Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: qmVWh3WjP5xcu0eLf3vXsk7f3o1hZkLdJBi9QQ/01T8=
Subject key identifier: AC:44:A4:B6:BA:63:06:AF:44:F0:7C:CC:75:9E:D5:D7:11:2A:3A:30
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019849659BF5E1B6D092266C0B93C17C5F61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0B32
Signing time: Sun 27 Jul 2025 01:00:52 +0000
Manifest this update: Sun 27 Jul 2025 01:00:52 +0000
Manifest next update: Mon 28 Jul 2025 01:00:52 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: EeS+nWsp6e8WXDcl+81TcTJu7osoGs8MpO0H8IaUNA4=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:9b:f5:e1:b6:d0:92:26:6c:0b:93:c1:7c:5f:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Jul 27 01:00:52 2025 GMT
Not After : Jul 28 01:00:52 2025 GMT
Subject: CN=ac44a4b6ba6306af44f07ccc759ed5d7112a3a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4c:29:23:8c:ff:9c:fb:69:d5:d4:18:a2:77:
cc:8a:e9:34:1b:b0:0a:64:0c:f5:4e:04:0d:c6:23:
d0:ed:d7:41:96:70:be:dd:c5:6b:6e:c5:a6:a9:60:
b6:d0:d4:3f:7f:5b:6d:65:33:45:ee:16:20:36:bb:
1e:69:82:4d:95:60:93:e7:88:bd:61:01:3d:01:e5:
23:8f:a4:9c:09:c0:3d:e2:90:cd:84:0d:a4:80:0b:
9f:54:ce:2c:24:ae:9f:bc:3b:57:27:b6:56:69:8a:
f3:0e:cb:2c:bc:3b:5b:f2:11:45:7b:6c:18:f1:98:
7e:d2:f5:05:c6:26:ef:26:44:c1:9b:89:96:be:63:
f4:a3:17:35:7f:c3:24:6d:22:bc:61:d3:76:05:f9:
46:1d:46:18:b3:df:57:01:c5:94:4b:e6:18:32:15:
e6:3f:1f:03:ee:e6:a1:93:95:e6:cb:0a:5d:0c:67:
4a:30:5f:2e:a5:5b:7f:5c:29:a3:f3:ff:6d:be:91:
fe:0a:08:24:14:24:f0:4f:21:15:47:38:57:00:d4:
c8:e9:76:02:07:a3:b4:a7:20:5d:61:a5:37:7e:9d:
6f:b6:90:44:ef:ca:ca:59:59:a1:a4:5e:71:12:dd:
0b:8a:ae:62:38:89:4b:eb:89:44:0f:c7:b2:19:25:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:44:A4:B6:BA:63:06:AF:44:F0:7C:CC:75:9E:D5:D7:11:2A:3A:30
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:df:08:df:a1:f9:ca:db:81:06:42:f3:02:f3:92:51:b5:6d:
81:48:01:12:b4:99:77:b4:c4:13:79:43:47:e4:25:36:4c:49:
01:93:42:e3:73:4c:56:44:9f:73:7f:df:c7:9e:b5:81:b7:46:
1f:c4:df:d4:de:c1:9b:6a:9a:04:d8:6e:b3:b8:b7:df:fc:ef:
0f:bd:69:d2:79:cf:b6:e7:2a:01:90:f2:b8:66:b9:2e:5c:50:
79:ef:36:8c:f8:78:79:37:54:82:99:43:ff:05:f6:36:c8:43:
73:ca:8e:5a:17:c2:73:52:bf:f0:ab:26:29:5e:5f:98:21:66:
82:b5:ad:95:be:fa:bf:0d:6d:76:3d:0f:d0:37:a4:66:1c:2d:
1f:fb:a8:12:aa:36:6f:ad:2f:a5:92:db:cb:2a:bd:b2:c2:91:
49:55:83:f2:f1:82:26:23:76:2e:72:3d:40:34:11:56:e0:dd:
af:83:1b:b6:c6:78:49:38:84:f1:c1:3a:50:52:20:32:bb:a8:
df:31:06:4d:4a:12:8d:b6:7d:e4:05:3a:29:46:f2:bc:7d:23:
c8:36:da:da:e3:49:6c:ef:7c:b2:c4:dc:fa:89:e6:41:87:ff:
68:a3:11:d0:2b:52:47:e3:30:e7:ea:19:90:01:34:9a:64:ba:
54:73:6f:a7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZZv14bbQkiZsC5PBfF9hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi
NDg3YWYwHhcNMjUwNzI3MDEwMDUyWhcNMjUwNzI4MDEwMDUyWjAzMTEwLwYDVQQD
EyhhYzQ0YTRiNmJhNjMwNmFmNDRmMDdjY2M3NTllZDVkNzExMmEzYTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUwpI4z/nPtp1dQYonfMiuk0G7AK
ZAz1TgQNxiPQ7ddBlnC+3cVrbsWmqWC20NQ/f1ttZTNF7hYgNrseaYJNlWCT54i9
YQE9AeUjj6ScCcA94pDNhA2kgAufVM4sJK6fvDtXJ7ZWaYrzDsssvDtb8hFFe2wY
8Zh+0vUFxibvJkTBm4mWvmP0oxc1f8MkbSK8YdN2BflGHUYYs99XAcWUS+YYMhXm
Px8D7uahk5XmywpdDGdKMF8upVt/XCmj8/9tvpH+CggkFCTwTyEVRzhXANTI6XYC
B6O0pyBdYaU3fp1vtpBE78rKWVmhpF5xEt0Liq5iOIlL64lED8eyGSVkAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKxEpLa6YwavRPB8zHWe1dcRKjowMB8GA1UdIwQY
MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt
MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy
LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdN8I36H5
ytuBBkLzAvOSUbVtgUgBErSZd7TEE3lDR+QlNkxJAZNC43NMVkSfc3/fx561gbdG
H8Tf1N7Bm2qaBNhus7i33/zvD71p0nnPtucqAZDyuGa5LlxQee82jPh4eTdUgplD
/wX2NshDc8qOWhfCc1K/8KsmKV5fmCFmgrWtlb76vw1tdj0P0DekZhwtH/uoEqo2
b60vpZLbyyq9ssKRSVWD8vGCJiN2LnI9QDQRVuDdr4MbtsZ4STiE8cE6UFIgMruo
3zEGTUoSjbZ95AU6KUbyvH0jyDba2uNJbO98ssTc+onmQYf/aKMR0CtSR+Mw5+oZ
kAE0mmS6VHNvpw==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:44:08 2025 by rpki-client