Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: VB+S7Pz1/dv1bVJkhBw6hPopCgc+vckvBiNI7yZ5FkM=
Subject key identifier: DA:AE:45:6C:46:11:51:51:52:81:3C:F4:C4:B9:DE:6D:D3:D7:52:8A
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019A729387AD565757EB630785993529AC99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1720
Signing time: Tue 11 Nov 2025 11:01:02 +0000
Manifest this update: Tue 11 Nov 2025 11:01:02 +0000
Manifest next update: Wed 12 Nov 2025 11:01:02 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: Nho1Va3ttG6utg/7cu4h2BH7mps8n2u7Fp3fDezZ3dk=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 09:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:72:93:87:ad:56:57:57:eb:63:07:85:99:35:29:ac:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Nov 11 11:01:02 2025 GMT
Not After : Nov 12 11:01:02 2025 GMT
Subject: CN=daae456c4611515152813cf4c4b9de6dd3d7528a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a2:7a:ff:3b:8b:7c:76:80:26:fe:09:c0:3b:
0c:36:96:f8:64:26:d3:08:23:dc:6e:25:48:0a:a4:
ca:cb:ff:33:6e:ec:7a:b4:c1:25:cd:f2:c7:29:c3:
35:28:d3:be:73:00:1e:a7:9d:32:95:dd:80:a8:86:
7d:6d:0d:07:31:c8:56:1f:82:14:97:15:8f:db:4e:
b2:ce:6b:22:a8:0c:16:14:c1:68:0b:a4:57:74:f3:
28:e0:49:ae:d0:48:c1:f2:7e:83:ef:8c:db:cc:da:
3c:82:15:26:03:1e:eb:60:ad:e8:4c:bb:76:5a:56:
de:a2:bd:b8:8f:26:e7:5b:a6:3c:35:58:e6:bc:a8:
6a:fb:b9:96:e5:f6:3e:ed:c7:61:47:c1:23:8d:a5:
f5:a7:a8:82:df:70:50:c3:96:4e:45:e9:e7:31:ca:
c7:f0:c5:4b:6e:57:1f:6d:a1:ec:db:b5:4f:87:4f:
8d:93:1e:73:bf:0e:ea:f7:07:e8:16:c2:b9:82:c8:
af:8e:58:40:22:95:9e:58:e7:dd:40:6b:ce:53:29:
42:7c:2e:db:ee:0f:54:d6:0d:bf:d0:58:05:7d:48:
37:6d:03:c7:6e:9a:23:99:9e:0d:18:ce:c8:58:5a:
9d:17:0d:3e:53:e8:9c:1d:02:0a:56:39:57:00:b6:
3b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:45:6C:46:11:51:51:52:81:3C:F4:C4:B9:DE:6D:D3:D7:52:8A
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8a:55:30:42:14:25:63:0c:70:53:82:73:5c:44:77:0f:66:
a1:d1:e8:2e:b1:e9:ab:b1:04:9b:fe:00:2d:9c:11:80:9a:3f:
ed:a1:4a:71:1b:0e:f5:44:dd:3d:6a:63:ae:09:d1:6f:80:c6:
ca:3f:02:8f:46:ee:ff:86:cd:5c:0f:56:1a:3d:b5:c6:c9:b3:
df:14:84:0d:30:df:62:d7:dd:83:6e:b5:5f:84:d8:5f:5b:34:
e9:67:06:c0:d9:ea:2b:18:67:16:5f:0d:2f:ff:92:a1:93:47:
9c:7f:ce:b7:07:70:97:a0:d4:bb:fd:c7:9c:34:99:e2:94:78:
1a:f0:5e:94:74:43:72:fa:6a:a5:fa:95:48:4c:0f:23:bc:61:
4d:bf:3d:c8:b2:0a:e7:78:93:37:86:a9:8e:ca:04:09:57:7a:
40:f5:3e:99:3d:70:f7:1d:51:60:ff:46:13:0a:d0:1e:3d:21:
46:24:67:75:92:7e:f2:41:7f:87:ae:45:4c:19:8e:ce:b9:14:
74:2d:0f:16:53:ad:de:7a:70:50:32:3e:29:99:32:3c:f4:8b:
78:d6:3c:c2:34:cf:ce:22:d1:d9:e7:5f:13:4a:d5:d9:eb:ac:
e0:e1:ef:51:a7:fe:86:60:90:e5:2e:2d:ce:8c:b8:17:be:63:
d5:dc:5a:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 14:19:41 2025 by rpki-client