Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
File: ACQ0xzoO6iLG5EEHLpPbd8foovE.mft (raw, json)
Hash identifier: UdgKdcbWfy9tRH3C8suuFwjnLUk+cWgh3Ng+AU8zDVk=
Subject key identifier: D9:9A:FF:4D:F3:95:74:53:C7:30:D1:85:52:CE:A6:30:6E:1B:01:2D
Authority key identifier: 00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
Certificate issuer: /CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Certificate serial: 019936F0D6E95588A1D1616982234D85E44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
Manifest number: 167D
Signing time: Thu 11 Sep 2025 04:02:57 +0000
Manifest this update: Thu 11 Sep 2025 04:02:57 +0000
Manifest next update: Fri 12 Sep 2025 04:02:57 +0000
Files and hashes: 1: ACQ0xzoO6iLG5EEHLpPbd8foovE.crl (hash: 4tV7SAZzOfIPP3BH7VNJ+kc6nDKZMkJYT7McM8f7sUo=)
2: cHH8n9jIhtvEhfYf9DzKMDe1sMM.roa (hash: 24RyHXYm2+n9v+uk7dd0yGKCI/vamDa6gkuFRLODvdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:f0:d6:e9:55:88:a1:d1:61:69:82:23:4d:85:e4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002434c73a0eea22c6e441072e93db77c7e8a2f1
Validity
Not Before: Sep 11 04:02:57 2025 GMT
Not After : Sep 12 04:02:57 2025 GMT
Subject: CN=d99aff4df3957453c730d18552cea6306e1b012d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ec:ef:00:ba:cf:01:d0:18:ec:2c:0e:78:81:
7d:03:55:4b:78:a1:1a:ad:23:5b:c1:ce:69:f4:0e:
41:48:fb:1f:20:1e:2f:67:bc:dc:81:0f:9c:1b:2d:
de:ce:1c:31:8f:44:3e:a1:6e:9b:8a:c8:7c:c8:a0:
f0:eb:d0:9c:07:0d:b5:64:5b:53:e1:63:04:d0:aa:
b3:85:50:ee:b4:2c:74:2c:ac:d6:cc:6c:74:bd:b4:
9c:e2:d6:48:fa:e0:0b:dd:87:c0:05:2c:95:b3:55:
d7:0a:a7:a6:5d:3d:a7:06:db:83:25:e2:7e:c7:3d:
f1:77:4f:8b:af:a3:eb:ff:5d:69:46:04:85:4e:87:
ee:79:10:a5:f7:b1:06:93:a1:89:3f:63:63:d7:ce:
d8:83:ad:4b:d5:d0:e8:ec:cd:75:3b:25:9e:fb:69:
40:79:5a:99:07:37:3d:5e:97:be:13:9c:60:a4:f2:
07:d8:1d:4e:c2:81:1c:98:3a:ce:e4:f0:ec:69:4c:
56:b0:49:35:c0:12:b1:58:09:8c:37:a7:eb:3f:6e:
47:23:28:09:b1:17:de:b7:fa:45:bb:71:68:76:7e:
ea:e5:30:38:cd:7b:3e:ee:d8:c8:58:36:2c:f0:7a:
b6:ed:04:b0:e4:c1:28:43:76:e7:c4:1a:7b:db:7f:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:9A:FF:4D:F3:95:74:53:C7:30:D1:85:52:CE:A6:30:6E:1B:01:2D
X509v3 Authority Key Identifier:
keyid:00:24:34:C7:3A:0E:EA:22:C6:E4:41:07:2E:93:DB:77:C7:E8:A2:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACQ0xzoO6iLG5EEHLpPbd8foovE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/403ddd-c2d5-4b54-973a-2b7a794d5795/1/ACQ0xzoO6iLG5EEHLpPbd8foovE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:de:95:eb:d7:6c:9e:7c:38:2a:f2:1d:06:94:a6:79:58:6b:
ce:21:0c:b5:dd:7c:86:54:0b:40:a1:cc:b0:27:bc:3a:cc:18:
95:9b:21:9d:87:79:ec:48:a0:e3:14:c5:df:33:dd:f0:15:50:
4c:ec:d5:6c:40:20:21:70:1e:4d:7e:5a:e5:89:1f:72:12:2f:
9e:70:21:e9:2c:42:d1:74:62:c9:32:1a:1e:51:2b:b1:03:2e:
85:48:ff:08:da:d6:b8:78:49:6d:5a:31:5f:92:be:cf:52:b8:
00:f2:8d:4c:b0:1f:b4:c3:99:29:ba:b7:ce:42:b4:e9:bd:5e:
92:fb:a5:67:86:68:16:0c:80:5d:ec:8f:86:58:b6:5e:c5:56:
96:ca:0c:44:84:c2:5b:b7:01:17:5f:ca:0d:e4:84:51:34:a1:
23:de:03:65:25:30:b7:84:5f:30:ac:52:05:46:f3:ee:e0:69:
c4:18:a5:d9:06:9f:fe:be:28:80:75:0d:20:70:26:30:89:b2:
39:1e:f9:cf:a8:7e:13:6f:8b:3b:d8:98:58:29:f5:fe:41:b8:
6e:97:a1:e0:49:6b:f7:2f:1d:a8:c2:0e:68:09:15:a3:70:00:
ac:62:d6:1e:30:2a:1c:ed:80:9f:ec:4b:e8:3f:7c:e1:6d:45:
6e:42:28:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:49:39 2025 by rpki-client