Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
File: akq-io-jeJUa-mhZc1u-axgUi1c.mft (raw, json)
Hash identifier: LNgz9jwvE9gdxzqSi4jFH4PO/6CpixyGJm3Nzhj3F8o=
Subject key identifier: 33:98:6C:2E:77:B1:95:47:1A:0E:95:D3:F5:2D:A5:10:8A:E1:D1:B8
Authority key identifier: 6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
Certificate issuer: /CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Certificate serial: 019874BDE1607F49BF2ED0F85A7FDADC0D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 11:00:57 +0000
Manifest this update: Mon 04 Aug 2025 11:00:57 +0000
Manifest next update: Tue 05 Aug 2025 11:00:57 +0000
Files and hashes: 1: 0n3iQYpF6Ls3-dvq0yk-f6w2ktE.roa (hash: 92er4aRrLmBNUO87OrAGD3iytTTvnMtEKh+SACuDLjI=)
2: akq-io-jeJUa-mhZc1u-axgUi1c.crl (hash: 03vjcHB4P/2UxXmIbSm7x/n8v1b4uEuy78xwxwQo8tA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:bd:e1:60:7f:49:bf:2e:d0:f8:5a:7f:da:dc:0d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a4abe8a8fa378951afa6859735bbe6b18148b57
Validity
Not Before: Aug 4 11:00:57 2025 GMT
Not After : Aug 5 11:00:57 2025 GMT
Subject: CN=33986c2e77b195471a0e95d3f52da5108ae1d1b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8e:9e:57:ac:b7:ed:4c:b6:8c:9b:77:11:7b:
45:87:0c:1d:04:ac:30:69:c9:92:cf:8f:5b:e0:04:
83:7d:15:29:f2:84:9a:cb:41:8b:58:0f:86:c6:3c:
ac:7e:75:f8:10:d3:b8:7f:95:81:98:21:ff:9a:07:
0a:1d:50:a4:5e:1c:1f:79:47:34:10:d9:e9:8f:17:
00:ee:30:1f:2c:66:6c:a2:89:32:cd:bd:8a:20:24:
03:96:dc:84:71:71:e3:25:79:c8:2e:51:41:bf:be:
b0:fb:15:4f:7c:81:0b:50:65:47:09:2d:67:36:0a:
f2:64:59:23:98:73:97:63:52:4d:ea:14:cb:b3:25:
5e:fc:2a:7b:a6:e6:dd:ed:06:15:06:31:d2:ee:19:
2a:38:e7:c8:1d:2b:57:86:aa:fb:20:e9:ec:44:4e:
74:f9:d9:75:db:1f:8a:a3:b1:95:ea:99:e3:2c:13:
a8:c9:2a:2b:61:83:fa:3c:7d:b0:a9:a7:0c:26:24:
08:c1:c8:4a:15:56:70:ea:74:f0:c4:8f:18:b0:ca:
d7:96:2d:4f:18:4a:1e:8b:64:7a:dd:54:60:e8:0f:
71:a0:29:90:af:dd:cd:76:c5:47:03:24:b5:46:4a:
9f:da:42:a0:6b:22:9b:6e:5d:ac:99:63:5e:4d:01:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:98:6C:2E:77:B1:95:47:1A:0E:95:D3:F5:2D:A5:10:8A:E1:D1:B8
X509v3 Authority Key Identifier:
keyid:6A:4A:BE:8A:8F:A3:78:95:1A:FA:68:59:73:5B:BE:6B:18:14:8B:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/akq-io-jeJUa-mhZc1u-axgUi1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/b028b6-4782-4c7f-b6a2-87eb448e92ed/1/akq-io-jeJUa-mhZc1u-axgUi1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f9:b2:cd:50:9a:95:9f:ec:55:e6:3b:51:3a:e9:04:70:ae:
5c:e5:c8:a5:18:3c:6e:f1:92:db:8e:2c:c0:d7:1a:d2:2d:6c:
e1:41:98:31:4d:6b:50:ea:d6:a8:3c:c0:2b:9a:14:1e:1d:5f:
06:37:62:b5:5a:d0:72:01:44:ce:ae:f0:bc:1e:65:10:a1:0d:
52:6e:8d:b9:fd:08:e2:55:7c:1a:04:2c:6f:3d:0d:cf:63:cd:
ec:5e:c1:61:95:3f:b4:93:19:b9:a0:ec:88:f4:4e:1b:82:84:
f5:31:85:7c:ee:58:d5:16:07:cf:67:b1:41:b1:98:f7:e3:1d:
f5:2f:9c:12:61:1f:c9:7c:9f:88:c8:eb:df:73:75:55:e4:87:
e6:8f:5e:b2:31:42:c8:7e:58:2f:72:7c:d9:65:4b:08:51:63:
f7:25:10:5a:8e:d3:d8:a1:25:0b:08:a9:dc:1e:f0:ce:a5:fc:
0a:88:2a:5f:55:9d:4b:64:8d:cc:e2:82:c5:35:f0:24:90:2c:
f0:0e:3f:58:99:4f:b1:0e:26:2d:0c:1f:7b:d6:e4:df:4b:be:
1e:fa:fa:91:02:51:dc:b4:f8:11:8e:62:41:12:07:23:e3:ae:
7f:d7:38:4f:8c:51:96:dd:37:78:26:7b:00:0c:7e:91:d4:64:
86:5f:47:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:38:49 2025 by rpki-client