Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
File: AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json)
Hash identifier: kb3bQmFDGUhDzvSDrt0Gc/ZjXwhQXOoHuof0YoUOXJE=
Subject key identifier: 57:7D:8C:6B:3C:6D:B0:82:E5:CA:6E:93:EE:C3:B8:03:7E:4A:2D:D3
Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Certificate issuer: /CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Certificate serial: 019873E3906E86ECD5EB1B1E63852BFE9EFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
Manifest number: 013B
Signing time: Mon 04 Aug 2025 07:02:30 +0000
Manifest this update: Mon 04 Aug 2025 07:02:30 +0000
Manifest next update: Tue 05 Aug 2025 07:02:30 +0000
Files and hashes: 1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: dNcv9Cfgm77wPj1rc4V4CoZiF19cOCc/dfT2shpH4T0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:90:6e:86:ec:d5:eb:1b:1e:63:85:2b:fe:9e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Validity
Not Before: Aug 4 07:02:30 2025 GMT
Not After : Aug 5 07:02:30 2025 GMT
Subject: CN=577d8c6b3c6db082e5ca6e93eec3b8037e4a2dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:8a:84:54:aa:c6:1f:6f:88:58:2e:6b:93:c5:
1d:ce:28:06:21:31:dc:5f:9e:d3:ef:a0:1b:9c:1f:
e2:1e:e5:73:cd:77:32:f0:a4:c8:72:46:07:2a:79:
ff:dd:3c:31:2c:8d:51:c4:b7:d8:98:65:77:2c:76:
e0:84:ab:b2:0d:44:3b:f0:fa:1c:b0:66:a3:48:df:
09:ac:77:2d:17:47:b1:86:a5:0a:3e:b9:35:df:75:
26:69:8f:87:53:04:90:67:fc:3d:aa:51:4e:82:3f:
d4:e6:40:31:cc:0c:0b:6d:95:15:bc:64:13:74:3d:
9a:d0:e6:f5:99:b6:52:36:34:1b:e0:e6:69:bc:aa:
4b:d6:9c:cd:13:2d:22:31:a5:63:98:bb:b3:a1:3e:
ff:b4:a9:ba:99:32:83:c2:3d:b6:45:1c:a2:69:e7:
da:9a:0e:ee:ad:a4:d0:3d:a4:5c:88:40:a3:c8:15:
70:06:8d:21:31:8e:98:43:2d:84:96:06:50:6a:74:
f9:2e:a7:ac:d9:61:09:7c:5f:ed:81:1e:b9:b6:74:
17:2c:66:c8:22:b1:b2:66:2a:76:9b:d3:0d:df:55:
2d:a7:c4:6c:0b:39:e7:a8:7c:4e:93:7a:da:5b:e6:
14:92:75:ad:88:85:69:c6:7c:07:c3:08:27:81:ad:
35:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7D:8C:6B:3C:6D:B0:82:E5:CA:6E:93:EE:C3:B8:03:7E:4A:2D:D3
X509v3 Authority Key Identifier:
keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:f9:c8:2f:0a:d6:1d:f9:c4:d9:85:6d:1d:a6:3b:cc:d7:99:
b0:74:d3:35:9b:90:ed:63:06:ab:60:a8:c4:40:00:d7:e2:cf:
cd:fe:f6:ad:ed:4a:0a:a6:bf:7b:b3:48:ad:ff:a7:80:d0:e2:
bb:3d:58:54:13:25:f1:62:ad:07:0f:b5:8c:8b:58:63:e7:9d:
9f:57:8a:91:2c:da:cc:35:a0:c5:f0:43:59:ef:5b:2a:17:cb:
6c:ba:ea:be:cd:07:7f:9c:cc:bc:8d:df:4a:61:9a:ed:85:6f:
46:cc:ac:ef:cb:a9:00:54:2d:04:71:51:15:21:c5:69:bc:60:
e4:43:eb:65:49:88:61:2c:86:ab:41:9c:b5:28:0d:27:c1:7d:
ae:e6:02:d8:80:4b:be:d8:d0:ea:ca:73:cc:58:9f:aa:b7:39:
ba:e6:70:3f:f9:50:13:60:89:8c:6f:8c:d0:7e:d0:68:fe:6e:
f7:3d:7a:d8:69:5a:05:d1:25:69:f7:b0:6a:eb:9b:bf:e3:5b:
12:cf:bf:c4:3d:61:ae:c0:21:3a:f4:1a:a4:92:c6:16:16:54:
c3:0c:41:b2:5a:03:33:67:61:e7:66:80:6f:4a:b4:bc:5a:51:
11:a3:6b:0e:32:51:da:6e:16:22:74:d5:be:b5:42:22:2e:fe:
d6:10:18:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:36:00 2025 by rpki-client