Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json)
Hash identifier: fXWOiPg0j1gmxOz3lQJtqqD/CAZsXP84sYMJAoRKKSc=
Subject key identifier: 38:4F:C5:08:96:14:66:6C:A8:71:A6:D3:77:10:EC:52:0D:9F:C9:CD
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 019A4DE151D15A245A52B4CF94022E4D8BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
Manifest number: 122E
Signing time: Tue 04 Nov 2025 08:00:03 +0000
Manifest this update: Tue 04 Nov 2025 08:00:03 +0000
Manifest next update: Wed 05 Nov 2025 08:00:03 +0000
Files and hashes: 1: 1-bTG4fJ9woZmiRnGA3mMnt-HFQU.roa (hash: sBL1HNYrxZcmkezvdPWd49u3uAN+SQyINP0GsQYDsEg=)
2: 1qEPEFv1rtnBwjLrj05KhcsiGsw.roa (hash: efBys1jy+DGmejYCRhYEDwHiZZBi2kJ2HO+RtvkHBG0=)
3: 4Kk7BT4GOtX1l3OKm7jdPAKUhF4.roa (hash: tjLnA4xx6xW2o8o0Nxj0RULJ3oVpDUty6jhv+XOFzV8=)
4: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: cFlFopm5sqtwc7gmbHaGq2ruwZKf1IDrBlaBbCYp3RU=)
5: KSQbuvMpaNtmYtn-yiQgu6gs4Xg.roa (hash: rY+o5Ow6fjFdTk2as4zdZu/IZVXbQNeVsHdG3L6c1Us=)
6: ZOyHJ4Yqv0XVd9AATFKr91oKlKQ.roa (hash: UP88f3uzMOFhKaWDsZtlJomj/zgPQgChtV7gCg0+LOM=)
7: hBIi_DQsTzzAePmcqEi9LIfGgEo.roa (hash: ixi/61RXmNoCNxlk1fG+litk/y7jlZcj22aPdgR7sWs=)
8: qsCfBgY2cAUIcPFcqfJPHH6e1Us.roa (hash: Tt7WpuJis2cX5dodwxLP2jzWdn56/MoMnk4lBKcxlds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:51:d1:5a:24:5a:52:b4:cf:94:02:2e:4d:8b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 4 08:00:03 2025 GMT
Not After : Nov 5 08:00:03 2025 GMT
Subject: CN=384fc5089614666ca871a6d37710ec520d9fc9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:30:15:4a:ee:50:6f:3f:96:00:7c:87:d0:d2:
76:00:c0:61:20:af:bd:c0:73:2d:2d:55:3c:76:da:
cf:5d:10:4b:7a:25:ea:6e:9e:f2:cb:5b:6e:af:ea:
e3:7c:ea:e4:39:1b:0e:91:76:34:3c:4a:bb:b8:0d:
d0:c9:1e:5e:59:e3:ac:71:96:07:c6:8f:63:00:15:
97:68:cd:a0:b0:4d:96:41:29:af:7c:4e:99:86:11:
84:20:d9:a8:27:a2:4c:24:a3:06:be:3c:a4:0a:25:
7d:1b:57:e4:91:a2:dc:f8:0b:cd:e6:05:2b:c7:ce:
53:97:d8:b7:06:a0:eb:d6:23:5b:68:77:00:cd:56:
16:d3:13:83:85:61:30:44:1e:78:c7:f2:bc:36:45:
2d:45:54:5d:1a:9e:f0:32:ba:b0:a9:a2:33:23:b2:
b3:0f:eb:42:34:2b:8b:93:07:10:87:de:dd:9f:49:
6b:a4:b5:87:8e:50:ae:e7:b1:45:ac:50:ef:93:e8:
5e:a2:8e:b7:11:79:50:d6:e9:ba:74:30:75:39:26:
15:27:0f:7d:16:a7:92:57:8d:dd:02:be:72:0e:05:
b8:36:1a:21:ca:fd:fc:18:d3:a0:52:e5:51:eb:2f:
98:cf:a6:1c:30:25:c6:99:fa:cc:07:d0:e4:d5:1f:
f4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4F:C5:08:96:14:66:6C:A8:71:A6:D3:77:10:EC:52:0D:9F:C9:CD
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:5a:d7:5c:a6:77:cb:36:06:46:a6:0c:d9:21:94:2d:35:5f:
2c:47:9a:ce:c0:55:15:e4:73:91:90:ef:86:1a:6b:04:cf:92:
4b:67:e7:f4:c1:47:91:05:9d:d8:1c:70:37:18:aa:6a:09:0e:
3a:23:c4:b5:bc:c4:32:87:ec:cb:04:68:89:31:7a:c1:d7:51:
2e:dd:a8:5c:11:84:62:5d:fc:00:1e:70:d1:6a:e9:12:7d:85:
e9:ca:3e:e2:fd:93:61:4f:63:ee:fe:eb:a3:25:19:de:7d:0f:
75:f6:91:61:95:58:5d:e1:71:1a:56:32:99:32:6e:e8:f8:70:
ed:af:d1:09:cd:6b:fe:ae:51:ff:d1:11:c8:50:ca:66:6d:f6:
eb:71:90:54:52:99:95:6b:02:db:bb:da:5c:39:f7:01:13:dc:
8c:85:03:35:f7:f1:9b:6c:71:bf:65:6a:20:a0:00:a0:63:5a:
51:fb:29:ae:24:4c:1a:c9:f5:81:ac:b0:71:cf:57:bb:68:1b:
f2:5d:01:8b:08:be:69:fd:e8:cf:0a:d9:cf:fb:6e:23:1e:15:
9a:c3:7b:13:5e:e7:bf:c7:90:a2:61:f2:6c:8a:99:36:a5:bb:
f0:57:a8:a2:4e:67:ed:bb:e7:86:11:93:32:5a:d9:fb:0c:d2:
67:a8:43:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 14:42:31 2025 by rpki-client