Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: VwFfOnWAfO1WJ/Y8BOJpQcyIuO7/q+8JPYTD7usWY9c=
Subject key identifier: 01:0A:30:E6:15:EC:BC:92:DE:23:CD:4E:4D:EB:56:C9:00:7B:E5:33
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019A4EF5F2ACAA5B5A496B4526FFEF4CECA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0DFE
Signing time: Tue 04 Nov 2025 13:02:12 +0000
Manifest this update: Tue 04 Nov 2025 13:02:12 +0000
Manifest next update: Wed 05 Nov 2025 13:02:12 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: Nd2wQdBgVyZ6rEW6d4xcY4HYSQ1M9ydjrQJHfB8x7Eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f5:f2:ac:aa:5b:5a:49:6b:45:26:ff:ef:4c:ec:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Nov 4 13:02:12 2025 GMT
Not After : Nov 5 13:02:12 2025 GMT
Subject: CN=010a30e615ecbc92de23cd4e4deb56c9007be533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d2:65:37:b0:43:5b:e8:78:55:7c:56:64:38:
af:47:a4:81:6e:5b:f8:da:38:4f:5e:49:3e:16:b0:
c7:e8:f0:ea:e5:1f:02:93:d0:85:3d:a3:d3:4f:74:
e0:45:21:b8:ac:f6:df:59:e0:0c:88:f7:1c:e4:45:
d3:5e:36:a3:19:e2:d8:ca:5e:ce:9d:75:c6:d2:be:
86:4f:06:db:0b:c0:0e:a9:e8:78:82:d5:ba:0e:aa:
dc:93:f0:01:0d:96:d9:52:d4:fa:18:e3:a4:05:ce:
fd:cf:9e:06:14:d0:86:3d:13:2f:29:bd:1f:15:a5:
13:77:13:75:4d:0d:5c:f7:b4:14:17:66:83:ac:98:
44:a5:92:df:be:47:f5:cf:b1:83:fa:ac:3f:9e:c4:
e3:66:66:f4:0c:57:56:8e:96:1a:36:03:39:9a:f7:
9c:75:34:27:27:66:72:b0:72:7b:67:c2:d1:4e:ab:
da:d3:08:82:dc:17:c3:6f:88:5a:be:61:06:bb:df:
b3:6a:1f:eb:84:f7:66:9e:f3:13:06:64:dc:94:4b:
f7:6b:49:9a:8e:77:9e:da:91:58:ef:f1:49:94:37:
fb:bb:a7:15:ac:4f:1c:cf:8c:ec:40:fe:93:69:15:
a8:f5:2e:fa:e2:f9:a9:bb:ef:d7:89:9d:22:a6:18:
ff:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:0A:30:E6:15:EC:BC:92:DE:23:CD:4E:4D:EB:56:C9:00:7B:E5:33
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ad:c7:df:d5:8d:f2:a8:52:1c:48:2a:e7:0b:17:1e:80:01:
89:70:e8:37:b4:11:5a:ee:b6:b6:72:5a:d1:a6:43:28:e0:c9:
8c:5a:1a:93:e1:c8:30:45:aa:ca:6c:c2:3d:45:9d:33:45:7e:
12:32:80:93:71:0c:1b:cd:a5:d6:ec:40:0c:70:51:a3:fc:97:
61:f4:b2:42:c0:45:5c:e9:0b:9a:d3:f8:49:81:3a:03:0c:03:
e8:3e:f5:09:eb:5c:4d:e6:d0:97:6a:66:a8:bc:3d:f4:ee:3e:
a6:38:13:ea:34:ac:b1:09:d0:a1:fd:b1:98:12:c0:94:4d:c7:
b5:e9:d9:a8:a0:24:7f:fd:4c:92:cc:c0:6b:4f:52:6c:8f:6d:
35:ba:12:3e:51:cf:b0:a2:b1:9b:ef:a7:3a:bc:bb:fb:84:68:
59:73:57:53:24:45:2e:c5:45:6c:68:ca:f9:6d:3c:10:0f:47:
e4:44:e0:74:aa:9f:8c:48:2e:f5:d9:5b:30:e9:28:8f:bc:b8:
76:03:fd:c1:10:68:01:7d:22:a7:ca:fc:24:35:0f:81:69:97:
3a:ec:7e:1f:25:f3:a2:73:de:1d:62:ea:65:fc:3e:21:fc:6e:
7a:88:ba:e4:22:25:e0:6a:c7:c7:9f:14:6b:a1:21:89:77:35:
ab:a8:ec:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:08:46 2025 by rpki-client