Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: IJ8IangyNANLlMSZdoIWcxhbb6EVyJRraVW2c4t+riU=
Subject key identifier: 67:59:12:BF:F7:1A:92:1F:3F:FA:40:B7:A1:DB:13:6D:C3:F6:AF:E3
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019A134D292AF96C6352E32494A500DCE813
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 16F1
Signing time: Thu 23 Oct 2025 23:00:15 +0000
Manifest this update: Thu 23 Oct 2025 23:00:15 +0000
Manifest next update: Fri 24 Oct 2025 23:00:15 +0000
Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: e2547CIBO+/ysFPg3/6yEuKOylps0zPZwH1F4ruJVhk=)
3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Oct 2025 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:13:4d:29:2a:f9:6c:63:52:e3:24:94:a5:00:dc:e8:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Oct 23 23:00:15 2025 GMT
Not After : Oct 24 23:00:15 2025 GMT
Subject: CN=675912bff71a921f3ffa40b7a1db136dc3f6afe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8d:bf:a1:fb:fc:bf:65:3a:31:15:63:d0:4b:
8e:a9:0d:6b:0a:98:cd:d2:86:e3:a9:7e:3b:af:ff:
9a:8f:73:29:f1:44:9d:6e:6d:f4:d0:ee:ab:d2:0d:
f1:fb:bb:4a:30:f6:fd:49:a0:d0:b5:b9:f8:8d:2c:
b8:b4:bf:3c:bb:07:f9:9c:b7:87:13:72:90:a6:d9:
9b:3b:bc:67:8c:e3:b7:ed:8b:be:90:dc:e5:0f:6c:
10:f6:5d:ce:2f:44:92:fa:01:9d:41:ca:73:60:14:
90:93:1c:45:f4:db:59:fa:8c:98:47:9c:04:9e:f2:
fb:e6:59:24:5f:4a:e5:fe:e8:ed:7d:d0:a1:d9:c5:
47:79:5d:3b:3d:7a:f9:39:ed:9f:c8:98:11:37:5b:
e9:ee:aa:84:70:6f:da:47:81:97:c1:74:fd:a8:2b:
56:36:fc:0a:f9:d7:c0:62:5c:2b:4e:72:e4:57:e4:
fe:cd:8a:3c:c1:dd:1b:f2:d5:48:30:5f:df:d9:89:
e3:21:80:73:33:11:08:bf:7b:25:f9:37:23:10:10:
ed:a0:cc:b2:55:a8:d5:01:32:60:e9:a7:8b:b9:aa:
1f:26:a7:64:46:85:d9:c1:a5:69:56:0f:d0:96:17:
f0:8c:b6:a6:5f:0f:7a:51:59:be:13:9c:de:28:08:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:59:12:BF:F7:1A:92:1F:3F:FA:40:B7:A1:DB:13:6D:C3:F6:AF:E3
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:d9:35:90:8f:76:11:2a:22:54:a9:bb:8e:1d:bf:64:59:41:
b9:7f:c6:fe:71:43:1d:5e:bd:22:4d:88:76:6a:dd:ac:70:24:
0e:c9:00:2a:55:56:bd:9d:8d:e5:f9:94:da:be:cc:6f:c3:10:
c3:be:24:d7:32:eb:88:f2:a6:e4:50:2d:a3:52:0d:35:f6:ac:
19:43:99:af:16:7b:9c:be:48:93:47:8b:e0:e4:ec:90:6a:5d:
aa:07:eb:6e:38:6a:57:d5:43:2a:67:fe:2b:22:01:84:58:29:
d6:2d:1f:9b:58:ff:70:00:3b:ef:98:81:6c:39:8b:76:f5:03:
7a:5e:72:12:26:c8:ad:16:f0:f4:6a:5c:be:e1:9e:95:55:e4:
29:37:62:5b:aa:25:b2:df:06:47:3e:a1:40:cc:41:bd:98:a1:
58:3a:f2:2b:e4:34:63:c1:ae:08:1a:c7:d4:36:81:53:12:31:
76:5e:2c:20:c3:64:41:ea:7e:69:be:68:3c:17:c5:30:b6:d9:
a8:60:3f:2d:f5:1d:1c:5b:6c:53:f1:e8:e5:7f:9c:2b:2e:17:
10:7c:cc:51:26:e3:f5:36:ea:83:8e:7b:17:d0:5c:71:b9:fb:
fe:1e:13:85:45:c8:ca:47:be:17:d5:90:17:7b:05:1f:00:94:
7e:5d:fd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 06:58:35 2025 by rpki-client