Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: p2WLWqyKwXqhbtvg56cPY8ioLntT56swlKaD+AjnpXI=
Subject key identifier: 1D:B4:2C:82:C2:82:CC:25:30:1D:AB:79:7D:89:5F:C9:6F:96:B1:DF
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 0197D9D12A20E9952ECE1E6B512A6076AEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 010C
Signing time: Sat 05 Jul 2025 09:00:53 +0000
Manifest this update: Sat 05 Jul 2025 09:00:53 +0000
Manifest next update: Sun 06 Jul 2025 09:00:53 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: 9BLJAYDL+AHDc+J5OZ3guwMty1esDRjpqhMjYzvHx64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d9:d1:2a:20:e9:95:2e:ce:1e:6b:51:2a:60:76:ae:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Jul 5 09:00:53 2025 GMT
Not After : Jul 6 09:00:53 2025 GMT
Subject: CN=1db42c82c282cc25301dab797d895fc96f96b1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c8:83:00:1c:b4:e6:ff:c3:60:f5:07:02:1f:
3c:8b:59:ae:f1:e6:1e:c2:63:00:4a:09:9f:a6:57:
54:37:0a:1c:ec:32:80:df:df:11:f3:2f:a2:c5:a1:
51:b1:92:8b:e8:3d:57:74:46:9a:a0:91:fb:5c:c1:
11:64:56:13:fb:de:74:36:ac:59:f4:d1:6e:65:66:
0f:d1:31:72:5c:2d:3e:dc:d4:cb:06:64:c6:83:9d:
ee:3d:3a:e9:68:c4:52:2e:60:6c:31:c5:8d:d8:f2:
67:82:4f:12:19:5c:06:af:2c:82:44:6f:34:44:9d:
b5:e6:80:29:69:f1:ca:89:75:76:02:a9:cf:21:ec:
25:20:2e:77:9f:eb:cf:49:f3:ff:64:d3:87:6a:eb:
30:8e:9d:fc:9c:0c:28:49:b3:ff:9c:e2:5e:3e:cb:
60:57:d1:2e:42:5b:ba:4d:b5:e6:ac:6a:fa:e0:30:
09:c0:87:9f:5b:df:6f:2d:fe:10:b7:13:a7:1c:b1:
10:7d:b4:26:2b:d9:2c:0a:c9:29:85:11:21:78:43:
e3:d7:e3:8e:77:b3:78:ec:24:c8:f8:c3:fa:c3:aa:
b2:b1:ac:b4:8d:a1:f2:ee:80:c5:ec:4e:49:fc:f6:
de:5d:e0:84:81:c0:77:da:b3:29:fe:c7:5f:e2:af:
4d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B4:2C:82:C2:82:CC:25:30:1D:AB:79:7D:89:5F:C9:6F:96:B1:DF
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2e:57:d4:ca:0d:47:90:34:af:98:cc:4c:29:eb:f3:1b:66:
4c:10:1a:23:75:40:59:53:a5:d4:75:73:38:51:81:ca:2c:e3:
75:9b:fe:f4:51:02:91:c6:b3:3d:94:3c:5a:26:44:95:fb:82:
c7:0c:c1:39:a3:3e:3e:e0:c3:8b:8d:41:22:9d:0f:5e:56:d3:
0e:5f:6d:23:e3:72:2d:6a:fd:c6:41:4d:a1:d1:c2:d1:e5:91:
d8:fd:31:2d:b2:66:57:43:01:14:3d:c2:02:d5:84:13:3d:e4:
44:15:97:ae:f7:5b:b0:f7:ba:f0:86:f5:f4:de:9a:f5:13:e7:
c0:c7:aa:0c:96:f5:99:64:a1:4a:41:8c:cd:c8:24:e9:90:fd:
79:66:1f:4f:a6:35:ab:f9:53:b9:a3:26:bf:3a:0b:37:16:73:
58:44:0a:11:9a:64:b6:bd:68:db:ba:82:de:3a:dd:f8:63:19:
6f:2a:66:45:0e:36:92:37:77:97:10:02:10:5c:9c:9c:90:67:
f9:5b:b6:eb:56:6d:f6:d7:5c:1e:8b:22:8c:e7:50:50:cb:a2:
db:cd:74:2d:f8:c0:0a:98:95:45:c9:37:77:e9:2a:0b:7f:fc:
8f:68:5a:ac:33:00:49:e1:17:2a:4d:b0:a7:5e:6e:5d:02:2b:
10:fb:44:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfZ0Sog6ZUuzh5rUSpgdq74MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYTg1NmE0MTczODk1YWY0NGI4ZmQzNDQ1NTQ2OWE1YzRk
NjE3M2IwHhcNMjUwNzA1MDkwMDUzWhcNMjUwNzA2MDkwMDUzWjAzMTEwLwYDVQQD
EygxZGI0MmM4MmMyODJjYzI1MzAxZGFiNzk3ZDg5NWZjOTZmOTZiMWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMiDABy05v/DYPUHAh88i1mu8eYe
wmMASgmfpldUNwoc7DKA398R8y+ixaFRsZKL6D1XdEaaoJH7XMERZFYT+950NqxZ
9NFuZWYP0TFyXC0+3NTLBmTGg53uPTrpaMRSLmBsMcWN2PJngk8SGVwGryyCRG80
RJ215oApafHKiXV2AqnPIewlIC53n+vPSfP/ZNOHauswjp38nAwoSbP/nOJePstg
V9EuQlu6TbXmrGr64DAJwIefW99vLf4QtxOnHLEQfbQmK9ksCskphREheEPj1+OO
d7N47CTI+MP6w6qysay0jaHy7oDF7E5J/PbeXeCEgcB32rMp/sdf4q9NcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB20LILCgswlMB2reX2JX8lvlrHfMB8GA1UdIwQY
MBaAFACoVqQXOJWvRLj9NEVUaaXE1hc7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAt
Y2I5ZTdkZGFkMTg5LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC82Yjc1MTItOTJjYS00OWY5LTk4NzAtY2I5ZTdkZGFkMTg5
LzEvQUtoV3BCYzRsYTlFdVAwMFJWUnBwY1RXRnpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARS5X1MoN
R5A0r5jMTCnr8xtmTBAaI3VAWVOl1HVzOFGByizjdZv+9FECkcazPZQ8WiZElfuC
xwzBOaM+PuDDi41BIp0PXlbTDl9tI+NyLWr9xkFNodHC0eWR2P0xLbJmV0MBFD3C
AtWEEz3kRBWXrvdbsPe68Ib19N6a9RPnwMeqDJb1mWShSkGMzcgk6ZD9eWYfT6Y1
q/lTuaMmvzoLNxZzWEQKEZpktr1o27qC3jrd+GMZbypmRQ42kjd3lxACEFycnJBn
+Vu261Zt9tdcHosijOdQUMui2810LfjACpiVRck3d+kqC3/8j2harDMASeEXKk2w
p15uXQIrEPtEiQ==
-----END CERTIFICATE-----
Generated at Sat Jul 5 16:42:21 2025 by rpki-client