Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: cstS+2H3KHSfzCvJ3ViSKoLzErZj4P2tjFn7QQgwB7k=
Subject key identifier: 4D:2A:B2:90:72:8E:B2:A0:07:52:17:02:32:D6:2D:78:07:43:5F:EE
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019A1AD0189C0E6109C2B1BAE7DC1663C225
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0C23
Signing time: Sat 25 Oct 2025 10:00:36 +0000
Manifest this update: Sat 25 Oct 2025 10:00:36 +0000
Manifest next update: Sun 26 Oct 2025 10:00:36 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: v1yH2oVoeKZYxYnkjcsp9cGMjO3bCkUulCEWpm680qY=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 Oct 2025 08:33:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:1a:d0:18:9c:0e:61:09:c2:b1:ba:e7:dc:16:63:c2:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Oct 25 10:00:36 2025 GMT
Not After : Oct 26 10:00:36 2025 GMT
Subject: CN=4d2ab290728eb2a00752170232d62d7807435fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1f:d7:5f:11:48:ae:87:1f:30:4e:a7:ca:39:
05:a5:92:76:d1:99:ff:33:31:f5:68:5d:1f:31:f3:
f1:0d:18:92:ad:57:83:ee:5f:0f:2b:0e:f4:5b:c6:
92:bf:3c:fe:74:e8:04:64:23:81:13:90:1f:2e:92:
eb:4f:fd:3a:7c:2c:09:5e:17:73:61:ca:67:84:f4:
d0:12:90:76:36:3d:0e:59:48:bf:ed:90:ac:55:f2:
65:02:d0:17:46:cc:cf:c3:0e:00:51:77:53:ac:55:
fe:01:a7:b8:62:47:df:dd:80:5d:36:0a:d1:32:40:
b6:ea:ec:59:a9:37:57:26:c5:04:32:aa:7f:93:2f:
49:4c:17:c3:4c:25:c2:80:8b:3d:1d:81:ce:43:e5:
4c:fa:fb:70:99:d9:96:9a:0a:40:03:5c:7f:d6:e6:
c1:6a:e7:f7:80:e3:cc:be:01:ad:0a:ee:bc:58:dc:
18:97:3a:34:31:21:ff:c3:f7:5c:f3:7e:32:f9:a9:
ff:9f:ca:c2:22:85:00:10:f7:d7:29:14:f6:cf:59:
1e:9e:06:77:76:ab:7f:c6:a1:fe:18:60:29:80:04:
a5:20:d9:1c:14:f2:f8:f3:2a:ba:4e:e6:68:b5:94:
7c:30:54:8f:7d:bd:d6:d9:01:85:ab:67:df:18:3d:
49:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2A:B2:90:72:8E:B2:A0:07:52:17:02:32:D6:2D:78:07:43:5F:EE
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:4b:c3:24:98:b5:7f:fc:37:c1:7b:fc:19:83:4c:a4:29:d0:
a9:43:a6:c7:84:65:66:0d:56:fd:ff:85:e8:30:a1:81:01:3c:
5b:9e:02:f1:8d:1f:0e:aa:53:fa:60:e8:fe:d1:13:5b:7d:33:
ed:dd:fb:da:24:08:e1:51:4d:d0:23:12:17:c4:ab:c5:6a:e4:
dd:d4:e8:57:0c:e4:dc:cd:42:59:25:6e:44:f8:92:06:ed:9c:
ba:cd:39:3d:57:00:c8:3e:9e:6e:48:40:15:ba:2e:a4:76:16:
2b:20:7f:65:7b:be:bc:f4:2c:12:86:38:13:15:3e:d0:4b:3d:
ad:8c:0e:4e:c6:cf:06:cc:34:03:40:7a:79:df:b8:6e:6e:22:
11:be:6c:e1:00:70:7e:3f:51:71:a5:3a:83:93:c6:d9:17:9a:
5e:02:73:0b:5b:73:f6:ee:26:54:97:fe:56:47:f7:3a:2f:97:
5e:f3:ab:a0:d9:ca:a4:ae:64:10:40:e4:6e:62:0b:d0:d5:ce:
4b:97:d3:53:da:99:0d:53:08:b1:7e:8d:b1:53:4f:40:d8:ec:
31:fe:f2:2f:89:a9:bd:ef:ae:cf:84:ee:42:c7:2f:33:47:25:
4f:5e:13:36:28:dc:e7:dd:da:4a:d5:a1:96:76:86:77:5d:a5:
e9:cf:1a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZoa0BicDmEJwrG659wWY8IlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMjRiMWYxMzU5MTEwYmZmOTkxZTlhYzZmNTE0NjlmZGNi
NDg3YWYwHhcNMjUxMDI1MTAwMDM2WhcNMjUxMDI2MTAwMDM2WjAzMTEwLwYDVQQD
Eyg0ZDJhYjI5MDcyOGViMmEwMDc1MjE3MDIzMmQ2MmQ3ODA3NDM1ZmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5B/XXxFIrocfME6nyjkFpZJ20Zn/
MzH1aF0fMfPxDRiSrVeD7l8PKw70W8aSvzz+dOgEZCOBE5AfLpLrT/06fCwJXhdz
YcpnhPTQEpB2Nj0OWUi/7ZCsVfJlAtAXRszPww4AUXdTrFX+Aae4Ykff3YBdNgrR
MkC26uxZqTdXJsUEMqp/ky9JTBfDTCXCgIs9HYHOQ+VM+vtwmdmWmgpAA1x/1ubB
auf3gOPMvgGtCu68WNwYlzo0MSH/w/dc834y+an/n8rCIoUAEPfXKRT2z1kengZ3
dqt/xqH+GGApgASlINkcFPL48yq6TuZotZR8MFSPfb3W2QGFq2ffGD1J9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE0qspByjrKgB1IXAjLWLXgHQ1/uMB8GA1UdIwQY
MBaAFAAksfE1kRC/+ZHprG9RRp/ctIevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUt
MmRhNjI1ZWI3MjQyLzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9iNTk3YzQtNmEzMi00MDA4LWIyZWUtMmRhNjI1ZWI3MjQy
LzEvQUNTeDhUV1JFTF81a2Vtc2IxRkduOXkwaDY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHEvDJJi1
f/w3wXv8GYNMpCnQqUOmx4RlZg1W/f+F6DChgQE8W54C8Y0fDqpT+mDo/tETW30z
7d372iQI4VFN0CMSF8SrxWrk3dToVwzk3M1CWSVuRPiSBu2cus05PVcAyD6ebkhA
FboupHYWKyB/ZXu+vPQsEoY4ExU+0Es9rYwOTsbPBsw0A0B6ed+4bm4iEb5s4QBw
fj9RcaU6g5PG2ReaXgJzC1tz9u4mVJf+Vkf3Oi+XXvOroNnKpK5kEEDkbmIL0NXO
S5fTU9qZDVMIsX6NsVNPQNjsMf7yL4mpve+uz4TuQscvM0clT14TNijc593aStWh
lnaGd12l6c8aEA==
-----END CERTIFICATE-----
Generated at Sat Oct 25 15:21:22 2025 by rpki-client