Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: T6Mf+OAlWoQGol+tXXXwbWV0MpavEDyjBv5ojWcj5JI=
Subject key identifier: 96:06:27:DB:28:AB:02:DD:AF:B5:C0:14:A4:6D:DC:88:DB:AC:06:09
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 01974A43993062F016341CFBAE6BAE953E54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0BAC
Signing time: Sat 07 Jun 2025 12:00:33 +0000
Manifest this update: Sat 07 Jun 2025 12:00:33 +0000
Manifest next update: Sun 08 Jun 2025 12:00:33 +0000
Files and hashes: 1: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (hash: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: EVW121M9Ww80DTCFMPoLkLjogvBJkBnqI7l3QLVz7Js=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 12:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:99:30:62:f0:16:34:1c:fb:ae:6b:ae:95:3e:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Jun 7 12:00:33 2025 GMT
Not After : Jun 8 12:00:33 2025 GMT
Subject: CN=960627db28ab02ddafb5c014a46ddc88dbac0609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:05:84:7c:8d:0f:2f:38:50:1e:e9:61:d8:7a:
29:6c:9b:bb:1e:6a:e0:6a:80:18:16:36:98:f4:e7:
32:f0:86:44:94:07:34:44:c0:41:ee:64:20:85:0e:
7a:ea:04:60:ed:8b:42:27:d9:fb:28:4a:c0:6e:22:
1d:9b:01:fd:a5:f4:21:2b:60:68:a1:c3:80:91:97:
d2:60:71:6e:e3:d3:6c:3e:13:21:a7:c8:4d:d7:25:
c1:c0:23:83:3f:11:72:2e:89:2d:d0:f7:38:b6:3e:
af:ef:b7:47:88:65:c3:c5:8e:a8:f4:87:dd:05:24:
0f:75:c6:df:97:a0:27:be:58:63:c6:b4:1e:0a:c9:
ca:c9:b1:bb:25:7b:6e:7f:b9:23:5f:c3:3c:b4:2b:
59:0a:aa:92:f0:73:86:cf:e3:fd:ec:9c:71:87:2a:
4a:b6:3f:f4:05:3f:f8:36:83:a3:12:dc:d4:2f:92:
97:62:b2:5d:50:18:dc:60:74:fd:7a:9f:62:fc:35:
29:c7:20:73:ec:5b:fa:f4:e7:3b:02:7f:35:c7:c1:
f1:e9:dc:2b:22:9e:49:0d:0c:83:7e:88:44:52:60:
7a:4a:5f:14:07:f2:62:83:8f:f5:f9:40:20:2c:1f:
37:fe:b9:26:b7:7d:20:fe:b7:d5:60:94:fe:88:b7:
1b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:27:DB:28:AB:02:DD:AF:B5:C0:14:A4:6D:DC:88:DB:AC:06:09
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1e:cf:45:21:ca:b0:fe:0e:01:52:f5:40:72:2e:ea:6e:a9:
8a:21:85:ba:96:6e:5b:5d:ef:0b:7b:12:24:29:26:b2:41:22:
25:56:cd:b1:2b:9a:4b:c5:23:c7:3e:4f:fd:51:07:fe:96:fe:
2e:d8:eb:45:d6:d3:df:6b:98:27:e2:13:78:cb:10:50:c6:31:
bc:f6:65:8d:bd:23:40:ec:e9:08:b7:78:5f:a1:ae:15:bd:b4:
63:01:71:b1:bf:10:ff:5c:2a:94:fd:c5:79:65:32:69:8e:20:
d4:f6:2c:c7:51:92:50:9c:9a:63:68:98:a6:01:01:31:45:6e:
bc:d0:a9:8d:2e:15:59:a4:b0:50:8d:33:3c:87:cf:e1:4e:33:
82:b9:ad:6f:03:8f:ae:4c:0f:5b:1e:b4:9d:6d:16:b9:9d:2e:
9b:38:89:72:58:50:7c:b3:ad:94:f8:eb:c3:14:c8:9b:b3:88:
bb:ab:ee:0d:79:1e:aa:59:74:06:ee:6e:95:43:8d:c4:7d:ef:
ab:02:dc:d2:fd:1f:9e:bf:e9:cd:47:42:72:a8:8d:a3:e2:40:
3e:75:fe:55:64:1d:80:bd:43:d8:04:83:06:cb:28:a6:f0:17:
69:56:40:18:b1:ee:94:ff:47:74:ff:3a:e6:2a:14:5c:a7:19:
95:62:0e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:56:20 2025 by rpki-client