Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
File: AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft (raw, json)
Hash identifier: ys1FiIE+wo/g28aeGZnrtZ6v5fd2imR7wonvzPDPVk4=
Subject key identifier: 5E:17:AA:3A:40:36:BE:9A:64:E5:AF:2F:B9:16:F0:16:BA:58:5B:7B
Authority key identifier: 02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
Certificate issuer: /CN=0241154462e5adcca9d2bcbd1443fcc637879537
Certificate serial: 019874502AD5DEB9EF6CDBFBEABA43A3B9D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
Manifest number: 077E
Signing time: Mon 04 Aug 2025 09:01:07 +0000
Manifest this update: Mon 04 Aug 2025 09:01:07 +0000
Manifest next update: Tue 05 Aug 2025 09:01:07 +0000
Files and hashes: 1: 5Wr3s3710WFh-gqqnOC5HRfGhqo.roa (hash: mRv9qva0cARo5/cUdT7w241MszdGWtnBv2czFRm61Yk=)
2: AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl (hash: FCBuQkp4FpfW9VOrkyBWgMseHXm12KJPo4vh3XEHpnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:2a:d5:de:b9:ef:6c:db:fb:ea:ba:43:a3:b9:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0241154462e5adcca9d2bcbd1443fcc637879537
Validity
Not Before: Aug 4 09:01:07 2025 GMT
Not After : Aug 5 09:01:07 2025 GMT
Subject: CN=5e17aa3a4036be9a64e5af2fb916f016ba585b7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1d:d2:60:c3:d7:81:a4:28:40:71:67:7b:40:
ce:c4:4e:56:ef:85:f4:52:db:21:d4:cb:65:68:b8:
42:49:0a:72:0b:35:0c:fb:0e:a3:34:56:68:58:2d:
78:78:72:54:b5:83:0a:be:57:95:87:66:d7:f7:cf:
20:a3:88:fb:86:87:db:57:86:67:e7:a6:b9:4a:2a:
51:14:bc:dc:ab:f4:f9:8e:38:8b:66:5e:6c:6e:b7:
92:d5:7c:2c:b6:f6:2b:70:d7:a3:ea:2a:bf:61:a1:
07:d6:1b:ea:d3:d7:df:6c:68:a0:69:85:3c:5f:23:
f6:a8:9f:27:90:fe:c0:8f:a5:ab:4c:21:7e:8e:a9:
5b:ab:e5:81:21:81:d0:9a:fc:90:da:e9:29:42:d8:
16:9c:0a:97:58:89:2b:a3:9a:a9:4f:aa:e7:02:00:
4b:26:7c:55:db:78:f4:16:ea:b7:31:b4:05:60:d5:
73:4c:14:46:28:da:44:80:b7:07:6c:72:38:10:d5:
f0:0c:a6:5a:4e:ab:16:50:ac:b2:df:d5:da:b3:f6:
6c:a7:a5:5a:e6:27:5c:84:a6:56:72:68:47:8c:7c:
7b:50:a0:f2:93:75:32:8a:ee:2a:de:63:f0:57:ad:
bc:23:0e:d7:01:d5:aa:84:38:9e:b3:d7:37:3d:65:
56:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:17:AA:3A:40:36:BE:9A:64:E5:AF:2F:B9:16:F0:16:BA:58:5B:7B
X509v3 Authority Key Identifier:
keyid:02:41:15:44:62:E5:AD:CC:A9:D2:BC:BD:14:43:FC:C6:37:87:95:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AkEVRGLlrcyp0ry9FEP8xjeHlTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/09761d-6e5c-451b-8e8a-e92ee5eed226/1/AkEVRGLlrcyp0ry9FEP8xjeHlTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:79:f9:cb:be:44:b6:de:ab:2a:3c:4a:b7:15:45:63:58:be:
09:c4:62:05:9d:35:34:1a:b7:ed:1f:9a:9f:1d:91:d3:18:93:
22:ed:de:d9:a0:a2:77:59:b9:34:6b:3e:3e:01:3e:13:f1:a3:
6f:1f:99:9c:0d:b3:7d:e5:d2:90:c6:ef:96:c9:db:6a:14:64:
ae:94:99:e6:06:3c:95:27:5b:48:90:db:c2:fd:c6:3b:ea:06:
51:ba:68:38:a2:51:ec:23:77:bb:2a:d9:9a:c5:e9:43:46:a3:
44:d5:89:db:1f:55:af:7e:56:e3:21:ae:64:00:32:dd:c7:57:
3b:68:ed:a1:9a:a1:1c:0a:c5:cc:06:96:19:02:71:72:23:20:
33:e2:1c:9b:e6:00:e7:96:4c:31:e3:69:40:83:db:b4:b4:56:
1c:8c:38:9e:55:74:47:8e:4d:b3:8e:73:f6:77:1d:84:01:00:
ae:06:e4:d7:46:d2:30:ce:1b:d1:c9:8e:a9:9d:f1:a2:65:d3:
05:cc:a7:a1:8b:c4:bf:de:b6:35:04:d7:a3:44:b0:a4:d1:3a:
52:aa:c4:86:69:b8:1b:a1:1d:40:a8:21:c5:f5:61:fa:a6:79:
4f:8b:f3:1e:9e:a1:5c:b9:e0:17:3f:de:cc:5e:d3:cc:ab:d1:
59:8f:d5:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:34 2025 by rpki-client