Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: /UCV4q2ccXp7/lES+eUfyeYyzL4v+d032P1qU1Cp2VI=
Subject key identifier: 4E:B1:34:87:94:9E:1E:56:57:1C:63:77:AA:8F:DC:9E:59:41:E1:1A
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 019788B5223C52FDBF1F83BA1512C11CE0B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: E2
Signing time: Thu 19 Jun 2025 15:01:01 +0000
Manifest this update: Thu 19 Jun 2025 15:01:01 +0000
Manifest next update: Fri 20 Jun 2025 15:01:01 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: mgLEb/JE5sByvYXqywxSbE2CtppxMU7S3t/YH3Zkicg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 15:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:b5:22:3c:52:fd:bf:1f:83:ba:15:12:c1:1c:e0:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Jun 19 15:01:01 2025 GMT
Not After : Jun 20 15:01:01 2025 GMT
Subject: CN=4eb13487949e1e56571c6377aa8fdc9e5941e11a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ad:e4:59:be:62:b8:b7:f6:44:3e:49:5f:4e:
d1:11:bc:a3:62:dc:63:90:0a:13:41:b2:14:92:b9:
75:75:08:f6:29:7e:96:b0:e8:00:2f:87:2a:a9:f8:
0c:ac:0f:1a:74:e7:d8:f9:79:91:0d:e8:97:2c:af:
85:b5:d1:c2:64:93:d8:9e:13:38:cf:69:67:06:19:
91:7c:5c:fe:d1:15:c4:e9:72:98:27:46:8c:81:48:
a4:20:43:9d:bb:73:1c:ec:50:1d:8d:c5:e6:e2:15:
3d:9e:dc:e2:ae:5b:01:23:af:21:3a:a3:83:b4:c3:
67:f3:67:ed:5f:61:76:f0:f4:cb:92:3c:3b:ed:d4:
66:5e:6b:84:83:a7:12:5c:ed:4a:d0:4b:83:07:89:
38:a4:0e:0e:44:a3:e8:50:12:07:85:9a:50:d3:04:
16:51:70:45:07:ad:45:f0:a1:48:26:39:21:9f:1f:
ef:03:66:78:87:ee:e7:25:59:5f:fa:b4:7b:ab:9b:
30:cb:11:db:9c:4e:cb:0b:ca:f6:d5:81:f0:7e:38:
3b:ae:1a:6d:6b:be:dc:44:8d:c2:23:da:c0:0e:f2:
46:f0:47:f7:ff:cd:fd:a2:66:65:73:7e:9f:d7:b5:
f0:fb:c9:72:0e:80:f1:fb:ef:27:6f:9c:b3:fd:e8:
4a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:34:87:94:9E:1E:56:57:1C:63:77:AA:8F:DC:9E:59:41:E1:1A
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:92:3d:26:1d:19:f5:36:d6:4a:42:8c:48:11:17:a1:09:77:
cc:51:a9:d1:4c:b5:10:51:8d:cf:a5:a3:99:e0:1c:56:49:6f:
37:a4:59:78:02:44:17:61:02:0f:f6:d5:0f:e5:67:40:46:9f:
94:74:d4:64:3c:aa:3c:8e:82:aa:74:1b:49:2e:fe:3a:21:d3:
7e:21:29:1d:e4:d2:f3:0d:b5:bd:b6:96:bb:fb:c1:4e:5a:64:
87:70:53:6a:14:b2:79:fc:48:be:fb:ab:fb:51:21:ad:73:f0:
d4:7f:8a:eb:81:7d:c2:fb:37:9a:e0:a3:8b:46:c0:4c:c6:11:
33:7d:b4:f4:18:0c:a6:b8:9c:c3:8b:bc:6c:b8:34:15:09:7d:
2f:2e:6f:7b:69:43:76:fd:6b:34:68:c7:17:ee:7d:fa:13:d9:
63:97:b0:56:0c:c7:3e:6c:78:1f:8b:2d:4b:47:e0:67:e5:9f:
f7:c2:ef:91:f9:25:55:fb:31:4f:d8:2b:8c:29:ce:c3:3e:6e:
58:07:ef:9f:19:17:6a:86:26:dc:bf:37:a0:67:01:b1:ba:a4:
64:46:81:42:4a:9b:af:8d:e6:b0:90:ab:42:bf:77:e9:a0:85:
25:71:fc:4c:36:22:b1:ba:f7:59:fb:1c:90:92:15:2c:58:02:
31:41:8e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 23:56:54 2025 by rpki-client