Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
File: AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json)
Hash identifier: Rb1ym3EkTZAB9N28qQn0kCOZPzBzmp3DJhUIJ359d2g=
Subject key identifier: A8:BB:D2:AF:E8:7D:C7:D9:F1:F7:9B:05:E4:1C:E8:E2:FD:69:0B:EF
Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Certificate issuer: /CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Certificate serial: 019A71B8A6F062700DE1BECF12A1EA17D8A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
Manifest number: 0243
Signing time: Tue 11 Nov 2025 07:01:58 +0000
Manifest this update: Tue 11 Nov 2025 07:01:58 +0000
Manifest next update: Wed 12 Nov 2025 07:01:58 +0000
Files and hashes: 1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: RusISeZ0j9QtTu1EGUf12ctoTbHHneWdU0w5+rm3Vxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:a6:f0:62:70:0d:e1:be:cf:12:a1:ea:17:d8:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Validity
Not Before: Nov 11 07:01:58 2025 GMT
Not After : Nov 12 07:01:58 2025 GMT
Subject: CN=a8bbd2afe87dc7d9f1f79b05e41ce8e2fd690bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7b:fd:42:a6:e6:5e:36:c2:98:33:bc:9a:3c:
39:78:86:0e:5a:25:56:6f:a5:28:07:34:e2:a3:ee:
f6:10:62:97:b1:9c:58:50:3d:32:2e:04:d4:b7:72:
4e:72:81:b0:45:72:a0:76:cc:71:f4:fe:71:b1:29:
90:56:4e:27:ef:b7:aa:09:7c:af:cf:66:ea:4f:ae:
60:35:ac:67:5e:38:c0:81:34:1b:85:30:88:2a:bd:
12:05:89:ef:0c:67:b7:63:60:3f:f2:7d:72:8e:a8:
d4:1e:fa:7b:fa:1e:47:55:0a:e8:3f:ce:d8:c9:2b:
bb:91:ba:e3:74:61:30:55:11:7c:45:1d:3f:18:1d:
0f:d3:d8:29:09:f4:93:07:86:16:4e:6d:74:c6:3a:
6b:a1:e1:2c:6e:eb:32:7f:1a:29:dc:73:c9:6b:43:
50:bd:5f:cf:10:e4:b0:66:73:b0:bc:25:c5:7c:52:
b9:96:1b:bc:11:e8:e6:5d:a1:b8:a9:7c:92:00:38:
98:39:f7:59:65:be:64:d5:ee:7c:7f:e9:1c:04:af:
d2:be:c5:17:90:67:27:99:3a:ab:75:4f:3a:38:c3:
02:04:21:80:7b:92:00:cf:37:be:45:f0:51:9a:cc:
f6:d3:dc:6f:e4:b6:85:8d:19:00:d8:c7:a9:3b:3f:
55:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BB:D2:AF:E8:7D:C7:D9:F1:F7:9B:05:E4:1C:E8:E2:FD:69:0B:EF
X509v3 Authority Key Identifier:
keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1c:6a:50:8b:fc:72:f8:48:77:72:09:4c:c7:16:31:8f:39:
2e:c0:e2:da:4b:f9:79:51:24:49:8f:39:79:5d:da:ed:79:fa:
9e:b4:95:63:08:7d:73:32:52:6e:74:5a:aa:b7:45:4a:e8:c8:
87:a5:7c:ab:3d:45:71:97:1b:67:47:86:e8:b5:df:81:77:20:
2d:ef:ad:85:80:80:4f:36:19:33:25:5b:75:62:d9:27:31:29:
2f:04:67:b6:de:57:f3:3b:f1:f6:29:c4:f3:7e:59:c7:ac:27:
8b:42:5e:b5:d7:b8:8f:8e:ba:83:5e:4e:e8:61:63:aa:64:50:
90:97:bb:09:7d:71:10:2d:f4:c0:20:4a:3a:e5:14:81:13:a3:
dc:f4:ab:9d:a2:b4:8c:c2:d5:bf:95:8c:a3:10:37:a8:d5:e9:
5a:02:ec:92:7f:2c:79:14:78:30:45:ac:99:8a:61:f6:f1:3c:
b4:07:50:b8:5b:ab:ac:c5:bd:ad:1f:42:7d:ef:ae:62:99:d8:
70:7c:1f:29:77:46:39:79:aa:8d:af:45:9f:68:30:95:ba:4e:
94:dd:5a:3d:85:07:9f:99:db:ec:50:04:c6:5f:f6:c0:95:aa:
e7:58:6a:fd:67:7d:ba:8d:bc:92:7d:92:4f:85:d7:d7:23:f2:
ef:28:13:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:44:00 2025 by rpki-client