Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
File: AcOKBqObILjaQACSN9dqzdKOcaU.mft (raw, json)
Hash identifier: +Y7fSZ9v7e+Z6sdMbDyRcsYwK5Zj80kNqP30HuwDhpM=
Subject key identifier: CF:95:1F:2D:7D:15:8E:68:69:A8:88:0A:31:09:3C:92:4C:76:DA:7F
Authority key identifier: 01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
Certificate issuer: /CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Certificate serial: 0199228D0FA8B385BD8986EA15CCC00CC052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
Manifest number: 1697
Signing time: Sun 07 Sep 2025 05:01:33 +0000
Manifest this update: Sun 07 Sep 2025 05:01:33 +0000
Manifest next update: Mon 08 Sep 2025 05:01:33 +0000
Files and hashes: 1: AcOKBqObILjaQACSN9dqzdKOcaU.crl (hash: SVHoMPCD/91oqaQ/r/1Kpb41qBpbIsZIiJMi5FNcGGM=)
2: DLqkJtVUmV3t_NSFK9gSKIls7d0.roa (hash: mC4NzL71O1LVPsjh1kWalWyRrj4+h6csfx67YmiitPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:0f:a8:b3:85:bd:89:86:ea:15:cc:c0:0c:c0:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c38a06a39b20b8da40009237d76acdd28e71a5
Validity
Not Before: Sep 7 05:01:33 2025 GMT
Not After : Sep 8 05:01:33 2025 GMT
Subject: CN=cf951f2d7d158e6869a8880a31093c924c76da7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:0c:1b:00:7b:4b:ed:e7:e5:dd:82:92:d7:
3b:c9:59:07:f7:4f:ea:40:d4:d8:a7:fd:99:16:5c:
2e:2d:b6:ea:8d:92:33:b3:f9:a4:cd:74:4c:29:72:
3c:a5:a4:63:a4:1a:b1:5d:fa:9a:6d:62:cd:09:d7:
ca:5d:db:2d:47:d9:34:d8:5d:a8:d5:30:fd:a7:62:
1a:3c:c2:3f:1d:93:30:c0:1b:d8:de:c1:ef:5a:77:
d3:30:85:2b:2b:d7:de:ec:7d:67:b5:49:3d:b6:05:
91:32:ef:4c:10:61:e3:73:0c:87:07:77:da:ee:c2:
ce:37:ca:b1:1b:22:2f:8d:13:e6:3d:d4:8c:04:dc:
3e:83:54:5b:0b:3e:84:06:71:2d:23:36:6c:e7:e7:
74:27:66:0d:ec:fc:83:21:7f:1c:fa:64:a7:50:0c:
16:ef:e0:0a:d0:4a:89:3a:05:6f:f1:ed:4b:b1:7d:
e8:20:67:d2:8f:8e:14:63:1f:99:4d:c2:3b:e4:94:
9c:f5:f0:fc:fd:05:f8:48:6a:ca:9c:09:bb:3c:f0:
e3:b2:46:8a:f0:25:c3:32:40:ac:27:83:41:f2:e1:
ef:73:c9:82:a5:33:bf:e8:8e:a5:0e:ce:cd:c4:88:
46:18:23:fa:45:ea:a2:ef:34:85:ac:82:4f:ee:11:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:1F:2D:7D:15:8E:68:69:A8:88:0A:31:09:3C:92:4C:76:DA:7F
X509v3 Authority Key Identifier:
keyid:01:C3:8A:06:A3:9B:20:B8:DA:40:00:92:37:D7:6A:CD:D2:8E:71:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcOKBqObILjaQACSN9dqzdKOcaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/6a8e5e-39b6-47e3-bbb0-b29f10cc0328/1/AcOKBqObILjaQACSN9dqzdKOcaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:b5:42:e7:b5:22:44:b8:b2:ba:d3:f7:b9:f7:4a:c2:06:87:
ca:d8:a8:cf:50:56:a3:0e:0a:d6:39:b1:77:5c:1d:dc:18:53:
4a:da:23:a7:96:a5:77:29:e3:93:b9:e7:23:89:0e:d1:3a:5a:
b2:c6:bc:e1:fb:71:07:4d:d6:a6:7f:e3:a9:79:4b:9d:b4:bb:
7d:5c:83:80:f6:27:ba:af:06:d6:43:40:28:52:d0:f1:1c:fe:
2b:dd:a1:13:28:07:45:e2:0f:d2:e6:6a:6c:97:c9:08:03:d7:
d3:61:86:79:30:04:60:fd:26:fb:e7:1a:7a:3b:30:f9:c6:8d:
6d:b3:f4:98:57:66:e9:fd:49:d7:45:42:d2:c7:1b:51:72:53:
f5:0d:bb:70:50:95:47:a1:a7:17:d0:1b:e2:67:1b:11:40:23:
4e:5e:15:1d:34:5e:f7:d8:2b:53:46:24:89:24:9e:fe:9f:d7:
6f:78:a5:06:79:fc:90:c6:e4:cd:47:46:54:7b:be:f1:78:a6:
18:56:1f:32:28:fd:7c:8f:dc:5c:64:8f:53:3e:6b:68:52:1b:
2d:c6:f4:66:8f:b9:07:d5:3c:07:9c:33:65:47:08:6f:70:d2:
65:b5:3d:4a:85:70:8e:b3:c2:d3:81:0b:09:0d:f1:4d:df:45:
00:0e:fc:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:11 2025 by rpki-client