Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
File: AKhWpBc4la9EuP00RVRppcTWFzs.mft (raw, json)
Hash identifier: 30NLBgZ79LjyJHMh89NDargH1WjSgs8kZFX9p/b9m0U=
Subject key identifier: AF:A5:77:DF:4C:D8:39:01:D7:50:99:92:3E:7E:24:B9:FD:0F:28:95
Authority key identifier: 00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
Certificate issuer: /CN=00a856a4173895af44b8fd34455469a5c4d6173b
Certificate serial: 019A533E9C1C684B92FA981B6AC2D4935ECC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
Manifest number: 0254
Signing time: Wed 05 Nov 2025 09:00:03 +0000
Manifest this update: Wed 05 Nov 2025 09:00:03 +0000
Manifest next update: Thu 06 Nov 2025 09:00:03 +0000
Files and hashes: 1: 4mezRfHPXPaCo28qoJyolX64C48.roa (hash: QHUvtDK2DiCjdwwLpsM73EoVrUrKJFVkLwmkkTWUE3k=)
2: AKhWpBc4la9EuP00RVRppcTWFzs.crl (hash: mFnso3BWFsmr3Lrjc2Nhne2oAQNwJ1oOljYc53Y/fIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:53:3e:9c:1c:68:4b:92:fa:98:1b:6a:c2:d4:93:5e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00a856a4173895af44b8fd34455469a5c4d6173b
Validity
Not Before: Nov 5 09:00:03 2025 GMT
Not After : Nov 6 09:00:03 2025 GMT
Subject: CN=afa577df4cd83901d75099923e7e24b9fd0f2895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f0:0d:d5:99:eb:fb:7b:c5:f4:44:9c:cb:4e:
8c:85:f1:29:a6:69:8f:d4:40:ae:8e:d4:85:d0:d8:
04:d1:c8:ce:44:c1:ff:ba:eb:1f:3d:3a:70:9c:3f:
e4:4b:1f:fc:42:d4:bf:41:ab:d4:42:fe:e0:d2:12:
8a:49:42:bd:ca:df:2f:1c:25:c9:56:31:1c:e6:94:
e5:83:6e:f9:69:22:7e:6d:3b:2a:68:12:13:64:04:
7a:d0:82:1c:61:e8:8f:68:64:8d:3b:10:92:98:25:
77:02:4b:da:f7:73:3a:63:d4:be:d6:e9:58:e5:47:
45:35:13:0c:d6:d7:82:26:a4:8e:e3:2f:19:6f:35:
f3:1c:66:26:5f:e1:f9:3b:16:89:3a:84:93:b5:23:
ee:59:2d:b7:6c:fe:fe:b5:1d:3a:ed:8b:ec:5d:76:
56:af:ff:6c:5a:e2:97:b9:e2:51:2c:6c:95:83:74:
e5:46:4e:24:5e:aa:c9:7c:9c:ef:1c:6e:06:ea:04:
c7:14:8c:5d:d8:45:54:d4:f1:80:f7:57:26:86:5b:
9b:a9:8b:7f:aa:ea:e9:9d:15:c7:02:9e:f7:65:62:
9b:98:2b:17:e1:89:78:d7:e9:83:54:42:f4:fc:ba:
10:d7:0c:aa:36:db:06:73:32:d1:18:17:67:23:02:
5d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:A5:77:DF:4C:D8:39:01:D7:50:99:92:3E:7E:24:B9:FD:0F:28:95
X509v3 Authority Key Identifier:
keyid:00:A8:56:A4:17:38:95:AF:44:B8:FD:34:45:54:69:A5:C4:D6:17:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AKhWpBc4la9EuP00RVRppcTWFzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6b7512-92ca-49f9-9870-cb9e7ddad189/1/AKhWpBc4la9EuP00RVRppcTWFzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:15:4e:f0:18:dc:76:cd:86:64:68:71:24:3e:22:a8:1b:55:
fc:ce:d1:87:2b:5c:b3:dc:25:49:29:a3:a3:99:31:1a:c9:9f:
c6:5a:56:57:89:bf:1e:7b:7b:b8:4b:2f:44:ed:60:df:33:29:
21:81:b5:da:a8:ce:9c:83:b1:6d:dd:30:e9:eb:1e:cc:e8:75:
1e:02:63:1d:26:ed:5a:7b:cb:9f:3a:61:e5:98:43:27:15:a6:
9b:3e:04:c1:17:8b:52:97:dc:c3:72:9d:33:e3:d1:a3:1d:83:
b2:f9:26:94:bc:30:1d:dc:f1:f0:73:ae:d5:75:57:43:ea:4b:
63:eb:4c:4f:51:8e:b3:64:01:5c:44:fc:6c:b9:62:b8:79:96:
d3:72:24:d1:43:ce:69:af:cc:08:c4:bb:07:d7:02:29:3c:7b:
8a:2e:81:51:6e:b0:13:da:12:17:d5:07:14:50:6d:ef:ee:2c:
ce:24:8a:17:0a:19:cc:8a:8b:ee:44:39:74:76:91:c0:f3:fe:
67:74:24:a0:a8:63:00:20:63:93:d4:91:54:93:a5:e0:94:52:
df:3d:3c:f0:4a:d0:c6:8b:99:89:da:93:1c:7a:c9:5d:a1:39:
f6:d9:c4:2e:9c:9d:a9:8a:e9:34:9e:eb:96:9c:ff:a9:2d:97:
10:d7:06:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 14:36:04 2025 by rpki-client