Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
File: AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft (raw, json)
Hash identifier: fC5Z7Hx8mhXlCLyJO5VyYLYaiCtaIXZ+MWxCtJSyUVs=
Subject key identifier: D2:74:30:AA:A9:4B:12:D2:47:D0:E8:4C:B6:5E:C7:96:A2:40:BF:C8
Authority key identifier: 00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
Certificate issuer: /CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Certificate serial: 019A7293BA6D5C6885C59BE2B76F193118ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
Manifest number: 16F0
Signing time: Tue 11 Nov 2025 11:01:15 +0000
Manifest this update: Tue 11 Nov 2025 11:01:15 +0000
Manifest next update: Wed 12 Nov 2025 11:01:15 +0000
Files and hashes: 1: AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl (hash: 8NZl9xuXv1uf9PLcbqXYF4TmoBdDJqxQdH/D3nLkeFQ=)
2: FGVVapfPvK0QzFf1pALkp5bEruw.roa (hash: TSwtNe6AniR+9RFExziwrrS0q9Xsbcr++0YQr2+oyJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:ba:6d:5c:68:85:c5:9b:e2:b7:6f:19:31:18:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002fa6e19056838905bc32b53ab0d1047d78e4d4
Validity
Not Before: Nov 11 11:01:15 2025 GMT
Not After : Nov 12 11:01:15 2025 GMT
Subject: CN=d27430aaa94b12d247d0e84cb65ec796a240bfc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:6e:c3:2a:20:76:b7:eb:60:dc:3f:0f:67:
b3:99:81:c0:04:08:14:1c:81:16:fd:1d:7f:ea:41:
2a:07:cc:b3:79:d6:5f:a1:15:b6:04:3d:0d:08:a6:
9b:b5:10:ea:96:ea:19:cf:cc:42:73:92:e8:70:76:
5b:77:a2:0b:b5:69:f8:07:a8:e0:be:3b:a1:da:56:
1a:51:5a:c1:ac:ca:30:ee:16:f7:3a:f0:c0:50:10:
e1:24:ed:23:d9:96:ba:d9:60:9c:c4:0c:28:d4:4d:
f0:a8:5e:f7:55:16:c1:d1:ae:03:9f:0a:86:e2:52:
90:60:46:16:0c:61:ba:8c:fa:53:73:68:de:14:c2:
2b:07:97:fb:a9:1a:5a:38:82:43:0e:ea:ab:c1:13:
ed:40:67:06:b4:69:ac:bc:45:70:70:0e:f9:01:8f:
b6:7c:8b:48:99:7c:30:50:66:61:76:c4:17:68:a5:
c8:8c:aa:51:28:22:c4:8d:8b:74:16:44:37:af:58:
8b:10:9a:b3:a2:49:c4:e5:59:55:d0:1a:0f:cd:71:
06:ec:99:75:ea:f2:7b:2a:14:17:e5:99:70:b7:44:
1f:b2:f4:d0:75:fa:7b:59:8e:27:be:95:15:f8:f9:
43:a3:38:ed:1c:f1:e0:33:d7:24:49:5f:c2:4f:96:
de:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:74:30:AA:A9:4B:12:D2:47:D0:E8:4C:B6:5E:C7:96:A2:40:BF:C8
X509v3 Authority Key Identifier:
keyid:00:2F:A6:E1:90:56:83:89:05:BC:32:B5:3A:B0:D1:04:7D:78:E4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AC-m4ZBWg4kFvDK1OrDRBH145NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/866b6b-f56c-4a2f-902d-fbc36e4348f5/1/AC-m4ZBWg4kFvDK1OrDRBH145NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:af:f1:26:ea:d2:56:67:bc:4c:58:d4:04:da:13:43:76:7e:
c5:ce:ff:98:10:a2:de:f9:3d:41:b0:31:f3:b2:a4:96:51:d5:
3d:62:9c:fe:87:24:18:d7:1d:4d:42:da:ba:24:79:2f:2a:1e:
0b:c7:89:dd:d4:26:a5:e7:0d:6b:b3:0a:de:bc:76:a1:b8:18:
89:d6:91:51:61:82:94:67:fb:5e:31:21:cf:fc:26:dd:d7:31:
d5:fe:4b:07:21:9c:b9:a7:0b:73:0b:db:29:a2:29:01:05:64:
25:50:ca:2d:5d:44:29:69:af:0f:15:cb:e8:d6:a8:b0:a8:06:
a3:31:4c:1f:e5:f2:b9:31:16:10:33:b6:91:e5:06:38:25:b1:
80:a6:d9:39:d0:8d:70:b2:73:18:42:75:71:de:f1:5c:e6:97:
e9:25:2a:92:7a:f7:fa:14:c5:74:c3:cf:8c:a7:07:6c:21:04:
fd:3d:5b:81:98:f0:f8:ad:78:49:32:54:1e:b8:f2:a8:68:a8:
bf:37:02:30:50:7a:1a:08:90:b7:4f:d4:d6:c3:7d:dc:89:b5:
76:50:95:62:93:17:4b:7c:11:52:bc:dd:6b:87:0c:c5:2b:00:
3e:ee:a1:48:f5:c3:0c:d6:6d:62:28:e0:23:26:eb:f0:73:6a:
72:73:25:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:35:10 2025 by rpki-client