Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: U/NbJlDYkB881maEzQ7X9JC4DjSIQNA5iPwX5+CVfz4=
Subject key identifier: CC:22:08:E1:42:D1:AB:7B:39:8C:E3:56:F0:4C:51:68:FB:A7:9F:F0
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019A1F1A9C1CD00541CFC19F1EDB8CA85CE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 085B
Signing time: Sun 26 Oct 2025 06:00:28 +0000
Manifest this update: Sun 26 Oct 2025 06:00:28 +0000
Manifest next update: Mon 27 Oct 2025 06:00:28 +0000
Files and hashes: 1: 5Wr3s3710WFh-gqqnOC5HRfGhqo.roa (hash: mRv9qva0cARo5/cUdT7w241MszdGWtnBv2czFRm61Yk=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: BSjlFgA23XSpzZ64j8qij1LVphj+KeoH6PVSVXEMZFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 03:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1f:1a:9c:1c:d0:05:41:cf:c1:9f:1e:db:8c:a8:5c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Oct 26 06:00:28 2025 GMT
Not After : Oct 27 06:00:28 2025 GMT
Subject: CN=cc2208e142d1ab7b398ce356f04c5168fba79ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ca:e5:da:e7:1c:ca:a9:db:2e:f0:73:3f:c9:
16:19:ff:0f:f6:39:af:72:00:7c:12:30:f5:0a:00:
02:d7:64:4c:ef:41:b5:41:6f:82:35:69:f6:3f:5b:
1f:92:fe:18:2d:8e:8a:06:f4:3c:99:4a:4b:1d:1a:
c0:6d:6b:ac:52:81:d5:db:26:7c:99:1b:3c:d7:5e:
3a:95:59:8b:9c:a7:ed:a8:33:3a:b5:d9:a1:39:fa:
31:6f:d3:90:be:1f:55:28:d6:39:ec:94:6c:f7:93:
3d:1d:43:28:25:a2:5a:21:f3:82:4c:c6:8e:46:05:
74:fc:b2:df:e4:03:67:23:a3:5c:e4:00:00:72:11:
8e:95:cb:79:40:64:0d:ce:ea:9e:a4:ed:5f:56:9c:
b7:bc:f6:69:27:28:55:ed:1b:df:30:26:e9:a6:8a:
51:f4:81:24:eb:23:59:03:5f:5e:36:fa:b4:be:2e:
20:99:89:35:61:b4:aa:60:23:1c:aa:d3:6d:d0:eb:
86:3a:2f:08:88:0e:50:42:6c:3a:bc:71:a9:29:15:
ce:e2:8b:a5:3b:99:c0:52:7f:70:f3:8d:b4:31:d5:
97:25:5b:6a:93:c5:37:c8:fa:b7:78:23:7a:74:a3:
56:fa:01:ad:a3:aa:ba:f0:8a:25:3c:09:e5:cc:60:
ea:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:22:08:E1:42:D1:AB:7B:39:8C:E3:56:F0:4C:51:68:FB:A7:9F:F0
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:e9:df:d2:4a:2e:1a:c4:70:7f:6d:cc:d1:09:72:fd:b3:f0:
94:f5:08:fd:1b:bb:b9:a9:28:f5:21:e9:19:fe:8a:5d:1f:38:
7b:76:9f:18:04:b4:a3:7c:18:b1:6d:c2:6c:85:15:68:a0:c7:
6f:61:3e:57:7c:93:25:31:66:2e:97:ce:d5:25:40:3c:aa:e8:
2f:9d:d9:33:96:da:59:73:f6:10:2f:99:17:d1:53:b6:ac:c5:
f7:eb:ec:a7:7f:05:81:d7:95:70:9b:35:1f:13:5f:18:d8:70:
0e:fb:62:38:d6:15:8b:95:a4:4d:ce:5b:8f:c6:44:1f:b2:f8:
86:70:84:10:c2:88:fc:4a:75:59:bb:8b:93:d5:9a:b1:c3:44:
87:fc:e5:6c:d6:33:87:52:b4:44:b0:09:8c:aa:47:4b:d7:0e:
9e:e3:39:3f:5e:58:b1:13:ca:b4:de:b5:9d:2a:0b:96:5f:53:
57:40:57:40:47:51:35:96:b6:cb:44:49:31:d9:b9:30:34:b6:
48:4f:b4:91:16:ab:a1:91:fa:5d:f8:e1:14:3b:4d:48:7d:93:
17:21:d7:33:75:f7:cc:c6:3a:74:69:a4:d4:4c:1a:32:62:c1:
a0:a3:fc:e0:ce:a2:8c:98:92:e0:ca:9f:61:2a:62:d4:80:40:
d7:23:7c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 26 11:24:19 2025 by rpki-client