Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: g8UfdNwCHKzXFuO/Btjj4thtVPb9/q4EnaPIlT5mc64=
Subject key identifier: B1:B6:62:81:DF:13:41:61:E5:64:FC:A1:59:D4:2A:E9:E1:06:45:04
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 0199228CC08D0C05E210480BC9E8114462EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 1642
Signing time: Sun 07 Sep 2025 05:01:13 +0000
Manifest this update: Sun 07 Sep 2025 05:01:13 +0000
Manifest next update: Mon 08 Sep 2025 05:01:13 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: 7ZNUQy1xOo5M5OWwZ3JUT0Iu8MGABlSV9LEAAVNGCjA=)
2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:c0:8d:0c:05:e2:10:48:0b:c9:e8:11:44:62:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Sep 7 05:01:13 2025 GMT
Not After : Sep 8 05:01:13 2025 GMT
Subject: CN=b1b66281df134161e564fca159d42ae9e1064504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a4:ee:2a:69:d4:a6:b7:e3:06:56:ff:83:33:
02:6a:6b:b9:c6:e5:03:25:48:9c:34:3c:be:8d:43:
20:7d:9e:65:fb:69:7e:55:98:e0:ad:b5:e4:8d:62:
45:1f:06:0d:4f:6d:b6:ca:06:23:98:13:43:8f:88:
df:ac:86:d1:93:ff:7f:27:3d:e7:8e:7c:09:ac:07:
f2:bf:50:09:48:a5:c2:7c:79:d5:6c:89:fa:b7:b2:
7c:71:1e:f8:f5:cb:ab:f9:68:73:77:2b:82:be:20:
b4:6c:6f:1d:ba:f3:83:24:aa:f7:9e:a3:f5:58:2c:
eb:ef:6f:d1:d6:0f:02:82:81:85:92:ad:5e:a0:84:
56:b8:84:02:5f:85:ad:cd:e8:73:46:7c:f4:75:ec:
aa:c5:31:0e:8a:09:3a:a0:a5:83:c6:cf:f5:d5:ee:
16:51:d2:c7:7f:c2:5f:5a:f6:10:da:66:aa:d0:38:
b4:39:7c:03:73:ef:a9:3f:d7:7e:fc:f3:f4:a8:30:
95:71:88:e0:ff:e7:34:3f:07:db:53:25:9a:4d:57:
88:4f:b2:87:0b:db:49:aa:b3:12:a0:18:a0:1d:dc:
60:3d:0d:98:34:d9:01:ae:01:d1:c3:70:fb:fd:9e:
f4:83:99:ef:7f:cb:85:66:a2:bf:a0:26:71:df:1b:
04:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B6:62:81:DF:13:41:61:E5:64:FC:A1:59:D4:2A:E9:E1:06:45:04
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:6e:61:4d:42:af:3a:d4:76:d3:e3:20:e6:e1:e8:b6:af:ae:
00:48:10:73:5f:12:8a:86:a6:13:4f:32:bd:6f:79:d1:5e:b4:
a1:7c:06:b8:94:3c:7f:a0:16:42:ad:8d:d2:49:4e:21:57:51:
3e:e1:b8:f7:7f:bd:7e:22:c1:70:84:71:19:ba:f8:9b:e6:b5:
1b:71:67:01:0f:d0:7f:98:c1:d2:1a:e9:57:9f:98:77:92:aa:
f5:0b:82:32:53:1a:57:67:4a:07:fa:bb:63:8a:be:64:6e:d9:
60:37:f5:8b:01:4a:fe:80:fb:ef:99:65:dd:ff:c4:0a:08:dd:
26:b1:9d:fa:63:83:d7:9c:04:21:ad:ac:5b:de:e4:11:c7:17:
46:3f:3b:ef:fd:33:31:de:b9:74:35:82:42:b1:de:3e:d7:bd:
cd:8a:9c:23:01:d2:78:ff:8d:93:01:69:1b:e0:3a:a6:00:a1:
95:d3:9f:07:d9:f4:f9:7d:d0:ce:72:60:b6:91:c3:3a:e9:ae:
47:43:31:b2:8f:11:ab:a4:3f:bd:f4:99:93:47:83:89:98:83:
4b:62:71:49:4d:eb:5c:89:4f:99:13:41:19:51:36:15:c6:70:
7d:7d:06:19:cd:0f:5f:91:0d:f1:c4:7d:17:b4:c7:44:ab:da:
6d:ea:74:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:43:32 2025 by rpki-client