Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
File: akYj92vVuy3wr2bzYP90_xwA2wI.mft (raw, json)
Hash identifier: +FCVgbPHdIW0RGjbDS1AC0AqdZfP1uAyx1m4VAOnOb8=
Subject key identifier: 00:71:30:15:C8:5F:8B:50:DA:2E:B0:87:9A:32:39:DC:7A:D3:DB:BF
Authority key identifier: 6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
Certificate issuer: /CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Certificate serial: 01989223613D256ECB15DE8116CB62B38062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
Manifest number: 162C
Signing time: Sun 10 Aug 2025 04:00:48 +0000
Manifest this update: Sun 10 Aug 2025 04:00:48 +0000
Manifest next update: Mon 11 Aug 2025 04:00:48 +0000
Files and hashes: 1: IlxKEGw87TqUrlXSxslSI0lrjjE.roa (hash: +CLpYYfyRr0d2PNSvpzNlqaJXb+7Xttv53KR3i0plz4=)
2: akYj92vVuy3wr2bzYP90_xwA2wI.crl (hash: M8W2jQYrzxhqLn94wduQPFzzcttO35005eUvRXJVZaE=)
3: cG-TYaFK2J2ByypDgvQ4tRUHBNk.roa (hash: 3r+iWy7gnItJRFxaUeqbAj9oWcBjP35GR/4lv1d2DLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:23:61:3d:25:6e:cb:15:de:81:16:cb:62:b3:80:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4623f76bd5bb2df0af66f360ff74ff1c00db02
Validity
Not Before: Aug 10 04:00:48 2025 GMT
Not After : Aug 11 04:00:48 2025 GMT
Subject: CN=00713015c85f8b50da2eb0879a3239dc7ad3dbbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6a:41:5f:bc:a3:2c:b0:a2:e7:a1:78:a7:e3:
50:d8:f4:25:85:63:b6:8f:a4:01:e5:d2:f1:d3:ed:
a9:1c:55:65:0f:bc:0e:f6:23:92:29:9f:34:54:28:
3d:d0:cf:53:1f:61:9d:82:66:7d:65:c9:1e:e5:d7:
89:bd:e5:7b:44:49:59:e1:38:ca:00:2c:c5:aa:45:
7d:79:97:40:4c:55:91:16:89:16:c3:ba:e6:52:ed:
d2:cd:9a:58:83:d6:12:21:99:ad:4d:5a:73:48:dd:
04:b5:ac:e5:40:47:c3:f8:a0:77:fd:af:28:24:b9:
25:15:30:8c:df:a5:8a:ed:f1:58:ae:0c:91:c0:bc:
52:77:b1:1d:21:f7:6e:76:cf:13:e6:dc:6b:a5:83:
33:bd:05:bf:a5:f8:84:80:02:84:44:95:75:12:92:
09:51:26:ac:07:dd:1a:08:78:db:5f:c3:b5:50:04:
20:64:5e:49:10:84:3d:63:d9:66:21:af:fc:1d:00:
49:c8:98:f8:43:c3:25:25:24:c2:82:85:87:bb:15:
3c:59:41:4c:c7:ac:c1:66:a6:b3:15:76:21:37:c5:
3c:c4:53:82:80:37:b5:20:b3:0b:5f:1d:b7:a3:7d:
04:ce:30:32:b6:69:57:80:e5:59:19:3d:44:f6:66:
00:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:71:30:15:C8:5F:8B:50:DA:2E:B0:87:9A:32:39:DC:7A:D3:DB:BF
X509v3 Authority Key Identifier:
keyid:6A:46:23:F7:6B:D5:BB:2D:F0:AF:66:F3:60:FF:74:FF:1C:00:DB:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akYj92vVuy3wr2bzYP90_xwA2wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/599528-b89d-4402-a808-6c832050e77a/1/akYj92vVuy3wr2bzYP90_xwA2wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9d:94:4c:28:a8:de:31:17:92:f2:a2:98:99:8b:26:d0:31:
ba:eb:e2:7b:da:af:cb:2c:47:57:9e:9e:e4:0c:01:25:e1:0e:
bc:60:7f:62:c8:9b:13:c4:d6:49:75:52:44:04:54:e9:37:47:
8a:99:6f:fe:96:84:db:12:cb:d2:8c:db:b3:8b:9e:b0:32:db:
3f:94:29:d9:d0:a2:45:83:95:4e:81:24:88:43:0c:b2:57:7a:
65:80:58:c8:a4:14:fd:01:6c:74:da:92:36:57:bf:f0:56:e3:
8c:f9:59:2a:5e:41:2d:13:7b:d9:9f:a0:ee:bf:e8:65:ad:d2:
e6:71:20:80:79:b2:7c:7c:b2:a6:0c:d7:8a:de:8c:28:92:ee:
f7:73:b4:45:aa:37:2f:e4:02:1b:4a:0c:82:70:92:af:a4:47:
ec:60:c9:06:c3:95:93:ab:d7:a6:d0:34:d6:66:4c:4e:65:f8:
ea:60:a0:03:09:e8:04:43:a4:3e:70:aa:ae:00:48:62:52:f5:
88:81:e5:7d:a5:a2:ad:1e:de:54:88:2a:87:35:29:74:27:90:
1f:a6:25:79:04:ed:8e:08:7a:32:34:02:47:58:cd:5c:48:c8:
b2:ea:a7:dd:be:c1:29:09:cd:cd:13:f1:88:d7:15:6d:b1:88:
02:ef:a9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:46:15 2025 by rpki-client