Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: QeN1fxaCK5KQlol8uVaCWftlivD31+2NPy/2lr8XO44=
Subject key identifier: EE:C1:DA:3B:76:60:DD:EF:F6:E2:C8:29:5F:D0:F3:75:8E:81:C4:90
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 019921B0FB86356D5FB847F261227983B56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0CA0
Signing time: Sun 07 Sep 2025 01:01:10 +0000
Manifest this update: Sun 07 Sep 2025 01:01:10 +0000
Manifest next update: Mon 08 Sep 2025 01:01:10 +0000
Files and hashes: 1: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (hash: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: N4CGyi7h3H9PgGK1nLELtEj1Zy2ol1+ezuGp1nWLoNU=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:fb:86:35:6d:5f:b8:47:f2:61:22:79:83:b5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Sep 7 01:01:10 2025 GMT
Not After : Sep 8 01:01:10 2025 GMT
Subject: CN=eec1da3b7660ddeff6e2c8295fd0f3758e81c490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:a6:5b:e9:79:f4:59:fc:36:4c:39:b0:0e:
ca:4e:e7:5c:d9:ae:f3:00:7b:12:f5:52:68:03:fb:
95:20:33:41:fe:be:31:9d:d0:1f:37:0b:d4:0d:11:
f7:7c:71:78:40:13:d7:11:8d:0c:66:a5:f1:34:6a:
23:46:d0:a9:e1:ce:b6:5b:76:f3:45:21:44:cc:50:
c2:97:ea:dd:b5:5b:07:32:72:52:ea:b7:0b:0d:2c:
3f:ca:33:a4:29:cd:e0:2c:1b:55:4e:1f:17:3e:db:
da:b0:4b:ac:4f:ff:ba:4b:39:7f:53:69:76:38:76:
f3:60:6e:0b:d6:17:4c:85:6f:6e:4b:86:a8:40:8b:
b6:93:b0:fc:1a:43:76:85:2f:c5:7f:e7:d0:43:1a:
e1:6e:ca:af:2a:8f:fb:53:59:07:f9:64:40:38:2d:
7a:23:dd:93:3b:02:70:34:86:de:85:bd:76:e0:ce:
a2:04:a0:d7:05:c3:2f:ee:b2:fd:c1:fd:07:39:dd:
b8:9c:5f:76:fe:8d:96:4c:81:de:e7:65:15:db:bd:
d8:90:b4:b7:83:0c:0a:e4:6d:e9:01:a2:06:90:1e:
c2:fb:65:53:24:29:e0:01:6f:c1:83:ac:7b:5a:58:
4b:60:49:c6:a5:de:77:e4:36:85:65:f0:5b:b1:ef:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:DA:3B:76:60:DD:EF:F6:E2:C8:29:5F:D0:F3:75:8E:81:C4:90
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:67:d2:78:87:3b:a0:24:51:c5:b5:50:77:b2:b3:c5:b3:c9:
83:9c:f8:a6:04:af:42:57:3e:30:9c:50:23:a1:da:2b:69:8b:
64:c6:31:ad:c5:77:71:03:03:3c:e4:40:13:a0:79:ad:71:4f:
06:97:38:b7:d5:32:17:2d:7c:e7:e3:74:b4:09:a5:96:41:8c:
56:41:4e:c3:c3:bc:96:ee:68:2e:d3:14:06:5a:bd:0d:02:e3:
52:4e:7a:12:ab:75:17:29:b7:5c:a6:e8:7d:e8:92:fc:45:78:
df:d1:e6:b0:37:e9:ee:9e:8e:a2:04:74:67:39:de:dd:49:97:
8f:f8:d0:42:f1:ba:e8:de:d6:73:3d:fa:06:4f:fd:64:18:14:
c3:d5:0c:71:ac:1e:71:78:00:5b:33:ef:14:a7:19:59:45:1c:
df:13:8d:4e:ec:a9:14:93:39:95:2a:6e:6c:70:a3:c0:e2:23:
4d:ac:e2:47:a0:9a:f7:2f:b8:0a:69:a7:dc:d7:d8:dd:45:a5:
00:3c:a3:04:44:d7:b3:ac:1f:b0:94:78:26:ac:2a:27:c3:e8:
9e:08:3b:73:c1:bc:3a:51:10:8d:7c:11:9c:5e:2b:09:fd:1f:
19:05:fb:11:6e:58:8a:8d:3b:fb:da:18:5c:04:8b:79:47:dc:
e2:ff:24:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:06 2025 by rpki-client