Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File: acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier: fArdo/MyC+3/8hVMpbp+20tK2VoidFjTRkGBQMFBMpo=
Subject key identifier: 7E:65:37:4C:EB:02:BE:CF:EF:D8:A7:87:DC:28:45:6F:04:53:C5:42
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 019A71B879BFF67B8B236FA94F1C3B323E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 07:01:46 +0000
Manifest this update: Tue 11 Nov 2025 07:01:46 +0000
Manifest next update: Wed 12 Nov 2025 07:01:46 +0000
Files and hashes: 1: 5juFOi12IlXtCkf2DtKHvFjQ7Jk.roa (hash: ww1Ap6yHRZv0yJoUDsvGuz2Z305tTs+DxDhKtXDBfFg=)
2: IKiqkrmFyojfs3_xOt7fZHFSlPM.roa (hash: A7gXKJoNQ0QRvI+SScjx1MnLDAh3sHJvpIH2WHgULw8=)
3: PtfamAIKc-wbnus8-5afpUvZHGU.roa (hash: h8WtMUiUF98qcvLvFpadosq7yztYyhy7KWS+4nBxrlg=)
4: U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa (hash: c6bEmKe9x58NR/VbAT8OhvrCDKKUEqAOtV7EWWPUmrc=)
5: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: GC+mrehZcRdvkCWHryKHX4jI3gJIAkijbQbriyoPzQw=)
6: rS6BwZvo3GfqDYx4UHFP382Hars.roa (hash: SFt6Clcvm0ncW0QPfJN10WZH+aRfPVixy7ab3a3BU/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:79:bf:f6:7b:8b:23:6f:a9:4f:1c:3b:32:3e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Nov 11 07:01:46 2025 GMT
Not After : Nov 12 07:01:46 2025 GMT
Subject: CN=7e65374ceb02becfefd8a787dc28456f0453c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:fb:30:f4:f6:7f:49:3a:42:ba:ed:8a:c1:2a:
78:b1:60:53:55:9f:43:e9:c3:4b:4d:27:ef:01:1f:
ca:b9:b6:40:03:2e:80:82:93:b5:a0:4f:cd:de:2d:
80:b8:16:0d:6c:52:09:b4:5c:18:cc:a5:c2:4a:c9:
88:67:b1:25:78:33:92:05:de:96:e6:ea:20:29:0d:
21:08:1c:2e:46:73:fc:fe:a4:6c:d3:a1:1a:96:a9:
3f:70:1e:e0:ae:10:88:76:64:e9:54:27:e1:1a:f2:
45:ff:33:68:fb:84:8a:22:3c:db:5a:7d:f6:b1:17:
c4:b2:f2:94:17:77:4c:7c:85:5a:ea:27:80:79:2a:
d8:c9:e4:33:d5:08:43:31:37:06:64:e0:b1:96:43:
ce:fa:7b:c0:b7:aa:aa:0e:ea:fe:f6:b3:b4:f4:be:
3a:30:45:e1:ae:a7:13:3c:79:5b:8e:b0:82:34:2f:
a9:7d:23:a7:eb:c2:f6:57:30:1d:14:27:bf:df:36:
d7:4a:f1:b8:43:de:d7:0d:99:61:b4:7a:b8:04:b0:
aa:2a:b2:84:64:ce:75:84:3a:91:7f:6a:9d:9b:a0:
5c:ed:7b:b8:ef:26:3b:ba:37:8d:10:17:c9:55:8e:
41:61:87:a9:f1:34:95:76:1b:c0:04:bf:3d:12:89:
1f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:65:37:4C:EB:02:BE:CF:EF:D8:A7:87:DC:28:45:6F:04:53:C5:42
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:56:d5:e4:3a:c2:1b:29:02:fd:ef:e0:f9:a2:b7:2e:ff:87:
c2:b1:5b:3f:76:0c:8a:1d:a7:c3:a7:d0:ab:46:7b:10:24:f2:
4f:a4:d1:0b:01:61:5c:bf:d7:4e:ef:8a:f8:26:20:c7:48:de:
d5:a8:d2:65:cc:a8:31:df:ee:cc:df:52:d2:56:14:a7:c2:ae:
70:86:61:47:76:bf:24:fb:e4:d7:52:7d:ed:70:77:6b:70:56:
07:56:d5:f6:b5:17:d1:b4:b7:bc:9f:a5:de:0c:8d:6e:08:f9:
9a:0c:dc:ca:53:09:31:e1:f6:47:24:66:59:54:0a:e8:19:2e:
a9:a1:05:20:68:63:1f:97:2c:3e:54:56:95:aa:a1:33:50:67:
08:25:59:4e:81:f1:b7:9f:c3:54:88:68:42:00:e6:b8:10:e6:
11:b4:db:c8:8a:c0:94:1a:2a:48:cc:7e:fa:d7:1a:03:8c:ed:
91:82:39:71:50:fc:d0:bb:2d:af:1a:3d:c4:77:30:af:d8:ca:
b6:c5:1b:b5:7a:a5:80:e1:70:e5:1f:26:a8:92:0c:f1:b1:cc:
32:61:24:ea:84:d5:a6:05:5c:5e:24:b2:4d:76:2e:6c:5d:23:
05:89:dc:7b:01:70:d7:47:e6:87:87:86:4b:a3:0b:03:8c:16:
70:b0:5b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 11:32:55 2025 by rpki-client