Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: M7VIRhK+Hq53v/MiK4b4WLjuhBnrPtHphAC6WkMLF7Q=
Subject key identifier: 91:7A:2D:E9:DD:04:79:16:E6:35:EC:3B:3C:E5:B2:6A:6D:33:F2:F4
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 01984AAE903971361073DFAE52915B28A09F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 10AD
Signing time: Sun 27 Jul 2025 07:00:10 +0000
Manifest this update: Sun 27 Jul 2025 07:00:10 +0000
Manifest next update: Mon 28 Jul 2025 07:00:10 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: TFXmpiD2Y0e8xwsG0NVGU3u/Ix67x+lNjfybzG0Ub/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:90:39:71:36:10:73:df:ae:52:91:5b:28:a0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Jul 27 07:00:10 2025 GMT
Not After : Jul 28 07:00:10 2025 GMT
Subject: CN=917a2de9dd047916e635ec3b3ce5b26a6d33f2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:bb:31:ff:c3:6d:fc:96:a8:8e:ed:a1:6c:9e:
b7:c4:5c:61:d1:45:67:0a:bd:43:44:5a:0d:fc:95:
14:2d:6c:f6:3a:19:5a:3a:9c:25:59:be:4a:a3:ce:
40:0b:ce:79:ff:e0:97:64:e7:53:35:3d:28:ff:5f:
90:c1:d5:cc:79:df:ad:c1:56:5f:43:b1:40:ed:be:
15:89:0d:78:b0:27:f5:42:26:84:c7:85:c9:a2:65:
b5:4b:8f:49:3a:04:f1:e6:d6:d0:06:17:d6:77:bb:
c4:b9:a1:93:d7:c7:33:dd:ec:70:f4:06:58:cc:64:
38:e6:85:62:b9:ab:7b:3f:7e:7c:89:79:fd:c3:39:
78:e2:1a:e9:cb:f5:8c:fa:43:ae:ae:da:12:1c:48:
ac:89:9d:45:5c:d2:9c:bd:07:e1:fa:29:6c:f2:31:
c1:89:ec:bb:91:b7:0c:ee:bc:bc:ad:ed:06:00:0b:
a9:3f:c6:9a:c4:e2:8d:df:03:44:3d:78:0b:b2:94:
4c:b3:03:d3:5a:1f:4f:bc:87:25:92:3b:36:bb:06:
6e:7e:e8:21:cb:b7:76:a0:43:11:c0:16:a8:f5:dc:
06:de:f7:b2:3c:63:21:d8:eb:1e:88:da:69:2d:b6:
cb:4c:a5:d3:ee:c9:5b:5c:67:57:dd:f0:73:88:ee:
14:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7A:2D:E9:DD:04:79:16:E6:35:EC:3B:3C:E5:B2:6A:6D:33:F2:F4
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:1a:ee:76:b6:13:9e:3e:e7:60:41:3e:73:6a:09:3d:f4:cf:
de:7f:5d:5d:84:92:35:4e:20:54:ef:7a:d3:c7:33:f0:95:ed:
02:cb:24:9b:db:9c:0d:35:b1:97:3f:57:d5:cc:0e:0b:1c:43:
21:9c:8e:25:65:a9:96:95:45:f3:96:2c:51:1a:0c:ac:3c:c2:
5f:9d:bb:b2:0a:39:bd:ca:c3:15:ad:d5:e5:03:bf:ad:fb:86:
9a:c5:72:3d:53:39:a3:b2:28:99:74:52:28:45:db:f5:81:aa:
39:24:ee:9e:29:85:e6:21:f3:87:6b:fe:65:e8:c3:eb:1a:ef:
6c:4f:92:a1:84:3d:fe:3f:25:62:0d:ba:25:81:ab:5f:a9:49:
d5:38:d4:fd:20:b8:ab:70:de:8d:2f:f3:aa:d5:7f:57:40:3f:
44:83:0f:00:6c:f6:0a:9d:ab:02:5e:b1:8e:83:ea:71:f6:6e:
46:08:64:94:d8:36:61:09:78:48:2c:66:53:2b:f0:0f:e5:58:
ca:5e:ad:37:2b:25:69:cc:74:95:ff:4b:88:fd:a5:a8:3e:ce:
3f:b4:3a:aa:a3:42:2e:5a:3b:19:08:92:c4:69:93:b4:a8:c1:
70:d7:32:4b:02:c2:0f:07:37:b5:75:8c:db:f6:c8:2f:28:30:
17:86:7b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:24:06 2025 by rpki-client