Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
File: AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft (raw, json)
Hash identifier: LUnzfnnymzYygpnQQ1Map9oFZ7hMV1++Jax0coBlz0A=
Subject key identifier: 9F:32:0F:7C:BC:34:75:37:B4:64:2A:69:24:9E:22:F8:23:D8:EB:49
Authority key identifier: 02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
Certificate issuer: /CN=0241063b2d57e4efaef6824f623d465a1c37b843
Certificate serial: 019778D43B1A2BB037B9AEA036BDFC6B9C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
Manifest number: 0C86
Signing time: Mon 16 Jun 2025 13:01:04 +0000
Manifest this update: Mon 16 Jun 2025 13:01:04 +0000
Manifest next update: Tue 17 Jun 2025 13:01:04 +0000
Files and hashes: 1: AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl (hash: o6BXa555O4A9Tel4fo1RU1MVtn8eKo5z1+24Cp8LvAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:d4:3b:1a:2b:b0:37:b9:ae:a0:36:bd:fc:6b:9c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241063b2d57e4efaef6824f623d465a1c37b843
Validity
Not Before: Jun 16 13:01:04 2025 GMT
Not After : Jun 17 13:01:04 2025 GMT
Subject: CN=9f320f7cbc347537b4642a69249e22f823d8eb49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4d:d4:13:de:67:dc:f7:20:f9:12:f8:87:e0:
99:93:b4:2b:ae:59:44:1e:ed:ff:c1:3a:3c:6e:e3:
09:0f:d8:9d:fb:7e:bb:b4:74:12:07:15:b9:64:c7:
4d:1e:32:0d:24:ed:51:94:9d:39:ef:99:e6:75:d2:
4c:8f:43:fd:53:12:9e:9b:d8:35:23:7d:03:bf:73:
81:96:c4:b4:c0:91:c5:1a:95:a2:5d:b1:f6:a7:09:
ac:2f:13:f3:de:ea:f9:a9:b2:3e:7e:38:3e:a6:0c:
17:a0:cb:81:54:d8:41:47:32:a9:94:ed:a0:c8:d4:
17:04:dc:5c:39:6c:2b:43:c4:89:be:67:98:f0:2f:
fa:05:c5:69:d1:4b:d8:cd:63:75:70:78:ef:48:35:
35:80:c6:ee:81:97:d6:18:f3:ba:ec:58:28:0c:71:
5e:3c:55:2f:91:17:08:3a:d2:23:d4:2b:7c:9f:4e:
cb:6e:d2:02:7b:30:0c:f0:86:1c:3d:a3:99:06:15:
80:08:79:8e:96:f4:e6:f8:9b:26:2f:c4:ba:b9:cd:
61:e0:94:5b:b6:b6:e2:15:32:9b:bc:ac:32:74:dd:
79:b2:b2:f8:7d:2c:ec:5e:cd:ca:0a:36:66:1f:e0:
ce:4d:79:20:bc:4e:cd:a4:20:13:18:54:f5:bd:10:
d8:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:32:0F:7C:BC:34:75:37:B4:64:2A:69:24:9E:22:F8:23:D8:EB:49
X509v3 Authority Key Identifier:
keyid:02:41:06:3B:2D:57:E4:EF:AE:F6:82:4F:62:3D:46:5A:1C:37:B8:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEGOy1X5O-u9oJPYj1GWhw3uEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c265ba-b00a-41ae-95dd-cb075e239a56/1/AkEGOy1X5O-u9oJPYj1GWhw3uEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:9b:29:9f:98:71:90:9a:a3:eb:4d:a9:24:ca:40:75:80:b8:
46:c6:42:66:ff:60:0e:6d:3d:fd:cd:07:ff:e8:11:90:5c:83:
9f:af:52:6c:b6:ea:b2:d6:40:9d:6b:94:8b:80:1f:2a:19:84:
b5:b2:23:c5:ca:38:a3:17:0b:05:a0:94:e1:4a:7a:3c:e9:bb:
00:52:9a:00:d8:16:82:7a:c0:08:c4:3a:cc:19:55:ba:5e:ca:
24:2d:49:ad:fa:10:e0:e3:29:3d:84:fe:61:8c:a9:76:40:14:
76:8e:03:22:59:7a:8b:f8:f8:b8:50:f3:1c:f0:9c:04:4a:bb:
59:89:22:1d:fa:db:a4:00:8a:52:66:8a:64:03:3c:77:85:9b:
27:f0:e2:81:3b:0e:0d:0a:1e:6e:8f:5b:e6:25:9e:61:4b:85:
68:95:15:aa:a0:c1:73:f2:e4:78:44:54:75:5a:23:6b:20:3c:
d0:fe:e0:e4:e5:4e:b8:e7:ae:89:6a:b3:ec:dc:93:0b:88:09:
3d:a4:8c:6d:02:fb:67:d4:fa:6e:f1:a6:a3:44:34:1f:71:f7:
cd:01:a0:7f:85:dc:cb:17:ae:b6:8e:d5:0e:b2:ba:6d:21:bd:
ea:40:f5:44:2c:df:5d:7c:4d:24:66:4f:b1:86:3d:48:ab:c9:
6e:e2:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 21:08:49 2025 by rpki-client