
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
File: AK1tg8gINynXqdhXHWXOl-BYuCE.mft (raw, json)
Hash identifier: PGyT4dNDAAHGIr+9ZnafdxR8nf2rTQyQJxUII7QIKec=
Subject key identifier: 04:99:39:2C:71:00:F1:C8:0C:47:8D:BB:6B:98:C8:64:BF:DE:6C:04
Authority key identifier: 00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
Certificate issuer: /CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Certificate serial: 01987D1C22014F630ABF85B7B2BBEDB01C72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
Manifest number: 0AB1
Signing time: Wed 06 Aug 2025 02:00:52 +0000
Manifest this update: Wed 06 Aug 2025 02:00:52 +0000
Manifest next update: Thu 07 Aug 2025 02:00:52 +0000
Files and hashes: 1: 0avBUZc0fRe5pdYzvDk9HgX1ajQ.roa (hash: vHaXs0oLz+thOA7Ry4E1jwe2sP/zqNcNu+NOGxEA+rM=)
2: AK1tg8gINynXqdhXHWXOl-BYuCE.crl (hash: fqx1Cc9xtJbnylRi0TFX/je9MsAOQVMsyqqgcVQDKr8=)
3: EZwtw6Pq_G1qcUHbmI7-gXnu9Jc.roa (hash: vmy1JQIAxBf7tCsU1XK4dYqZEdqdyJHgDm3eJn2Yp94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:22:01:4f:63:0a:bf:85:b7:b2:bb:ed:b0:1c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00ad6d83c8083729d7a9d8571d65ce97e058b821
Validity
Not Before: Aug 6 02:00:52 2025 GMT
Not After : Aug 7 02:00:52 2025 GMT
Subject: CN=0499392c7100f1c80c478dbb6b98c864bfde6c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:bd:ba:54:3f:ca:d4:56:ca:47:9b:f7:cd:
5b:78:1e:fb:35:e8:f7:89:12:32:fc:20:4c:03:eb:
df:b6:f6:ec:8b:7b:16:6d:10:e9:39:82:bf:22:29:
6e:e5:c3:d0:02:97:66:81:c8:7e:27:d0:fa:8f:6c:
31:2c:e5:aa:84:c7:9b:bb:33:52:b9:e9:2a:e1:17:
d5:e3:b6:cc:3e:e3:57:54:a3:91:30:77:a1:29:35:
71:de:15:a2:26:d9:4c:80:4b:33:2d:9f:da:08:9c:
2c:67:7c:36:81:b9:1d:bb:d6:98:9c:2d:c4:6f:80:
21:4c:bc:8a:47:23:d0:62:c8:2c:ef:04:75:9f:e9:
0b:6d:6d:45:8b:60:a8:4b:53:37:40:1a:2e:6b:d2:
14:ed:d3:9b:90:b4:bf:9c:a6:e5:5e:fd:5c:a5:c3:
96:88:90:ec:b0:95:ed:e7:fe:ae:2c:3c:24:6b:28:
f2:a0:7d:e0:bb:76:28:49:97:2c:30:7b:8f:38:00:
94:67:6f:0e:90:32:d4:ed:87:b3:ec:73:fa:2e:9d:
a6:5b:8c:c6:68:3a:5c:eb:85:df:e5:50:44:a2:48:
e1:99:ad:0e:8e:93:b7:23:b1:9f:d9:89:7d:2d:a7:
be:7a:52:1a:d2:fb:de:76:ac:5b:01:69:b3:7f:a1:
61:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:99:39:2C:71:00:F1:C8:0C:47:8D:BB:6B:98:C8:64:BF:DE:6C:04
X509v3 Authority Key Identifier:
keyid:00:AD:6D:83:C8:08:37:29:D7:A9:D8:57:1D:65:CE:97:E0:58:B8:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK1tg8gINynXqdhXHWXOl-BYuCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/db2912-89a9-4ee9-8229-a55f77b83e6b/1/AK1tg8gINynXqdhXHWXOl-BYuCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e9:81:61:e0:92:a0:46:a3:ab:c9:32:94:61:8c:17:a7:93:
3b:6d:6f:38:5d:95:80:ec:59:2f:39:7e:6a:60:8e:0e:96:25:
c7:bc:f0:a4:51:aa:f2:ac:c5:dc:af:03:b8:5a:17:f9:0b:be:
8f:f4:d2:28:1a:a0:36:ce:0f:03:38:8c:f3:2c:39:ab:0a:12:
5b:91:b2:87:94:9e:70:56:00:09:ca:c7:bb:05:b7:3a:43:9d:
c0:04:49:eb:71:3c:1a:b5:a1:38:da:9a:f0:d8:7a:61:2d:15:
27:53:45:86:51:fe:90:4e:98:26:90:f4:7e:6f:9f:3e:60:1c:
64:80:6e:17:8e:32:11:16:06:00:94:31:5c:ff:43:3a:9e:f1:
28:f9:15:be:4a:97:1c:07:17:8d:59:01:ce:89:ce:24:4f:6b:
15:35:29:bb:82:5d:e3:aa:cf:6b:cd:e4:fe:08:98:d2:a9:f7:
f1:00:bf:aa:7f:26:da:2a:61:4f:bb:1a:b7:84:ec:2f:cf:42:
b5:5f:14:f6:f8:d3:fc:c0:92:58:74:a1:ee:29:61:be:ac:be:
32:79:07:55:12:00:4e:92:aa:7b:01:cc:84:86:bf:ab:d2:cb:
27:74:8c:bf:4c:6c:ff:b1:be:69:0e:f2:ad:a7:1a:c0:3d:32:
e0:e5:1d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9HCIBT2MKv4W3srvtsBxyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYWQ2ZDgzYzgwODM3MjlkN2E5ZDg1NzFkNjVjZTk3ZTA1
OGI4MjEwHhcNMjUwODA2MDIwMDUyWhcNMjUwODA3MDIwMDUyWjAzMTEwLwYDVQQD
EygwNDk5MzkyYzcxMDBmMWM4MGM0NzhkYmI2Yjk4Yzg2NGJmZGU2YzA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPK9ulQ/ytRWykeb981beB77Nej3
iRIy/CBMA+vftvbsi3sWbRDpOYK/Iilu5cPQApdmgch+J9D6j2wxLOWqhMebuzNS
uekq4RfV47bMPuNXVKORMHehKTVx3hWiJtlMgEszLZ/aCJwsZ3w2gbkdu9aYnC3E
b4AhTLyKRyPQYsgs7wR1n+kLbW1Fi2CoS1M3QBoua9IU7dObkLS/nKblXv1cpcOW
iJDssJXt5/6uLDwkayjyoH3gu3YoSZcsMHuPOACUZ28OkDLU7Yez7HP6Lp2mW4zG
aDpc64Xf5VBEokjhma0OjpO3I7Gf2Yl9Lae+elIa0vvedqxbAWmzf6Fh9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFASZOSxxAPHIDEeNu2uYyGS/3mwEMB8GA1UdIwQY
MBaAFACtbYPICDcp16nYVx1lzpfgWLghMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjkt
YTU1Zjc3YjgzZTZiLzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9kYjI5MTItODlhOS00ZWU5LTgyMjktYTU1Zjc3YjgzZTZi
LzEvQUsxdGc4Z0lOeW5YcWRoWEhXWE9sLUJZdUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeemBYeCS
oEajq8kylGGMF6eTO21vOF2VgOxZLzl+amCODpYlx7zwpFGq8qzF3K8DuFoX+Qu+
j/TSKBqgNs4PAziM8yw5qwoSW5Gyh5SecFYACcrHuwW3OkOdwARJ63E8GrWhONqa
8Nh6YS0VJ1NFhlH+kE6YJpD0fm+fPmAcZIBuF44yERYGAJQxXP9DOp7xKPkVvkqX
HAcXjVkBzonOJE9rFTUpu4Jd46rPa83k/giY0qn38QC/qn8m2iphT7sat4TsL89C
tV8U9vjT/MCSWHSh7ilhvqy+MnkHVRIATpKqewHMhIa/q9LLJ3SMv0xs/7G+aQ7y
racawD0y4OUdiA==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:28:15 2025 by rpki-client