Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: BgptUCF47O4NJzkZjUYz78nh88yV+gmRHpsGSg3aZDs=
Subject key identifier: 9C:81:7D:91:FC:46:99:4E:C3:C2:27:0F:91:55:6F:91:76:DE:E8:B7
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 019922C3AAECC40DA5B75579AE9B930DEB54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 1676
Signing time: Sun 07 Sep 2025 06:01:12 +0000
Manifest this update: Sun 07 Sep 2025 06:01:12 +0000
Manifest next update: Mon 08 Sep 2025 06:01:12 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: xcvxDIo4ROTT7KgVWekLyJ+wJr8RS7i7ZDcXPDkyncE=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:aa:ec:c4:0d:a5:b7:55:79:ae:9b:93:0d:eb:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Sep 7 06:01:12 2025 GMT
Not After : Sep 8 06:01:12 2025 GMT
Subject: CN=9c817d91fc46994ec3c2270f91556f9176dee8b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:77:b9:c5:19:7b:59:eb:03:6d:46:07:d1:
7f:05:ac:d7:dd:b2:a0:71:f7:07:2a:a0:3f:ec:8d:
4a:e6:7e:34:dd:44:02:6c:54:ae:47:88:5c:49:5c:
d1:a6:36:e2:6b:50:a0:27:0f:ca:3b:79:51:c5:8a:
f9:47:76:74:6e:8e:07:ec:21:57:5c:e7:62:aa:e0:
d0:4f:62:1f:5d:ce:3f:b3:fe:f3:32:c6:dd:a7:1c:
b7:a6:ce:2d:96:9b:37:7a:69:2e:6d:14:ee:2b:f1:
cc:35:49:34:5c:52:e6:2f:20:f7:99:4d:6f:fd:48:
4d:2a:05:c9:14:72:6c:67:3f:7b:73:cf:96:4c:ec:
cb:12:8b:1b:cb:33:e6:8b:b5:d1:e2:da:ab:f3:1b:
6a:f1:81:f6:c0:45:e1:45:dd:f3:c6:17:e9:be:6f:
f4:7c:fe:8c:c1:52:b8:bb:88:07:23:26:c6:7d:1f:
4a:cd:13:f4:2f:65:82:0d:9e:18:c1:f5:24:e9:60:
a1:fe:9e:37:44:4c:29:aa:1b:d3:bf:17:c9:52:80:
bf:2b:42:84:af:7d:c6:69:25:a7:82:2c:51:de:b5:
84:9b:1b:12:bf:4d:da:13:41:24:9e:ae:de:16:6b:
6c:8f:ae:b8:f4:11:51:f3:4f:ce:5d:4a:6e:f1:16:
46:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:81:7D:91:FC:46:99:4E:C3:C2:27:0F:91:55:6F:91:76:DE:E8:B7
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:53:7a:23:ea:45:38:81:07:98:66:c0:99:41:5f:e5:64:42:
8e:a9:5c:e7:b0:a6:ba:b1:4e:b1:53:15:6b:80:5e:e8:52:ce:
7b:0b:b4:45:85:22:20:5e:59:ca:36:7b:51:23:f3:87:4e:04:
83:95:1b:33:c5:3e:f8:4c:f7:d5:bd:c8:ee:99:e0:83:51:c4:
4b:cb:79:ee:dc:98:dd:eb:60:c9:6a:46:6e:c1:ee:fb:dc:6a:
67:f5:3e:39:83:ed:1e:7d:77:a3:35:8c:64:19:1f:78:e6:3e:
0a:15:f6:8b:bd:a1:7a:1e:6e:71:19:9b:0f:f7:da:17:ea:29:
38:2e:44:3b:7e:cb:ca:40:5c:6a:7c:f3:c7:b5:21:32:6b:1a:
3e:ec:95:6a:d0:27:64:1d:54:03:bd:29:4a:1b:38:1d:3c:62:
16:58:ed:32:75:ce:b8:f4:08:70:73:79:62:ca:50:55:3e:fc:
13:68:fa:df:58:4d:5e:36:d0:96:74:ea:ae:68:4f:93:5b:b5:
88:9e:84:3d:58:43:19:aa:8c:80:7d:cf:b8:c8:ea:57:a0:dc:
3d:6c:ea:91:85:f1:9d:57:a4:96:3b:75:a4:07:14:ab:55:fc:
a3:75:05:04:88:77:5d:4a:51:71:87:5a:b0:d2:9d:4f:be:6b:
b0:54:30:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:52:17 2025 by rpki-client