
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
File: AKTVv_pzY0hD6QPjexj97g2sWFs.mft (raw, json)
Hash identifier: fUP+dJXYrqT1qeiPaZSe8hjNaHAJ9DgAQO0Tzhe5MKY=
Subject key identifier: C0:E7:B9:DD:B8:79:24:71:0E:5F:AB:5B:96:FB:13:B9:4D:29:C4:EC
Authority key identifier: 00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
Certificate issuer: /CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Certificate serial: 01976960B5E93C69D6B19090C6CBD882EE77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
Manifest number: B1
Signing time: Fri 13 Jun 2025 13:00:35 +0000
Manifest this update: Fri 13 Jun 2025 13:00:35 +0000
Manifest next update: Sat 14 Jun 2025 13:00:35 +0000
Files and hashes: 1: AKTVv_pzY0hD6QPjexj97g2sWFs.crl (hash: dleRHsQxgy3A7ScFVFOUbwkdW+rDG+BLKyl4tIi7u/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:b5:e9:3c:69:d6:b1:90:90:c6:cb:d8:82:ee:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a4d5bffa73634843e903e37b18fdee0dac585b
Validity
Not Before: Jun 13 13:00:35 2025 GMT
Not After : Jun 14 13:00:35 2025 GMT
Subject: CN=c0e7b9ddb87924710e5fab5b96fb13b94d29c4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:31:4c:6e:86:c6:59:c7:40:1f:e6:c4:45:e3:
af:14:97:b9:0a:06:5e:06:83:15:15:9d:c6:4d:44:
29:eb:5f:2e:d0:3b:d1:09:d2:98:52:58:a0:94:b8:
5f:80:de:4d:72:63:fe:f1:60:70:3f:51:5c:63:76:
01:81:6d:c9:52:66:a5:27:56:70:65:4a:23:df:f8:
ab:69:bc:64:6e:09:98:75:19:ef:dd:af:cd:69:bd:
40:d3:cf:16:8c:f7:f2:07:8c:cf:1e:7c:ef:e3:9c:
98:9b:c6:0e:06:a8:c9:82:d7:65:40:1b:98:0a:5d:
c4:99:9f:ce:05:03:87:8c:21:b1:b6:cd:9a:cb:81:
8d:15:87:e4:ca:11:bb:56:b6:6d:08:10:19:44:ba:
c6:43:f9:ab:41:b1:e5:d3:02:23:51:49:69:ae:6a:
aa:7a:15:41:ee:55:06:1c:42:8c:be:67:1d:0b:82:
15:a0:16:05:a4:74:5b:c2:a5:29:d6:ac:3f:9b:70:
bf:ba:9b:33:fe:78:47:e3:a3:7a:d8:87:1e:f9:bd:
c0:1b:8f:b1:29:0d:cc:5c:1e:41:a7:d0:fc:90:75:
fa:69:fc:0a:53:58:f3:59:bf:22:1e:24:a6:5f:86:
ec:85:84:57:73:00:d4:f2:1a:26:75:84:ca:38:a0:
99:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:E7:B9:DD:B8:79:24:71:0E:5F:AB:5B:96:FB:13:B9:4D:29:C4:EC
X509v3 Authority Key Identifier:
keyid:00:A4:D5:BF:FA:73:63:48:43:E9:03:E3:7B:18:FD:EE:0D:AC:58:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKTVv_pzY0hD6QPjexj97g2sWFs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/96e640-85a5-475b-94cb-84ee69ed93a4/1/AKTVv_pzY0hD6QPjexj97g2sWFs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:bb:82:f3:65:0b:d4:da:3c:28:da:20:e4:3c:82:51:12:1a:
17:11:ba:b1:59:c1:a7:70:d9:c1:f2:07:d8:fb:75:7d:84:5d:
88:8d:8d:d3:93:bd:f1:75:a7:1a:59:de:a1:be:d6:e1:a6:5d:
02:bd:f8:fb:53:6d:20:af:6c:8a:20:2c:98:3f:c0:62:8e:4d:
c9:9a:9d:9a:6e:a5:26:12:61:2c:a3:d7:47:a1:e0:53:f8:42:
49:0c:dc:af:45:3f:d1:df:ab:ba:a0:b7:47:c7:4b:4b:46:7f:
7f:d8:a3:f1:a3:7d:67:6e:93:74:d3:3b:bc:e8:91:82:7b:6b:
e3:45:1d:48:5a:dc:a9:84:fe:a0:ad:96:52:c0:88:0a:75:1e:
7d:39:e1:61:2c:c6:66:74:ec:36:4f:e4:ed:1c:76:cc:ee:77:
32:94:24:c9:17:b1:f7:7f:19:06:74:58:ba:7b:15:e3:41:49:
eb:9e:37:ed:21:61:28:f1:a6:c6:e6:d7:d2:0e:9d:70:d8:b3:
9e:b4:05:9d:3d:2e:75:54:bd:6e:31:9d:06:7e:53:4a:b2:d5:
8c:fe:53:0a:6d:03:e2:c9:7d:86:05:46:c9:99:8c:e5:90:78:
5f:b6:d3:85:87:a3:77:c1:dd:7e:58:66:bc:82:6c:8c:2c:69:
a6:b2:19:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:20:56 2025 by rpki-client