Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: RBtkcLrWrarxV39D8S/9cpymP5RcktFsAl7WV8+TdVE=
Subject key identifier: 04:EC:E1:24:0D:DD:61:32:DF:83:4A:1E:65:B8:CF:D4:F3:D3:44:12
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019A4F62596014E53BE3FC2B0C2E68B16F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 0874
Signing time: Tue 04 Nov 2025 15:00:36 +0000
Manifest this update: Tue 04 Nov 2025 15:00:36 +0000
Manifest next update: Wed 05 Nov 2025 15:00:36 +0000
Files and hashes: 1: 5Wr3s3710WFh-gqqnOC5HRfGhqo.roa (hash: mRv9qva0cARo5/cUdT7w241MszdGWtnBv2czFRm61Yk=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: UPtR1k4X3xU1ytZV7n3uovqpJ14agWq76JqhI9/9d3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:59:60:14:e5:3b:e3:fc:2b:0c:2e:68:b1:6f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Nov 4 15:00:36 2025 GMT
Not After : Nov 5 15:00:36 2025 GMT
Subject: CN=04ece1240ddd6132df834a1e65b8cfd4f3d34412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:6b:b3:44:68:06:0b:c2:34:c8:b3:f7:14:
86:12:fc:eb:be:a1:ee:31:ed:a0:c8:b3:5f:53:0f:
ad:23:29:f2:cb:70:79:e2:4e:9a:9e:de:b5:6d:ee:
a8:ff:86:a7:7b:88:71:db:d7:a9:c3:1a:57:d1:82:
79:f5:1b:f4:e2:95:a0:8b:15:03:2b:d2:4c:b2:47:
c9:71:92:4a:ba:a6:6d:1e:58:63:18:5d:b8:a0:eb:
f6:77:83:2d:74:bc:24:05:93:f1:ab:77:ca:bf:ce:
50:bd:ad:5a:a6:74:7f:ed:38:ed:4f:30:5b:f0:b6:
5f:ba:51:d9:2c:27:29:23:c3:df:f0:11:c0:bb:5e:
75:a8:6c:7e:43:7b:72:87:a2:51:ba:26:6f:36:1e:
be:3d:b2:82:43:f5:eb:a9:0d:ea:ab:ab:9c:3a:7c:
92:6a:eb:3d:68:f9:3f:05:3c:1a:24:48:2a:5f:f4:
d6:15:d1:f6:af:f8:b7:85:b3:7f:84:7e:50:70:31:
55:c0:1a:9e:59:14:6f:07:e3:34:d6:51:93:ce:13:
6d:39:ea:df:35:8d:8b:02:1c:da:d5:3f:53:d3:65:
99:3c:34:d0:85:c7:b4:83:76:90:70:d7:e8:b0:de:
08:44:6e:15:c5:c5:4d:4a:6f:ed:0d:55:1d:6a:e8:
61:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:EC:E1:24:0D:DD:61:32:DF:83:4A:1E:65:B8:CF:D4:F3:D3:44:12
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:db:00:b3:50:7a:fe:3d:c5:ac:83:7d:6b:43:55:69:8e:73:
5f:b1:d2:cc:eb:d8:3f:40:66:44:c1:42:45:39:bf:14:ce:53:
2f:98:5a:f8:e8:94:51:36:06:55:36:38:3e:3d:13:ca:7d:c6:
cc:ac:e7:fe:01:21:5b:8d:50:8b:7d:3a:10:22:80:72:10:89:
6d:3c:9f:1c:7a:a5:e9:cd:29:29:84:16:bd:1f:13:e0:53:b2:
52:6a:81:16:76:20:b2:99:0a:18:c5:05:4b:ad:6e:af:78:07:
45:97:5e:cb:b4:f4:e1:f3:ae:bd:ad:04:a7:17:88:26:06:9a:
5b:df:81:64:02:2e:55:e3:b7:4d:b5:6d:d3:b9:2e:d6:49:c8:
56:03:8e:0b:83:7f:25:9d:ae:4c:f0:30:40:81:ce:49:58:d0:
b4:c3:03:4c:e9:c3:9b:17:93:a7:17:65:1b:48:a1:06:f3:9c:
00:5b:79:82:33:b7:b9:44:c4:99:af:ba:d9:29:e7:82:04:27:
9e:cc:e2:be:3a:54:f2:d1:d4:89:de:04:05:8f:a8:6b:43:fc:
33:c3:05:70:d1:ec:1e:79:a3:00:bb:09:f6:70:7c:cc:63:ae:
e7:c3:1f:3c:8d:36:0d:de:23:09:f2:bb:48:14:d4:9c:38:69:
2a:07:ae:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:48 2025 by rpki-client