Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: JMTxHJx47zwXtPo4Y4Bj4l031IasXlsr52h/ac6EhiE=
Subject key identifier: 42:F7:61:2E:6F:FF:29:96:99:56:E2:AD:A5:CC:10:A1:7D:0C:EA:C6
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 0199228C302DC410434F3ACAFC1A42C08F25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1671
Signing time: Sun 07 Sep 2025 05:00:36 +0000
Manifest this update: Sun 07 Sep 2025 05:00:36 +0000
Manifest next update: Mon 08 Sep 2025 05:00:36 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: 7PvMfxXMsZ7FSF7ZluQnshDeg9Pqya/fN0UrsfjrP+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:30:2d:c4:10:43:4f:3a:ca:fc:1a:42:c0:8f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Sep 7 05:00:36 2025 GMT
Not After : Sep 8 05:00:36 2025 GMT
Subject: CN=42f7612e6fff29969956e2ada5cc10a17d0ceac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:39:ba:4a:48:f3:be:1b:58:5d:cd:c8:a9:
68:14:ae:db:3e:c2:f4:51:3a:71:8f:d9:7e:a4:a2:
b5:ee:88:8f:fb:14:ef:b0:05:e5:cc:a5:fe:1f:67:
65:9f:ed:2c:b3:87:f8:4d:1d:d5:99:fa:5f:d3:f5:
cd:2b:31:d6:8a:da:94:e6:ef:7d:f9:22:c1:af:a0:
29:46:d2:f9:83:cb:5f:e0:1a:91:fd:85:e8:44:64:
8b:f6:1d:88:3f:dd:f2:f4:8a:21:c7:72:6f:77:23:
10:6d:3a:cd:2f:1c:86:b7:cc:a8:eb:e6:ef:36:c8:
86:32:df:33:f5:33:bf:b5:19:3d:4d:35:48:15:6f:
cd:67:bd:8c:46:33:e1:c2:99:15:5d:d4:3e:b6:44:
22:c1:b3:fd:29:2a:93:7d:c3:e8:19:2a:f2:40:d5:
02:02:8f:f8:78:0e:94:89:0c:56:f9:b6:5f:1d:a6:
2f:91:3a:58:de:db:fd:f3:39:b4:10:fb:d7:52:a8:
f3:0a:8d:9a:68:87:bc:98:84:c6:b3:77:32:7e:b3:
4d:28:fd:9d:b9:1d:58:2a:e2:64:43:4b:75:64:75:
2a:17:21:6e:bf:b9:b7:d8:e0:a4:f2:99:61:c7:82:
7e:20:bc:3e:31:35:92:cc:00:af:12:c9:14:4c:ce:
cc:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F7:61:2E:6F:FF:29:96:99:56:E2:AD:A5:CC:10:A1:7D:0C:EA:C6
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:43:63:f9:b1:03:b6:13:b2:99:c8:c2:e5:97:1a:78:85:79:
4b:05:a3:4c:71:50:09:28:9d:7e:e3:c9:74:8d:15:19:56:4d:
f0:4e:99:de:dd:36:32:2a:49:a4:02:e1:91:33:d2:3f:3f:72:
02:a6:4f:eb:75:0a:b5:0e:0c:1a:d2:c1:69:4f:1f:f2:62:e0:
ef:41:6d:e2:af:b7:e0:06:78:1c:0f:bf:48:19:6f:53:08:d7:
40:c7:06:ae:27:c3:8d:87:03:7f:a0:e6:4a:39:80:07:4c:e0:
9c:48:57:eb:90:7d:1f:25:68:d1:f7:20:63:f5:87:79:e5:71:
0c:23:45:de:4e:fc:ea:0f:9a:cd:d4:2a:1b:18:88:a2:2f:65:
01:2c:39:27:cd:a0:db:09:b9:02:ee:68:df:bd:b4:a8:38:7e:
39:99:46:f0:97:50:3a:ad:da:ec:44:77:a3:ec:86:65:4a:e4:
65:00:77:40:3e:e0:8f:2c:aa:58:74:3d:eb:c0:7c:cb:b8:4c:
5e:56:6a:6a:a6:20:bb:9b:4e:35:87:e5:d9:fa:83:2b:49:5b:
dd:62:b5:47:b3:50:f1:ff:22:24:dc:5f:25:de:ec:db:5c:b1:
ba:a0:5c:e3:54:29:1b:9a:67:29:4a:9d:a6:95:6d:b0:40:70:
78:36:ce:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:16:19 2025 by rpki-client