Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: WJueQE4DT+aULDcFXirOJXUuX3L2SKFbfNlT0BOENfU=
Subject key identifier: D7:C3:61:34:15:2D:B6:CD:CE:88:74:D3:5E:B0:45:C5:49:7C:1A:19
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019A71136D315A314AA18822A70C6247BEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 11CA
Signing time: Tue 11 Nov 2025 04:01:29 +0000
Manifest this update: Tue 11 Nov 2025 04:01:29 +0000
Manifest next update: Wed 12 Nov 2025 04:01:29 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: LQ9stEbYdB+ZmpardLwLxNwfgifBh7+C8Q1S9Ix95pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:13:6d:31:5a:31:4a:a1:88:22:a7:0c:62:47:be:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Nov 11 04:01:29 2025 GMT
Not After : Nov 12 04:01:29 2025 GMT
Subject: CN=d7c36134152db6cdce8874d35eb045c5497c1a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:52:6c:d0:af:66:19:f0:da:05:6a:cd:51:
18:4a:e7:c0:b5:e7:83:2f:03:45:fe:bd:81:d8:63:
4c:be:29:06:cf:d2:1a:e6:63:b3:98:18:c5:7c:47:
c6:b4:e9:05:39:ed:0d:87:c0:ca:bb:7e:76:c5:ef:
64:66:11:e4:6f:f4:43:e3:10:90:10:ce:29:24:5a:
62:4f:1a:d2:96:f9:ad:4c:1e:d6:3a:d4:f1:5b:43:
96:b4:e0:f6:0a:e8:fe:3b:e5:7f:1d:d7:82:03:4b:
b8:30:41:a3:bd:56:23:67:9f:f2:2c:64:2c:77:8d:
ef:6d:64:ef:48:f9:88:7a:83:1a:2a:0c:7d:6f:46:
69:95:7c:ca:a1:60:e1:ed:35:2f:3d:b6:16:29:9b:
55:30:8e:12:8b:d5:8f:f8:10:88:70:77:3b:d7:63:
0c:01:ad:e9:54:ee:d5:b1:63:10:92:b7:49:79:9b:
31:f3:49:62:11:9b:f2:21:77:81:fa:8b:aa:b2:96:
1e:18:a4:63:5a:49:b1:f2:3b:a1:5b:f4:2c:8b:09:
11:cb:35:55:17:08:6b:1b:49:4f:f2:e4:ce:ad:d7:
d3:92:bd:25:d0:48:32:b3:8f:56:c8:9b:0d:3b:21:
dd:97:16:9d:08:23:f1:18:98:db:26:8b:81:e3:58:
64:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:C3:61:34:15:2D:B6:CD:CE:88:74:D3:5E:B0:45:C5:49:7C:1A:19
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3a:8b:a4:63:88:f9:78:0a:26:59:d9:d9:57:23:e3:fa:66:
c0:71:13:dd:00:cd:e5:a8:e5:c4:a0:02:cc:d7:32:88:66:9c:
68:c3:6a:08:3a:c4:3d:c5:93:d5:ee:73:f6:5a:d8:a5:72:fb:
78:31:dc:ca:8e:5f:8b:16:89:8e:43:de:7e:df:84:82:50:92:
12:8f:52:22:fb:9d:ed:6a:35:cc:16:b8:58:0f:7b:d7:48:4f:
ea:d5:d4:43:af:75:3a:a8:d0:50:9c:ff:fb:bb:53:15:14:04:
ba:78:af:dd:d6:70:d0:2f:44:e4:4c:9a:75:f2:0f:b2:70:08:
d7:b4:93:ac:6c:58:00:82:e9:1c:3a:2c:52:80:cc:f5:8b:98:
59:03:28:3d:76:0d:5e:01:a7:f2:ff:71:55:e1:21:f3:f8:49:
77:ef:a7:50:7b:17:31:72:e2:b1:bb:21:ea:79:57:b0:8a:8e:
69:77:1d:49:5b:69:21:5d:a0:05:86:57:cb:65:5f:a0:7b:d3:
22:c8:cb:e1:9e:83:62:4e:25:85:c7:3b:5c:38:a8:15:fb:dd:
ec:d7:3c:b5:00:e7:6e:c3:f0:57:cd:8e:92:74:a4:54:9f:c6:
82:39:c1:60:8b:13:88:9d:0c:0f:6e:80:5f:47:95:fc:90:dd:
bb:14:b5:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:38:45 2025 by rpki-client