Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: SC4vcajoVM4nnHbcxizA8Zv3zZiXh8Aq2lhxO+qRZqk=
Subject key identifier: F1:9E:64:10:15:7D:80:3C:2C:70:D4:75:ED:69:AD:A2:5B:38:87:18
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 01974666CE6DAAB506D8C6D0083969D11C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0AAC
Signing time: Fri 06 Jun 2025 18:00:31 +0000
Manifest this update: Fri 06 Jun 2025 18:00:31 +0000
Manifest next update: Sat 07 Jun 2025 18:00:31 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: 41XfNvy58SrfMoh3v6TQ05OG6Pqq1/vyYHuccDAK98Q=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:ce:6d:aa:b5:06:d8:c6:d0:08:39:69:d1:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Jun 6 18:00:31 2025 GMT
Not After : Jun 7 18:00:31 2025 GMT
Subject: CN=f19e6410157d803c2c70d475ed69ada25b388718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:05:df:1d:06:9c:93:cb:06:e1:18:0c:7f:b4:
a8:d4:71:b1:8f:95:aa:93:d1:e4:22:ad:f5:ae:94:
f6:bc:3e:60:9c:a6:6b:e0:15:c7:6b:87:09:99:38:
b0:2f:5c:3f:da:01:a2:5e:b1:35:6c:92:10:77:bb:
19:c1:3c:98:9b:4d:2c:5e:3a:2b:07:e3:36:53:30:
d2:ab:c3:ef:35:4b:e9:d0:38:9a:88:3f:f3:19:36:
d3:19:70:e8:fc:41:3a:10:b9:83:9d:03:57:86:e0:
06:ff:47:5d:71:68:a3:08:ff:7a:83:e0:1a:e5:69:
e5:fd:53:1c:c5:26:5b:7d:c7:35:0b:8b:d8:54:c8:
1d:45:96:d0:0c:88:5d:1f:7f:e4:4c:c2:10:c8:df:
24:7e:d0:f5:3e:33:21:b5:c9:7d:34:68:0a:8b:56:
0f:5f:25:32:35:8e:d1:90:c7:2d:8c:e9:aa:9b:c5:
d2:b9:b4:01:0c:3d:da:77:fb:4c:08:a8:5b:53:d8:
77:55:c4:49:4e:61:b4:68:3d:c2:6b:e8:26:23:88:
49:09:85:5d:e1:41:14:47:31:d9:00:40:0b:22:e4:
1b:a7:bb:2e:f7:6c:b8:07:46:6c:fc:c8:fc:f2:f3:
99:68:48:03:ed:d2:22:91:ca:18:bd:6b:17:d0:c6:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:9E:64:10:15:7D:80:3C:2C:70:D4:75:ED:69:AD:A2:5B:38:87:18
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:99:66:58:8c:3f:a5:31:8d:69:f7:d4:47:79:6f:e0:4d:c2:
a9:4f:bf:51:51:87:04:bc:a6:70:44:bf:ef:d3:8f:8d:f4:45:
93:07:a7:4f:a3:4d:e1:94:70:52:a4:17:ac:a3:1f:21:81:ec:
25:29:c5:4c:9e:d5:ff:5e:fd:e8:10:b2:ab:49:8a:2c:b2:ba:
06:9c:95:2d:c7:7a:87:12:c2:93:73:1a:1f:91:67:17:6e:20:
86:6d:d0:d9:49:f5:34:a0:46:9e:98:42:af:83:12:a2:6b:e0:
30:f5:67:10:15:d8:f6:56:c2:1f:1f:8a:36:ab:c3:c7:b0:7f:
7d:67:b9:7d:77:44:66:ab:5a:6c:aa:30:70:d2:0d:f3:1b:89:
d6:0f:fd:3a:b8:d9:51:25:8a:3b:ba:ac:6c:50:f0:d9:dd:bc:
82:db:72:a7:5f:a7:ec:82:1e:9c:b1:17:ac:59:8b:27:b5:51:
ed:79:e9:12:66:96:5f:07:17:89:9b:c1:d6:4a:52:48:9a:db:
90:11:1a:d2:68:4e:09:e9:06:55:60:23:df:48:3c:73:d1:f6:
41:47:25:b6:00:a5:32:63:6f:28:4b:4c:a6:7a:d2:fe:7a:bf:
e9:d8:b7:a2:95:59:68:cb:f3:53:cf:13:d1:c1:43:f6:f1:8a:
78:75:c1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:31 2025 by rpki-client