Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: 2sOe90H04cwASmHFhmZPWMLAbDf47/7xsJ30XxHjARM=
Subject key identifier: 02:63:F6:7D:87:75:07:B8:B6:35:8B:B2:5E:4E:0B:CB:0F:39:1B:14
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 01989524E05672948C98944D4B19BFC6E943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 016D
Signing time: Sun 10 Aug 2025 18:01:18 +0000
Manifest this update: Sun 10 Aug 2025 18:01:18 +0000
Manifest next update: Mon 11 Aug 2025 18:01:18 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: 7D78/yQSSZhn7FAOE+Exkwnpp58PFIQBboKalx8Y3eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:e0:56:72:94:8c:98:94:4d:4b:19:bf:c6:e9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Aug 10 18:01:18 2025 GMT
Not After : Aug 11 18:01:18 2025 GMT
Subject: CN=0263f67d877507b8b6358bb25e4e0bcb0f391b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:3f:c2:62:10:7f:b5:68:78:7c:89:8d:df:
b9:98:63:a4:ba:6c:62:d7:ff:fe:0a:62:45:2b:73:
85:b7:fe:a5:e5:cf:f6:bc:f7:5c:7e:9a:6f:d5:ed:
08:fa:8f:db:c3:cc:5b:f8:ca:f4:64:72:07:75:e9:
bd:fd:b3:80:bb:7a:c4:5e:04:f1:ea:1c:ca:bf:dd:
0c:63:4d:d6:f0:32:85:ca:d3:90:1f:2c:45:15:d3:
e7:11:d3:40:8a:fa:25:51:59:25:e7:05:bb:e1:de:
6e:1d:92:e2:cc:47:4d:10:37:81:27:7c:93:6b:e4:
35:74:2d:e5:a2:c3:3b:12:7a:b9:88:7b:fd:7e:17:
e1:d4:7d:b8:de:be:64:93:a2:2a:21:57:23:c3:e9:
fa:12:ff:b5:90:c5:41:4b:5d:e3:b7:96:11:98:cf:
04:33:4c:6c:32:0b:31:20:7c:f4:f4:02:b2:97:36:
7a:82:58:ec:1c:71:73:ce:dc:95:68:c4:74:55:4b:
86:d1:0f:c4:b7:a7:72:24:13:e7:c2:27:15:f4:32:
e3:81:5e:00:e8:1a:ad:f9:79:75:e6:9b:62:1f:8c:
0d:ad:33:2e:61:7b:82:16:93:92:83:24:bb:e4:cf:
b0:1e:de:7d:26:9a:be:b0:7b:9e:6f:d6:5c:da:8c:
14:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:63:F6:7D:87:75:07:B8:B6:35:8B:B2:5E:4E:0B:CB:0F:39:1B:14
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:98:12:f0:1f:6d:ac:50:1f:c3:29:e3:81:cf:c4:73:48:e3:
de:ac:ae:64:75:17:60:ff:c0:f6:a8:34:5b:a5:cd:56:9c:87:
c5:22:b9:2e:0a:1d:8b:63:df:ba:8f:17:12:31:18:d1:2d:85:
47:7a:1b:31:00:31:b7:14:87:b1:91:00:90:bd:a2:65:59:87:
f2:db:f0:17:0a:c5:75:c1:e5:53:a9:c0:c0:38:39:d5:f5:8a:
7d:c5:bb:88:be:51:37:c8:77:fd:45:98:8d:b2:3d:04:92:6d:
cd:5a:78:de:68:d1:18:bf:76:e4:24:60:85:0a:aa:60:c3:72:
14:7a:48:ff:97:b7:79:8b:ac:44:61:a3:3d:04:35:93:f5:cb:
ed:32:a5:ae:1c:46:bb:88:c1:b8:a1:87:11:76:a9:97:02:9e:
af:f5:f3:94:b6:ea:b8:30:6d:3c:23:da:54:f6:fa:67:fb:95:
68:fb:ad:b7:26:c0:2f:b6:20:62:0d:aa:0a:3e:7c:cd:b7:4f:
12:05:92:a2:61:3e:48:2e:b4:29:d5:33:a7:45:c0:bc:48:b9:
76:86:99:5b:34:c7:57:35:85:16:d7:de:0f:55:d1:e0:d0:bf:
5c:a6:e7:14:d3:0a:8e:1c:79:64:82:cf:25:eb:6c:7b:85:84:
ca:9b:e4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:15:30 2025 by rpki-client