Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: 1zICpa/qviXNdM4a0CqEZVFCWEsBYDGcXP/nFr2kxwA=
Subject key identifier: 95:C8:2D:25:63:7F:37:99:68:DC:57:1D:66:87:C8:99:F7:16:79:26
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 019A72CA1A089664EC72A062EE026BC0CCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 1724
Signing time: Tue 11 Nov 2025 12:00:38 +0000
Manifest this update: Tue 11 Nov 2025 12:00:38 +0000
Manifest next update: Wed 12 Nov 2025 12:00:38 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: KClR6UScokrl7r5GJf3rFziRX+pkwbBzqcr8ekbWB+M=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:ca:1a:08:96:64:ec:72:a0:62:ee:02:6b:c0:cc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Nov 11 12:00:38 2025 GMT
Not After : Nov 12 12:00:38 2025 GMT
Subject: CN=95c82d25637f379968dc571d6687c899f7167926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:41:15:6f:c1:5c:23:64:87:73:aa:76:8d:fb:
6a:e3:7d:14:19:76:31:aa:ac:f6:95:87:f2:6b:52:
c6:97:1d:13:e1:f5:d3:49:99:a4:c6:11:37:eb:78:
7f:b6:c1:35:98:00:fe:92:12:0e:f1:60:b3:75:d0:
ba:8b:f0:f3:e6:b2:17:0c:ee:b1:7f:7a:c7:38:5a:
9d:fe:ad:24:02:4d:c2:75:2c:d0:65:eb:e7:3a:a5:
8d:d3:36:29:87:f1:e7:aa:c7:b6:f2:0e:7d:4f:73:
b9:fd:e4:0c:da:ad:6d:6b:35:15:bf:80:ea:e0:d0:
7e:38:aa:5b:81:2c:5a:c4:6a:53:da:a8:44:38:8f:
cf:85:a1:2b:f7:27:0d:e4:63:8c:23:18:d1:b4:78:
6e:5f:b3:00:b2:54:42:ec:71:ed:0e:1d:71:ce:f9:
78:fa:75:8a:0b:13:2f:15:0d:77:71:22:ad:49:b8:
1e:30:12:9b:1e:d5:5e:11:bd:56:04:d4:ea:3d:bb:
7f:c8:79:ef:5b:45:d8:3c:fa:d5:bf:de:c0:0b:aa:
0d:ca:04:ee:50:0a:ae:3f:6c:42:03:b8:bf:3a:0e:
3d:82:d2:33:1d:f5:4a:f0:7f:6e:d6:06:f5:30:23:
40:d0:f8:69:51:b8:2d:d0:c7:28:1d:00:7b:cb:b1:
82:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C8:2D:25:63:7F:37:99:68:DC:57:1D:66:87:C8:99:F7:16:79:26
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:2e:5a:ed:f5:86:7e:93:cb:f2:ee:0d:61:48:85:5c:1f:aa:
95:7a:02:dd:dc:00:6a:17:db:e2:d1:9b:04:47:75:19:ed:a8:
42:fd:bc:7c:69:fe:72:c2:cb:6e:4a:1a:e9:4e:f0:01:7f:1f:
82:ee:ce:17:c9:4f:96:c0:c0:14:aa:97:fc:50:67:5e:04:8e:
d1:36:b3:02:88:c7:b0:9c:54:40:9b:75:8b:18:98:0f:bf:54:
1e:22:2f:6f:55:e2:22:d0:3b:c8:cc:31:d9:29:66:99:bd:48:
81:fe:0e:1f:b2:88:85:94:43:87:6f:2f:61:90:4b:9d:35:d7:
34:53:f0:6b:9b:63:f0:bd:f6:fd:f2:3e:92:5c:6b:e6:3e:b3:
df:71:ca:90:42:33:0c:03:bc:b8:6a:58:0c:33:7a:0b:19:0c:
6a:e2:b1:3e:0b:39:ac:30:ef:08:a7:ce:9c:73:cb:88:98:a0:
74:66:06:5f:96:c7:b1:05:20:f4:a1:f4:20:f6:62:8b:59:3e:
4f:93:40:74:81:f6:4c:9c:58:bc:b2:45:fc:a7:55:b7:8f:7b:
28:c8:41:9e:1e:7f:6d:62:2f:a0:ef:b1:2c:ca:86:d5:be:f1:
79:30:e4:8a:8c:ba:f4:42:a0:ce:87:17:aa:c2:0f:eb:ff:50:
50:73:17:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:00:55 2025 by rpki-client