Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
File: AK-d2jB8tSU4XvkPUG0NV7udK_I.mft (raw, json)
Hash identifier: OLYvuxYowhTsNs6O0iWqCZKSTvHGuTwl33+3XN/Wwys=
Subject key identifier: AC:76:CD:E7:4D:38:8E:13:C4:DF:12:29:94:8D:E7:BA:B7:88:98:79
Authority key identifier: 00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
Certificate issuer: /CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Certificate serial: 01987D8AAB379F0BC4C3307F7AA42D56F79D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 04:01:36 +0000
Manifest this update: Wed 06 Aug 2025 04:01:36 +0000
Manifest next update: Thu 07 Aug 2025 04:01:36 +0000
Files and hashes: 1: 6bvZxxULuUAwxd6eAYmdH966b80.roa (hash: UhY3F2JnlJhsLB1FG3kdABwVVPcmvuwcVrV1nXeuwB0=)
2: AK-d2jB8tSU4XvkPUG0NV7udK_I.crl (hash: aaQ8crioToUhNn47aAvdSlwqTfd0xkCJ569lrHRnaSw=)
3: hkmQH-83zbYgbeFajt_G5vLUDB4.roa (hash: gB0UcPN+esB++4aqp9cznO6G7WYynK4/0uUbdmlbv78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8a:ab:37:9f:0b:c4:c3:30:7f:7a:a4:2d:56:f7:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00af9dda307cb525385ef90f506d0d57bb9d2bf2
Validity
Not Before: Aug 6 04:01:36 2025 GMT
Not After : Aug 7 04:01:36 2025 GMT
Subject: CN=ac76cde74d388e13c4df1229948de7bab7889879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:85:ea:23:4d:28:36:2e:99:6e:4e:23:9c:25:
ad:2b:62:bf:e1:36:f2:b7:32:4a:05:62:2e:4a:e2:
8d:24:cd:1a:91:8c:ce:8f:e2:c8:46:40:69:a6:ec:
8a:6f:8d:a9:eb:10:f5:f3:27:85:76:a5:ad:d6:9c:
ff:ee:ce:83:33:6c:65:06:4e:38:00:99:28:e9:79:
4e:14:07:db:b9:1e:91:1e:6e:12:2c:ad:3d:19:dd:
e2:b3:11:2e:ca:0e:ec:66:c9:d4:2a:19:01:23:6f:
b3:76:59:41:f1:0d:2a:07:f4:32:34:ff:4c:35:f8:
b8:80:9d:32:0c:87:f7:58:a2:69:00:2a:86:20:d0:
ad:93:be:b7:29:2b:8f:42:fc:ba:67:e1:1f:a1:4a:
61:f4:49:bd:3a:5d:66:3e:05:2c:fb:23:5f:11:e7:
d8:67:f7:b5:f9:27:d0:fe:d2:aa:98:42:3e:82:c2:
2c:53:8e:28:6d:d6:38:1e:62:3c:9e:7e:87:12:8a:
15:4c:fd:c6:04:8b:5a:b0:8f:8a:60:ac:36:16:3d:
39:e5:8a:2f:64:1b:95:61:ff:d9:a3:6d:eb:79:7a:
28:00:e7:ea:af:6a:89:18:e8:bf:fe:9d:76:fd:76:
5c:b1:06:f7:49:5a:a3:48:a0:1a:1e:e8:98:a5:89:
5d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:76:CD:E7:4D:38:8E:13:C4:DF:12:29:94:8D:E7:BA:B7:88:98:79
X509v3 Authority Key Identifier:
keyid:00:AF:9D:DA:30:7C:B5:25:38:5E:F9:0F:50:6D:0D:57:BB:9D:2B:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK-d2jB8tSU4XvkPUG0NV7udK_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d0e2f4-b60a-40b2-92e9-90eace9e059e/1/AK-d2jB8tSU4XvkPUG0NV7udK_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:48:c9:86:fe:c8:2e:fe:eb:c3:c1:f6:43:0d:34:66:30:9e:
d2:33:98:c6:85:ff:0b:75:a6:8f:ce:3d:26:00:2a:11:23:b1:
8c:ce:03:84:a1:c7:86:f0:b9:79:7c:5f:67:0e:f9:4d:04:40:
f1:77:b9:80:fd:ba:ea:8c:db:b5:d1:1c:97:ef:de:7d:22:e4:
e5:f3:0e:0b:d5:10:e6:dc:c2:b6:19:69:16:5e:e7:fa:29:e8:
8c:33:80:fc:b1:20:d5:b3:1b:c1:03:d4:18:3e:75:c8:54:df:
73:ab:74:e0:41:37:20:1c:5c:e8:b6:75:da:d0:40:90:ee:19:
64:55:a2:37:f1:65:56:47:bc:d5:f9:37:5d:5b:a2:32:78:ae:
8d:14:bf:45:d7:19:91:65:ad:6c:64:6d:1c:32:2e:1a:57:1a:
6d:1e:3a:0c:9d:aa:ce:89:1a:70:13:d4:d6:36:d5:08:15:1b:
ca:ff:34:74:8d:f7:fc:07:10:7f:b6:80:89:81:4b:90:87:aa:
4c:09:b8:8b:3c:d1:b3:1d:d2:06:b8:a9:94:6a:99:6e:70:ed:
a5:aa:1d:81:68:fb:73:e4:4b:42:86:84:95:d2:ad:4c:41:3f:
73:aa:3b:ea:88:21:5a:24:a4:a2:78:dd:08:6f:aa:f3:e0:4d:
40:7d:a7:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 09:36:02 2025 by rpki-client