Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: n6zPehl4KHKQokrimyAmqUMxYG8ll3dymUIgCQMSXBY=
Subject key identifier: 64:81:19:58:2C:E0:D7:37:67:E5:C2:7E:98:CF:19:54:A2:D7:B8:B0
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 01985344931E267FD722E6B08AF65692054D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 1609
Signing time: Mon 28 Jul 2025 23:00:59 +0000
Manifest this update: Mon 28 Jul 2025 23:00:59 +0000
Manifest next update: Tue 29 Jul 2025 23:00:59 +0000
Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: fbxwr6ZxiwEQOcy0YUmseomKI4tH0sy47t8WKhK/AgA=)
3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:44:93:1e:26:7f:d7:22:e6:b0:8a:f6:56:92:05:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Jul 28 23:00:59 2025 GMT
Not After : Jul 29 23:00:59 2025 GMT
Subject: CN=648119582ce0d73767e5c27e98cf1954a2d7b8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a9:ab:d6:8d:6b:60:9d:23:95:38:c8:b9:d6:
08:87:ba:de:b1:17:20:bf:dd:7c:89:71:a9:90:c8:
b5:64:5b:26:43:0d:96:92:93:94:ef:58:b4:f7:bd:
c1:4b:08:db:2a:36:1a:21:89:7f:65:de:2b:12:fd:
80:af:78:5b:b4:aa:ea:f7:ab:14:de:aa:4a:41:52:
da:b0:e2:65:10:e0:a6:b1:ad:f7:4d:f4:e9:af:05:
ac:cc:00:1e:28:d9:01:86:1f:a9:c6:ee:44:d0:ae:
a1:cd:5d:20:a6:6b:f9:3d:de:50:a0:e5:d8:b8:66:
fc:6e:e7:65:dd:69:22:72:cd:ff:41:b2:bc:58:4e:
36:8a:04:fa:d8:02:7d:39:8e:d5:67:c6:41:e0:19:
5f:ea:09:b2:5b:8b:61:9b:80:d6:ca:a8:d6:68:bc:
33:a3:b2:1e:22:ec:dd:39:6e:90:cc:ce:19:97:05:
36:1e:58:60:cb:95:57:03:5a:de:4c:23:f6:01:f1:
e7:73:eb:18:9b:dd:c5:96:25:c0:2c:a7:5e:16:84:
1f:7f:de:ac:cd:be:fc:47:5e:4b:24:fe:f9:bd:17:
85:8b:41:41:b2:3a:0d:13:13:3a:ab:e3:fb:0b:2f:
e2:82:b2:53:06:c0:79:b7:1e:0a:d2:aa:df:84:30:
81:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:81:19:58:2C:E0:D7:37:67:E5:C2:7E:98:CF:19:54:A2:D7:B8:B0
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:95:1e:3d:27:65:fc:f8:29:3c:1c:51:40:da:48:0b:25:a3:
3c:72:d4:6a:78:9c:0f:d6:e0:d2:2e:d6:21:3f:00:3e:b7:f9:
b2:94:24:e4:47:2e:d9:8b:31:d9:a2:80:11:b0:79:dd:8e:7b:
43:27:86:07:ab:e7:81:3c:e4:aa:99:f4:d9:1a:ee:e8:e9:42:
a7:7a:95:7e:87:c7:ea:0c:b0:b3:d7:43:0d:e3:ff:34:bb:bf:
79:90:26:80:b6:5e:4f:4e:48:9d:39:15:c3:34:94:b4:68:59:
f4:61:68:d4:a6:91:01:25:f3:90:d7:da:0d:a7:93:1a:6e:60:
d2:39:33:1f:66:fa:03:01:4d:e1:88:db:c4:02:ae:82:ca:73:
d6:35:34:83:ea:0b:b7:a7:b5:8c:83:6d:7e:2d:5a:cd:73:86:
d3:28:a9:85:31:83:f0:31:4b:67:96:66:67:f6:b0:25:fd:3b:
8c:24:f2:99:e2:a0:b6:f2:c8:1e:e1:e3:dc:8c:e5:a0:fb:64:
40:5e:d2:49:ff:5f:be:49:4b:90:f6:56:12:9b:1e:06:1f:27:
81:98:da:0b:a6:7a:c3:6d:f8:d7:58:ae:6c:72:33:1c:12:16:
6e:9d:11:11:c7:9a:e5:43:97:80:a8:73:62:04:ef:a0:98:12:
a0:28:6b:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTRJMeJn/XIuawivZWkgVNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjUwNzI4MjMwMDU5WhcNMjUwNzI5MjMwMDU5WjAzMTEwLwYDVQQD
Eyg2NDgxMTk1ODJjZTBkNzM3NjdlNWMyN2U5OGNmMTk1NGEyZDdiOGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qmr1o1rYJ0jlTjIudYIh7resRcg
v918iXGpkMi1ZFsmQw2WkpOU71i0973BSwjbKjYaIYl/Zd4rEv2Ar3hbtKrq96sU
3qpKQVLasOJlEOCmsa33TfTprwWszAAeKNkBhh+pxu5E0K6hzV0gpmv5Pd5QoOXY
uGb8budl3Wkics3/QbK8WE42igT62AJ9OY7VZ8ZB4Blf6gmyW4thm4DWyqjWaLwz
o7IeIuzdOW6QzM4ZlwU2Hlhgy5VXA1reTCP2AfHnc+sYm93FliXALKdeFoQff96s
zb78R15LJP75vReFi0FBsjoNExM6q+P7Cy/igrJTBsB5tx4K0qrfhDCB/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGSBGVgs4Nc3Z+XCfpjPGVSi17iwMB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUJUePSdl
/PgpPBxRQNpICyWjPHLUanicD9bg0i7WIT8APrf5spQk5Ecu2Ysx2aKAEbB53Y57
QyeGB6vngTzkqpn02Rru6OlCp3qVfofH6gyws9dDDeP/NLu/eZAmgLZeT05InTkV
wzSUtGhZ9GFo1KaRASXzkNfaDaeTGm5g0jkzH2b6AwFN4YjbxAKugspz1jU0g+oL
t6e1jINtfi1azXOG0yiphTGD8DFLZ5ZmZ/awJf07jCTymeKgtvLIHuHj3IzloPtk
QF7SSf9fvklLkPZWEpseBh8ngZjaC6Z6w23411iubHIzHBIWbp0REcea5UOXgKhz
YgTvoJgSoChrbQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:14:43 2025 by rpki-client