Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: bmXXq1s76fh8GraLYHE4hy4ti06QQebMkC5wNeHKtMI=
Subject key identifier: 5F:40:87:7D:4C:6B:B4:57:D9:D5:C2:BB:F5:C2:45:73:20:37:3B:F2
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019844E3A5675793AD13ACDD6AB46F782683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0242
Signing time: Sat 26 Jul 2025 04:00:26 +0000
Manifest this update: Sat 26 Jul 2025 04:00:26 +0000
Manifest next update: Sun 27 Jul 2025 04:00:26 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: MSOvEhH7IoLkGOyeGzfpMwEPgv+6yxfgj12inVOZI1o=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:a5:67:57:93:ad:13:ac:dd:6a:b4:6f:78:26:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Jul 26 04:00:26 2025 GMT
Not After : Jul 27 04:00:26 2025 GMT
Subject: CN=5f40877d4c6bb457d9d5c2bbf5c2457320373bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f8:ae:47:00:06:4a:77:ac:43:de:d8:08:29:
88:30:d2:de:77:f1:71:07:12:1d:b0:5e:68:b3:0a:
57:e1:78:a1:ab:63:c8:50:c3:99:2f:25:62:44:e2:
8f:dc:d9:50:a1:3e:6e:9f:93:90:14:b6:f6:f6:ef:
a2:e1:77:04:e0:df:62:47:66:45:38:d7:2d:c8:ec:
74:55:4e:15:3c:db:81:32:c9:05:b5:fd:d8:47:ec:
1a:ee:c0:07:87:b2:00:11:9b:2a:2a:a9:5e:1d:22:
24:a9:02:89:1c:f6:7b:a3:91:19:6e:bd:64:b4:2a:
f7:ec:0e:57:ba:28:25:35:a8:c6:76:52:ca:2a:b7:
26:ec:84:37:0f:1e:a9:5d:73:e7:3f:e3:d6:61:d5:
1a:1d:1c:2b:1c:a5:82:26:89:d3:6b:33:59:77:ed:
ba:f9:81:d4:bd:3d:b0:2a:92:f3:20:cd:53:a8:28:
c0:fd:36:9b:69:a8:0c:c9:35:28:46:74:16:a9:7f:
c8:bc:77:3b:04:38:e6:5c:bc:6b:9e:5a:a9:ba:bb:
46:8f:5e:32:71:2c:03:66:b9:3d:eb:8e:3c:9c:ae:
1f:3d:fa:f8:34:46:51:8e:4f:5e:fe:c6:80:17:2d:
b5:9a:44:9e:22:bc:fd:4e:82:94:b3:42:c7:73:39:
aa:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:40:87:7D:4C:6B:B4:57:D9:D5:C2:BB:F5:C2:45:73:20:37:3B:F2
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:f8:c3:b4:12:1a:fd:f1:00:4a:5b:d1:ee:9b:92:05:ba:91:
a6:ab:67:0f:29:cc:c9:38:f7:ea:0a:03:1f:55:fa:df:02:8e:
da:8b:d0:d0:43:5e:33:4d:ed:07:39:0e:89:db:00:08:ad:71:
f9:7f:a1:d2:b7:b1:fe:4f:de:4f:69:cf:5f:79:a3:b6:24:d5:
fc:cf:7b:72:f4:2e:45:95:46:3a:99:3d:b1:ac:41:18:11:97:
10:83:69:aa:3d:93:8a:8e:48:2d:e5:e8:c0:b1:3d:75:51:1d:
9d:22:61:3b:df:77:fc:c5:b8:91:cf:3d:9a:a9:1a:1d:1b:41:
7c:17:9c:76:be:b2:60:39:dd:22:e3:1d:ec:33:30:59:a5:2f:
e6:91:be:8b:a3:24:4b:80:92:8a:4d:c6:c5:56:a6:c0:e9:fd:
e0:d6:8e:c3:b0:4b:86:7d:49:92:17:b9:56:48:96:1b:7b:64:
bc:fd:20:1a:91:52:98:33:91:09:d6:ee:6b:05:af:4e:8e:3a:
72:28:99:4e:e3:ff:d8:52:d7:fa:ef:18:9a:8c:69:7f:8e:cb:
d2:51:b6:22:64:5d:d5:7f:f1:ac:3c:7a:b9:1c:48:67:ac:4c:
57:8b:83:3e:cb:a7:11:be:b2:80:15:99:fc:18:da:19:81:f8:
33:87:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 08:21:05 2025 by rpki-client