Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: 6cFDYPok5ZidwZk8+JJBD4bMm3FHMLjg7AxwShvacTY=
Subject key identifier: F7:DF:5D:64:21:EB:CF:E2:C8:F2:FE:0F:0B:34:C1:A5:B9:2C:FB:2D
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019897810FB0A49F7BF77A5C9A57856EB3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 114B
Signing time: Mon 11 Aug 2025 05:01:14 +0000
Manifest this update: Mon 11 Aug 2025 05:01:14 +0000
Manifest next update: Tue 12 Aug 2025 05:01:14 +0000
Files and hashes: 1: 1-bTG4fJ9woZmiRnGA3mMnt-HFQU.roa (hash: sBL1HNYrxZcmkezvdPWd49u3uAN+SQyINP0GsQYDsEg=)
2: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=)
3: 4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa (hash: tjLnA4xx6xW2o8o0Nxj0RULJ3oVpDUty6jhv+XOFzV8=)
4: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: B/LOXwLmSjKo3uwKp8aGIddZTbQ8p7KhO8lI5SJuP7k=)
5: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=)
6: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=)
7: hBIi_DQsTzzAePmcqEi9LIfGgEo.roa (hash: ixi/61RXmNoCNxlk1fG+litk/y7jlZcj22aPdgR7sWs=)
8: qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa (hash: Tt7WpuJis2cX5dodwxLP2jzWdn56/MoMnk4lBKcxlds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:81:0f:b0:a4:9f:7b:f7:7a:5c:9a:57:85:6e:b3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Aug 11 05:01:14 2025 GMT
Not After : Aug 12 05:01:14 2025 GMT
Subject: CN=f7df5d6421ebcfe2c8f2fe0f0b34c1a5b92cfb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:73:b9:b8:81:59:44:7c:ac:51:b0:3c:de:
49:0c:0a:ad:d6:0e:5f:04:97:b5:91:5b:85:b0:a7:
bb:86:fa:49:f0:76:46:ad:16:17:31:d9:2c:ca:f9:
b1:bb:ab:a8:78:e0:76:94:d9:3d:34:67:7e:1c:39:
b2:4e:2e:98:ca:a0:a4:2b:92:ea:ad:67:d7:63:5b:
0f:bf:26:30:9f:c7:b1:85:16:e5:22:f7:d6:82:d8:
23:51:89:d8:6f:da:1f:7d:75:8f:08:87:e2:ac:d7:
df:09:e8:54:45:08:07:5e:6d:5c:a5:80:36:b6:65:
99:e6:a8:29:bd:46:9e:16:34:f6:8c:7b:8a:61:c8:
de:9d:6e:50:63:05:75:e1:24:26:45:f7:e8:39:75:
41:ce:f9:75:66:76:00:0e:b6:82:81:94:47:b5:70:
0c:1b:3c:76:dc:a1:e2:d4:5c:76:9f:41:90:6b:63:
b0:ca:c5:0a:31:15:82:45:ba:5d:93:6f:ef:06:56:
3e:64:51:3b:3d:ca:d9:4d:fa:9c:60:83:07:be:ec:
54:42:a3:4e:c5:ff:59:c8:93:1b:2c:dc:b4:30:34:
cc:c0:34:bd:14:77:ab:a9:2c:56:93:7d:bb:31:e9:
e2:15:6c:1a:fd:0a:45:99:88:1e:c0:2a:09:56:05:
69:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DF:5D:64:21:EB:CF:E2:C8:F2:FE:0F:0B:34:C1:A5:B9:2C:FB:2D
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:54:ec:eb:33:77:8b:12:a7:9e:6c:34:33:ae:82:86:50:d5:
a4:99:2b:14:af:58:c1:07:97:95:07:48:33:aa:9e:a3:9d:79:
1c:77:bf:29:44:17:c5:6e:28:ee:da:c4:cf:46:69:61:17:65:
37:2e:ef:25:bf:7c:f1:e2:b2:51:a9:0a:d6:61:50:03:30:d0:
ab:f7:9c:c9:aa:e4:b1:22:6b:5d:f0:13:e9:4b:8d:ed:34:fc:
0c:19:05:8f:e7:8a:36:09:9a:39:b5:db:df:1e:04:d4:2d:44:
e8:d8:1c:0e:e8:7a:db:fc:45:02:40:4d:8f:9f:4c:44:46:7c:
04:0b:9d:2c:6e:3e:92:18:30:7c:e8:fd:37:6c:ec:98:5b:05:
44:98:59:73:33:14:ac:77:5f:70:80:5f:71:35:8a:94:c1:bc:
8b:80:f0:5d:a1:bc:ce:56:ab:19:bf:47:45:f2:39:70:39:e6:
fc:cd:b0:eb:da:f3:e6:27:32:86:d1:73:f4:d7:73:23:a2:d8:
18:b3:1a:56:72:78:96:6a:65:37:d8:eb:39:b3:81:e7:38:fd:
9d:6b:84:a7:00:b6:01:1c:20:c1:d6:8e:38:7f:30:4e:cb:9f:
d7:ab:c7:6a:96:e2:ff:21:34:af:74:f1:7f:87:9b:48:c1:94:
40:1b:a5:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiXgQ+wpJ9793pcmleFbrPoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1
YmE2ODEwHhcNMjUwODExMDUwMTE0WhcNMjUwODEyMDUwMTE0WjAzMTEwLwYDVQQD
EyhmN2RmNWQ2NDIxZWJjZmUyYzhmMmZlMGYwYjM0YzFhNWI5MmNmYjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt51zubiBWUR8rFGwPN5JDAqt1g5f
BJe1kVuFsKe7hvpJ8HZGrRYXMdksyvmxu6uoeOB2lNk9NGd+HDmyTi6YyqCkK5Lq
rWfXY1sPvyYwn8exhRblIvfWgtgjUYnYb9offXWPCIfirNffCehURQgHXm1cpYA2
tmWZ5qgpvUaeFjT2jHuKYcjenW5QYwV14SQmRffoOXVBzvl1ZnYADraCgZRHtXAM
Gzx23KHi1Fx2n0GQa2OwysUKMRWCRbpdk2/vBlY+ZFE7PcrZTfqcYIMHvuxUQqNO
xf9ZyJMbLNy0MDTMwDS9FHerqSxWk327MeniFWwa/QpFmYgewCoJVgVpfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPffXWQh68/iyPL+Dws0waW5LPstMB8GA1UdIwQY
MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt
YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3
LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1Ts6zN3
ixKnnmw0M66ChlDVpJkrFK9YwQeXlQdIM6qeo515HHe/KUQXxW4o7trEz0ZpYRdl
Ny7vJb988eKyUakK1mFQAzDQq/ecyarksSJrXfAT6UuN7TT8DBkFj+eKNgmaObXb
3x4E1C1E6NgcDuh62/xFAkBNj59MREZ8BAudLG4+khgwfOj9N2zsmFsFRJhZczMU
rHdfcIBfcTWKlMG8i4DwXaG8zlarGb9HRfI5cDnm/M2w69rz5icyhtFz9NdzI6LY
GLMaVnJ4lmplN9jrObOB5zj9nWuEpwC2ARwgwdaOOH8wTsuf16vHapbi/yE0r3Tx
f4ebSMGUQBul6Q==
-----END CERTIFICATE-----
Generated at Mon Aug 11 12:52:24 2025 by rpki-client