:6b:8a:e4:e5:c2:d1:f0:77:d8:cd:72:
ba:04:3b:51:31:ff:e1:b5:e5:16:25:d9:c5:b1:47:1b:9c:b8:
da:b7:b7:85:de:f6:33:84:89:38:d5:38:c8:7f:e4:c5:bb:aa:
38:ea:78:49:08:5e:e2:e6:02:0d:a2:16:ac:fa:ba:13:fe:2d:
30:94:66:53:ee:b4:f7:ee:78:fb:47:65:2e:9d:e1:23:69:28:
46:2c:4e:71:af:c5:21:44:2e:59:49:33:7c:19:75:48:3e:a8:
c9:d7:2e:95:6c:d2:2b:e7:86:ec:6a:01:c8:58:18:ca:a3:4b:
f6:2d:ea:51:bb:6b:20:ef:ed:46:64:c3:3d:8a:be:f5:92:ec:
67:da:7c:f5:e6:84:2e:18:93:c3:75:ae:48:78:4d:af:b6:9c:
c7:97:25:a8:61:81:60:7b:26:16:b9:56:de:43:64:d9:d8:20:
76:e2:ba:99:be:43:84:0d:ae:64:71:dd:c3:c0:75:7d:86:2a:
2e:d7:66:20:86:e2:ee:44:c9:ad:12:b9:d3:a6:6a:f3:42:3a:
25:f9:e6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:26:24 2025 by rpki-client