
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: XIppqUvQ9j3yquI+5fJkPujiLCV1Y3RHHaE8P0ltxMY=
Subject key identifier: 7C:3D:27:57:5C:BC:E2:DD:86:C7:48:57:D9:CD:C0:9D:D4:22:9C:21
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 01984A413BC6A8507C2B155FE7B6119516D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 0F97
Signing time: Sun 27 Jul 2025 05:00:45 +0000
Manifest this update: Sun 27 Jul 2025 05:00:45 +0000
Manifest next update: Mon 28 Jul 2025 05:00:45 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: fgx1Tq6uy6J6c7KKxeyP72JDHdHDziQXpRyIke/Z69w=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:3b:c6:a8:50:7c:2b:15:5f:e7:b6:11:95:16:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Jul 27 05:00:45 2025 GMT
Not After : Jul 28 05:00:45 2025 GMT
Subject: CN=7c3d27575cbce2dd86c74857d9cdc09dd4229c21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4b:e5:b9:42:33:77:6b:db:da:e3:63:60:f7:
fb:70:f2:bd:8e:fd:27:60:27:be:ce:b4:34:c1:35:
1f:e5:46:af:12:87:fc:61:e2:98:70:e5:67:5f:72:
69:4e:09:a7:a9:20:72:20:e5:c9:df:8b:69:d7:54:
a7:fd:3c:08:3a:7f:95:57:7e:99:8a:36:3f:08:04:
b8:24:64:cd:f3:d5:18:05:68:68:33:be:09:d0:d2:
c4:45:27:01:c8:8e:5c:09:42:c7:f6:e6:bf:ed:0a:
db:ac:c1:f9:22:9e:04:2c:07:5c:01:66:3c:c5:db:
f5:ae:6e:d4:0e:74:0b:f2:d7:57:6f:01:b8:24:cd:
12:80:26:f2:db:b7:b4:4c:e0:6b:88:71:13:00:e2:
3f:28:6a:c9:83:27:9c:be:19:78:5c:31:b0:e8:17:
38:6f:ac:f9:d6:8e:28:e9:e4:15:eb:c0:c6:a3:fd:
30:b4:da:c5:30:d3:c8:9a:d0:9e:0e:2d:c1:fe:f7:
45:bf:c8:43:b0:71:cc:95:43:a4:cf:0a:35:c2:ac:
a1:01:09:b3:48:8f:9e:1c:a6:3c:19:c6:6f:57:f5:
e7:45:8c:a2:17:f2:32:e9:7f:34:b9:06:28:b9:be:
38:a2:8f:80:c5:62:38:c9:57:7d:8e:89:dd:3d:ff:
65:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:27:57:5C:BC:E2:DD:86:C7:48:57:D9:CD:C0:9D:D4:22:9C:21
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:75:5c:69:73:3e:b3:3a:8f:31:af:f1:80:1f:8a:b0:08:68:
f8:99:01:7c:1e:c6:15:d7:b6:00:93:8c:e1:ea:08:9d:d7:8d:
3d:f3:84:fd:d9:33:b2:35:ae:fb:28:d0:1b:26:8a:78:74:ef:
1a:32:63:03:0a:9b:aa:47:78:ae:b7:c6:1d:0c:ab:02:15:41:
f3:22:b3:92:97:a7:8e:9f:3d:f6:9f:a2:b1:5a:23:e1:b7:f3:
c2:31:59:20:76:cf:78:62:04:81:07:ea:fa:b2:39:9f:be:21:
4e:bc:37:af:d0:89:f1:71:1c:b3:ea:e6:43:8d:c8:b3:a9:57:
ca:4e:c3:ab:84:34:e6:ff:3c:05:bc:1c:5a:f5:ce:df:80:4e:
a1:fa:25:95:8b:f5:6d:cc:fc:b5:fb:7c:c6:68:70:e1:47:8a:
5e:bc:23:91:29:6b:e8:10:ce:8e:d4:94:21:76:69:c3:a0:a8:
cc:03:8d:9f:bf:c1:80:15:3d:8c:0c:fa:19:26:7d:b7:1b:6c:
ed:93:0c:90:db:7c:9c:92:85:3e:a4:ac:db:93:11:e6:86:6e:
97:bb:26:db:b8:40:20:78:46:07:1d:d3:98:bf:c7:08:ea:33:
9c:cb:00:7b:e4:df:03:ae:5e:71:d0:fe:1e:b5:ff:84:77:27:
ad:3e:5b:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:42:48 2025 by rpki-client