Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: 8EHd3Hf2jeGA9bkA6OusGpu5+dRATqicLj3ru/6rtpI=
Subject key identifier: 2D:49:E0:F3:B3:31:43:86:69:BE:6E:47:F9:A0:7C:65:5A:96:2C:C9
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 019A4E18E1BE97FAC7325B8CEEFD281065D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 1735
Signing time: Tue 04 Nov 2025 09:00:44 +0000
Manifest this update: Tue 04 Nov 2025 09:00:44 +0000
Manifest next update: Wed 05 Nov 2025 09:00:44 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: 9C/rbMCgTh5BwiVOmyamJrnHhqtU+AaogJ0y0XLp1q8=)
2: gw967_dPAMH6gIdHYPFkGYPMwNU.roa (hash: Z4TTdvly+MNjzEWd9PDkISqkzcOcaRd52bCsHo8zj5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:18:e1:be:97:fa:c7:32:5b:8c:ee:fd:28:10:65:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Nov 4 09:00:44 2025 GMT
Not After : Nov 5 09:00:44 2025 GMT
Subject: CN=2d49e0f3b331438669be6e47f9a07c655a962cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:b8:60:50:4a:25:24:87:5b:81:66:bd:53:
78:c6:f9:96:12:a6:1c:89:00:9e:fa:b2:89:c1:6c:
2f:0e:2e:5d:37:ba:ec:54:8f:7e:35:e7:2f:8c:ef:
2d:53:60:f1:56:4b:e1:07:46:d8:9b:d0:cb:da:5d:
b0:e3:e6:95:06:91:d7:37:d0:c0:76:2d:71:1a:89:
d4:5e:a1:ac:f6:45:4f:bb:dc:5b:62:5f:1d:b2:ed:
4f:8e:6c:6a:0d:10:77:ad:cc:38:7e:5c:f2:58:26:
bb:1f:ad:e4:84:e3:66:1f:ed:8d:06:09:05:88:95:
18:34:03:43:c5:5c:6c:69:5f:f1:37:4c:fe:b0:aa:
8d:33:f5:ef:c5:93:8f:b9:48:c7:32:28:e2:d5:28:
91:6b:d3:df:61:90:3a:0d:01:c7:67:a9:16:8f:57:
7e:83:06:d1:fe:6e:66:21:d5:31:b8:d6:54:5c:71:
77:65:26:26:4e:ba:4e:8c:72:85:31:f1:df:ac:33:
bc:72:d3:d0:0f:3e:f4:ef:62:ea:4c:bd:fa:8b:77:
05:54:a9:15:a3:80:a8:91:02:89:9a:6b:45:d9:6b:
e9:be:de:1a:16:f7:a5:26:a8:48:9f:cf:b6:e6:22:
6e:99:d2:d2:b1:3c:37:d2:2f:5c:ab:fa:d5:d5:33:
47:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:E0:F3:B3:31:43:86:69:BE:6E:47:F9:A0:7C:65:5A:96:2C:C9
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1b:01:00:db:fb:ff:43:25:6d:dc:24:ce:95:4e:fb:c2:78:
c3:a1:d5:e7:99:82:aa:4f:06:0d:0f:99:cf:6a:67:25:ff:28:
d3:1b:54:8e:3c:fb:df:dd:83:11:36:b0:19:c9:2f:ee:92:64:
f3:d9:1d:33:11:0f:f2:55:e2:bd:3c:2b:b8:1f:fb:0a:0c:19:
06:7a:43:4c:2b:01:b8:ae:90:ab:95:d0:ce:d4:a2:54:32:b6:
05:31:88:c2:15:9d:87:c5:9d:40:e7:0b:91:83:df:49:30:42:
74:92:e2:96:b0:c6:58:a4:95:fb:74:8e:3c:ae:e4:27:ac:37:
58:a9:9d:a8:d9:ab:eb:86:f0:1a:c5:2d:7a:b3:48:53:29:d4:
b8:21:05:e2:76:b1:86:7a:61:7c:9e:27:8b:c0:b6:97:1e:36:
ab:42:0c:ac:08:38:99:af:ff:79:95:45:03:e1:9f:d4:6a:b2:
31:0a:f9:a9:21:3e:c7:0a:a3:ff:c1:5f:f3:2d:07:f7:92:b2:
16:ec:03:9e:44:24:eb:3a:cd:db:0a:0e:8e:fe:8b:72:cd:22:
4a:df:0d:95:99:d0:27:2f:f2:48:89:d7:b8:36:5b:a4:7a:4d:
54:b6:08:1a:c7:c2:e2:09:00:fc:c3:01:bf:38:13:a1:1a:97:
fc:2b:51:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 10:52:14 2025 by rpki-client