Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: znDyby2BVuHKKo/sb0QzUaT/ESiB8DZFTpEyC0BrXdE=
Subject key identifier: 7B:76:2A:F4:46:2F:68:7F:C5:8D:BD:57:CC:01:0B:0F:78:4E:3B:83
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 01992CA22FFE8E7BFBC652CB4F249D1FC4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 02BA
Signing time: Tue 09 Sep 2025 04:00:50 +0000
Manifest this update: Tue 09 Sep 2025 04:00:50 +0000
Manifest next update: Wed 10 Sep 2025 04:00:50 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: h8KhB/YVzoWVqcNaV/ugOPqR7zkIbNmNw0Dh/do30Yk=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a2:2f:fe:8e:7b:fb:c6:52:cb:4f:24:9d:1f:c4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Sep 9 04:00:50 2025 GMT
Not After : Sep 10 04:00:50 2025 GMT
Subject: CN=7b762af4462f687fc58dbd57cc010b0f784e3b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e4:99:27:18:02:ac:2d:0f:09:9c:03:53:fb:
20:f1:e1:a9:62:89:15:64:6f:18:3b:fe:f7:cc:31:
7c:d7:ad:94:d4:d6:00:04:98:42:24:3d:c3:c3:f0:
d9:4b:ce:37:97:56:c3:1d:62:b5:7d:ff:71:b4:db:
e9:89:72:25:fa:47:f4:78:ed:b5:c7:7b:12:36:b9:
d1:cf:e8:0e:f5:32:86:2d:98:38:00:cf:bf:7c:d1:
71:0b:36:93:56:3d:2d:b2:1f:dc:91:3f:11:72:80:
6d:00:32:88:29:67:ea:eb:c9:eb:75:f0:ae:02:e0:
bd:36:27:32:7f:72:81:6e:04:fb:d1:da:83:7f:d4:
db:a0:8e:1f:68:a3:0a:41:ff:ed:97:ac:26:c1:f2:
0c:cb:3d:43:9e:c4:67:85:95:d6:8f:82:b1:8f:cc:
46:02:51:1a:ac:e9:62:f9:38:56:b7:2b:ed:e5:11:
98:d3:1a:66:a2:9a:4a:bd:b9:55:f3:1b:94:05:45:
a0:e5:d4:80:d5:b4:20:4b:6b:e7:bd:c4:c2:fb:12:
aa:4d:d2:2d:f7:06:fd:e9:19:6c:81:55:2f:4c:b3:
31:fb:08:dc:52:c9:2b:ff:65:9d:29:ea:d2:53:30:
48:e5:e6:86:b8:c0:87:eb:3b:2b:9a:6e:10:eb:d1:
16:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:76:2A:F4:46:2F:68:7F:C5:8D:BD:57:CC:01:0B:0F:78:4E:3B:83
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3c:9a:a9:4b:b9:3f:4b:11:85:09:15:f8:56:a6:63:1d:05:
72:56:54:e1:4a:5c:da:50:a9:97:d1:3a:27:8f:87:e4:1c:b4:
76:15:da:a7:a6:e8:22:8f:8d:77:ae:a3:78:ea:50:ff:79:76:
a1:08:f0:76:25:c4:76:8c:8a:d0:99:e9:2e:eb:30:4f:7d:70:
68:7d:9e:de:e2:44:49:27:a3:8e:02:f1:9e:fb:11:88:92:e2:
d8:f4:9c:64:06:50:bd:84:e8:d9:a3:83:17:10:2c:d6:31:21:
ba:fa:50:03:c5:69:a1:d2:3e:60:cf:55:d8:89:82:0a:e6:8d:
ae:c0:24:b5:4f:c5:7a:c0:50:da:39:83:f5:6c:37:37:cc:69:
52:e1:fd:a2:14:35:ad:58:83:2b:3a:0e:d9:bb:e3:88:5e:3b:
14:55:2a:9e:51:4d:63:80:87:e4:9c:54:ff:93:38:f0:52:a6:
16:d1:dd:d9:73:a9:59:eb:a8:52:c9:34:71:23:11:c6:90:a7:
36:fa:2b:c5:56:d3:b7:38:e3:1e:ba:8a:88:f0:64:a5:96:e4:
8b:0b:c9:e8:89:7d:7d:65:c3:fc:75:b4:5e:60:be:84:a1:d0:
dd:34:6a:53:4c:c3:7b:ec:07:1e:59:cf:67:31:70:dc:96:6d:
41:e8:04:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 10:33:49 2025 by rpki-client