Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: 5IheE1VCBHoOwWPELswCjKNCnz8Ag+3da6I9FmmxrxY=
Subject key identifier: 17:2F:1C:CE:0F:21:A9:BD:C8:15:46:1C:B2:0D:46:7A:98:C5:15:C3
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 0198CD27144CAD2C578A33411341374C9657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 018A
Signing time: Thu 21 Aug 2025 15:02:26 +0000
Manifest this update: Thu 21 Aug 2025 15:02:26 +0000
Manifest next update: Fri 22 Aug 2025 15:02:26 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: OSoDhTuJjXnCLKpIGMVSYYOOrShHo/7rklZdClJJtR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Aug 2025 08:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:cd:27:14:4c:ad:2c:57:8a:33:41:13:41:37:4c:96:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Aug 21 15:02:26 2025 GMT
Not After : Aug 22 15:02:26 2025 GMT
Subject: CN=172f1cce0f21a9bdc815461cb20d467a98c515c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:e3:f9:6d:33:6c:7d:e9:fa:1b:f7:70:29:
b9:72:b6:76:f7:e4:9e:6a:59:02:85:1c:a9:95:bf:
a0:ea:b3:38:f8:9a:f3:bc:18:f3:2f:ad:00:2f:4b:
21:6a:f5:74:60:87:82:f3:19:ab:fc:70:1f:b5:76:
30:a8:fa:af:48:0f:bc:a2:6e:e9:6d:f5:5b:95:78:
83:15:51:88:2c:60:f8:86:3a:8c:b2:d1:22:51:cb:
ca:53:8d:dd:9c:87:8d:02:c8:bd:06:85:e4:88:90:
1f:6f:fb:64:2d:6c:26:8d:54:a1:15:a8:c2:1f:2a:
7f:17:25:1f:ea:4e:63:cd:61:86:f7:9f:09:34:b6:
6f:e3:c3:ca:63:21:65:f0:52:ef:26:34:92:2c:1c:
38:65:40:3d:ac:b3:08:30:61:4b:a6:74:20:61:91:
d2:94:5b:41:8b:fb:51:be:a7:66:32:f0:2f:35:8c:
6c:47:4c:72:80:66:f7:74:04:55:bb:6e:aa:ff:85:
06:22:07:ef:83:35:10:53:7c:9f:d7:12:1a:90:eb:
ea:b6:07:32:a7:85:84:20:e4:1d:09:14:84:42:2f:
e1:39:62:cf:5e:19:ad:7c:c9:2d:a2:6b:4d:77:4e:
f7:06:10:24:91:a9:74:d9:96:4a:04:74:eb:d2:b7:
66:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2F:1C:CE:0F:21:A9:BD:C8:15:46:1C:B2:0D:46:7A:98:C5:15:C3
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:4d:45:0e:b9:9f:de:2f:da:2c:c8:c3:0c:46:26:f3:75:e6:
3a:b7:84:44:c2:81:2e:fb:ce:cc:a2:f7:69:2d:23:7d:35:aa:
b3:88:71:4d:4f:50:15:c9:ca:66:42:98:4c:bb:85:f0:25:b1:
63:08:66:df:20:fc:1a:f5:97:5d:78:2c:b5:15:64:a0:d9:9e:
80:b8:a3:56:de:9e:78:a3:14:20:21:c6:85:fd:46:27:1c:52:
3b:20:ce:dc:19:20:a7:9f:ac:88:79:6f:ee:c6:6b:bb:4c:09:
09:66:6f:36:2b:9b:c4:d9:4c:a8:a0:a7:e5:76:a7:4c:29:26:
1b:42:cf:80:fa:ff:c4:72:be:6e:85:60:aa:05:2d:ca:db:9e:
e9:b6:ee:e1:d6:9e:54:02:e2:28:32:2c:0b:4c:b0:da:22:86:
c1:62:0a:cd:d0:26:29:b4:86:40:2a:21:43:ec:89:fb:88:23:
cf:65:3c:33:6c:bb:0e:9b:20:e5:f5:b9:b3:00:83:fa:79:d3:
8a:0d:0c:ec:37:a9:b9:3c:f7:ae:eb:5e:e1:16:43:7a:20:49:
90:79:4c:60:ad:47:82:f0:bf:a0:4d:0f:3f:b7:6d:9d:f8:c7:
ab:36:57:a3:5b:8d:e5:96:af:4e:57:7c:f1:22:62:37:12:34:
bc:8e:35:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 17:59:59 2025 by rpki-client