Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
File: AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json)
Hash identifier: 6ofnhn7ulltsxt9Fkdx6NtdJyrpI7lY2TdNODprT/RU=
Subject key identifier: 7D:DB:41:DB:18:7B:49:10:69:4D:17:54:A3:A6:CE:57:77:EA:E6:C7
Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Certificate issuer: /CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Certificate serial: 0197488C82DD0E879DCA0113C7F700845733
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
Manifest number: A0
Signing time: Sat 07 Jun 2025 04:00:57 +0000
Manifest this update: Sat 07 Jun 2025 04:00:57 +0000
Manifest next update: Sun 08 Jun 2025 04:00:57 +0000
Files and hashes: 1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: EYIayhTZsD4hjmYEm+130leVAh3ifg1g8QJa+Dfi6VU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:82:dd:0e:87:9d:ca:01:13:c7:f7:00:84:57:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Validity
Not Before: Jun 7 04:00:57 2025 GMT
Not After : Jun 8 04:00:57 2025 GMT
Subject: CN=7ddb41db187b4910694d1754a3a6ce5777eae6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7b:18:b0:51:0f:38:73:f9:30:51:3c:04:c5:
14:05:e3:00:fc:2b:30:05:ab:2c:90:c3:3a:a8:72:
15:be:23:d5:ce:86:07:d0:09:be:de:50:31:dd:1d:
2b:8f:26:6c:29:ab:04:d6:bd:e9:5b:5b:1f:ba:63:
56:37:b8:f3:a4:a7:e5:84:12:79:29:04:f0:e9:0a:
5b:02:a3:f2:4b:55:52:79:fa:b0:71:be:b2:03:5b:
ad:c4:e9:48:db:6e:ec:c3:9a:87:d8:e7:0a:dc:28:
45:fc:49:09:22:9e:c0:d6:e4:f5:5f:ed:89:0a:c1:
6f:fc:c6:b6:89:23:fb:d4:8e:26:d6:ce:08:fd:48:
a6:ee:f1:ac:d3:cc:b8:7b:ad:5f:b9:60:ca:a5:d2:
8f:03:c3:c4:e5:30:7a:a3:63:26:a6:c6:dc:15:50:
28:ba:9f:92:0e:b2:09:74:e4:2e:98:6d:bd:9f:ef:
16:5c:d9:7e:90:bd:83:2e:95:d7:f2:37:b4:c2:44:
57:dd:bd:7b:5d:a8:96:35:0f:9a:67:d6:0b:b2:e2:
0c:aa:0d:0b:d2:c6:e2:df:6d:4f:94:ea:69:b7:27:
3f:68:fc:95:e7:69:91:26:e0:ac:2b:a0:b0:29:70:
f8:69:87:cd:8e:e6:ef:7e:27:9c:97:a3:c1:a5:59:
91:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:DB:41:DB:18:7B:49:10:69:4D:17:54:A3:A6:CE:57:77:EA:E6:C7
X509v3 Authority Key Identifier:
keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:77:bc:9d:12:71:75:5c:bb:95:3a:1c:06:0f:c9:14:05:c6:
f0:00:b4:7d:2a:38:36:78:90:0d:dc:00:5a:95:55:51:4a:58:
93:66:d2:0e:12:0b:85:8c:27:e1:e5:20:02:5a:7b:24:73:e0:
bf:26:58:05:cb:70:e4:05:fd:cf:41:1c:87:7a:4e:a5:e1:43:
5e:8c:e7:3e:c7:7d:33:87:83:5f:4e:f5:ab:e2:40:9d:aa:65:
0f:6f:a5:16:66:34:f9:06:42:03:8d:d8:a1:a0:e8:fc:dd:97:
f1:a1:15:68:4e:42:e1:48:f5:ff:fc:5c:86:a0:95:b3:fa:08:
49:43:ef:24:ef:7a:01:d2:89:0b:93:f3:07:39:cb:9c:3d:54:
70:6d:01:12:33:d0:0a:5a:89:93:de:72:f7:76:95:f4:82:07:
c8:aa:ca:74:22:d7:e1:3d:99:45:73:a1:73:cf:e4:25:1d:2b:
de:9b:ab:03:07:38:60:ec:fb:1b:74:73:65:39:c6:e7:61:39:
b7:f0:f1:d6:c6:ee:f1:c5:83:42:f0:3c:c4:2c:f0:ad:94:5b:
c1:70:c2:1c:ce:7e:e1:b7:05:7d:af:02:a7:5d:5d:42:5b:0d:
5d:f5:4e:d6:90:96:21:9c:b7:58:e0:63:43:3b:0f:d6:48:70:
35:80:62:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:33:37 2025 by rpki-client