Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: ezkepTQEl0uhrCZ3eIllSK4MCMrRvRZZWMEt4CPv1RE=
Subject key identifier: 7C:BF:61:64:51:BD:7E:0C:1E:20:6C:3D:FE:1C:5E:D6:74:63:33:11
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019A23D319CAE38093D2EEBE1446480D6E7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 033A
Signing time: Mon 27 Oct 2025 04:00:28 +0000
Manifest this update: Mon 27 Oct 2025 04:00:28 +0000
Manifest next update: Tue 28 Oct 2025 04:00:28 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: f3qnKoOMnLg5p6DWGD1t2DGSodiGcMk6IQ7p0lQZM5k=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Oct 2025 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:23:d3:19:ca:e3:80:93:d2:ee:be:14:46:48:0d:6e:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Oct 27 04:00:28 2025 GMT
Not After : Oct 28 04:00:28 2025 GMT
Subject: CN=7cbf616451bd7e0c1e206c3dfe1c5ed674633311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:84:2e:4d:9c:d7:47:d3:86:ce:62:fa:62:57:
1a:fc:15:f2:14:56:0e:7c:11:22:5f:cd:25:d3:24:
61:f7:88:92:c0:4f:a7:68:c4:9b:ab:f3:89:5a:db:
43:87:f5:cb:68:16:7a:74:c4:83:e4:78:1b:b9:a7:
ba:fa:7c:ab:2f:6f:bf:ce:13:90:ee:b8:de:c8:88:
6e:2a:c8:9b:aa:de:63:ba:f4:df:07:c8:7b:97:f9:
47:03:d6:bd:23:9a:89:48:d6:c1:e8:43:e7:58:7c:
d6:a3:aa:be:de:c5:95:a7:2e:4c:31:4a:51:bf:1d:
d2:5a:23:62:a5:c6:a1:93:0b:50:df:f4:3f:86:ea:
7f:fa:56:c9:66:d6:03:fe:69:d0:52:5c:bd:b1:3f:
25:5e:45:bd:a9:18:7f:74:59:c0:f0:79:51:cd:f7:
33:23:6b:2f:93:d0:2c:53:95:75:a8:f8:7f:07:1a:
75:aa:49:13:b8:ca:f5:d3:5e:c2:1d:f8:24:90:63:
05:31:a1:a0:a8:55:95:b3:eb:1b:5f:8a:08:28:e1:
ad:84:58:ae:90:cd:f6:03:b6:9c:2d:ff:fa:9d:62:
c6:f8:db:75:56:d4:82:0f:79:34:53:4b:7a:5e:2e:
6e:c0:2f:da:a6:c1:74:bb:96:5d:dd:25:e2:67:10:
ba:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:BF:61:64:51:BD:7E:0C:1E:20:6C:3D:FE:1C:5E:D6:74:63:33:11
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:0c:b4:10:d0:0e:ae:f6:29:4f:85:a1:a2:eb:31:e1:d7:ba:
ce:c8:30:07:f2:ba:d2:c0:d0:4b:b7:cf:9f:2a:a8:5a:60:37:
ff:aa:ef:5a:ce:9c:91:7e:6b:26:f4:5c:d0:bf:bf:4f:8a:1e:
c5:5d:0a:9f:b1:ef:13:5d:2d:a9:36:e9:21:36:cb:40:04:bc:
21:8c:0c:66:8a:dd:41:e1:0a:c6:86:47:6e:6a:07:ce:da:31:
7c:0c:44:d8:8c:db:54:eb:4f:3f:59:93:00:ef:7b:f6:07:7d:
dc:5a:ff:b2:cc:a9:ce:23:06:8f:77:3a:0b:b0:58:c8:ff:fc:
3b:c1:8c:7a:e3:c4:b2:fb:18:20:bd:d3:3c:8d:32:58:e4:73:
d0:ac:90:27:e9:f3:71:a6:91:8e:d3:d7:59:20:5f:6e:85:5a:
c3:c0:5a:5d:42:7b:41:11:cc:31:d7:0c:e7:62:d8:22:9d:ec:
68:71:67:58:7f:cb:33:ab:63:00:5a:20:d9:cb:03:5a:d3:28:
c7:46:81:f2:37:1d:79:fb:a5:32:46:e2:fb:1f:7b:c7:28:dd:
0c:e8:8a:b5:7b:c5:f8:3a:98:6c:8e:7b:2b:48:29:d1:a5:0d:
16:08:ff:de:39:5d:49:59:3e:82:83:8f:fb:66:8d:bb:b6:aa:
fa:b1:76:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 12:25:00 2025 by rpki-client