Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: RkZcxYIEvN6/8f+fkGfgNSKGqu31tk9s18IAr7pCIog=
Subject key identifier: 67:5A:D0:12:ED:85:1A:C6:AD:0B:E3:DC:2C:C6:3C:9E:E9:DF:6B:F7
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 0199228CCBA0573B05206390592DB297BD14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:16 +0000
Manifest this update: Sun 07 Sep 2025 05:01:16 +0000
Manifest next update: Mon 08 Sep 2025 05:01:16 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: McnqUMnlr+0Ysltq6zr804eKr4AC1pOlDBv3Vg4lFvI=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:cb:a0:57:3b:05:20:63:90:59:2d:b2:97:bd:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Sep 7 05:01:16 2025 GMT
Not After : Sep 8 05:01:16 2025 GMT
Subject: CN=675ad012ed851ac6ad0be3dc2cc63c9ee9df6bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:af:33:68:d8:29:40:22:fa:d3:75:0b:20:c0:
8d:14:e3:fc:c5:29:0e:61:bb:f4:5a:49:da:ec:7a:
35:4f:46:d5:6b:64:45:93:11:82:d9:1f:7d:47:08:
a4:8f:ec:03:ae:a6:b8:5f:e8:8f:73:37:5d:22:9e:
e8:0f:d6:e8:18:55:70:1d:31:ea:69:e1:ff:d8:c1:
57:7e:09:93:ed:71:12:dd:f8:71:05:65:2f:d7:0e:
39:c5:3b:10:12:36:17:97:bd:cf:84:2d:ed:eb:ea:
7f:ce:4d:f9:0e:f7:9f:00:d8:ef:20:0f:e3:f3:16:
af:6e:25:52:bf:7f:48:d4:12:df:e5:81:62:28:9e:
50:1a:6e:dc:e6:20:fa:9e:11:c8:e1:ae:13:0e:6f:
7b:84:fa:cc:2f:68:3c:89:72:06:31:f7:83:af:48:
06:5d:55:4d:65:43:4b:ae:b9:f1:62:fa:79:d2:e7:
f8:04:ac:0a:09:57:b2:24:55:6f:5c:75:f5:48:cb:
65:59:c2:6d:e6:89:98:91:55:73:b2:93:f6:3e:2d:
dd:5f:ff:97:95:82:9d:21:40:b0:ea:53:e9:8b:82:
14:de:e0:2e:d9:3e:7f:7a:18:8c:a6:9d:2d:cb:73:
f6:53:3c:db:4e:ae:22:43:07:2f:82:7f:b5:4e:c4:
52:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:5A:D0:12:ED:85:1A:C6:AD:0B:E3:DC:2C:C6:3C:9E:E9:DF:6B:F7
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:39:74:66:03:ae:e1:24:bc:39:c8:5a:a4:93:33:3e:fe:e7:
af:69:a4:f5:f5:b0:1c:35:52:3a:76:19:92:cc:51:90:88:55:
09:aa:b6:9a:d9:b2:37:fd:02:bb:f6:20:96:4b:3b:d3:08:18:
fe:be:dd:02:37:6f:0c:00:30:33:e3:33:b1:09:98:a3:86:59:
91:ee:af:0a:d9:82:9b:84:3d:ab:22:12:94:7b:6e:d1:0c:33:
48:9b:29:e3:4c:ae:c3:e5:5e:08:63:bc:07:61:c2:b8:89:5f:
6f:5b:e0:b1:9f:75:42:a3:08:89:13:e8:70:e7:1c:48:0f:9f:
fb:6c:e3:d7:12:08:c3:35:93:94:a8:5a:b3:71:b1:62:1e:37:
e4:a4:47:4b:46:36:2c:9d:db:e4:2c:5c:d2:9a:74:b6:37:4a:
4c:02:a5:40:20:1d:1d:a2:54:ca:b4:d1:8b:b8:49:14:0d:d9:
3b:ab:89:d3:68:dc:92:6f:b0:04:92:23:82:28:5a:6c:84:86:
a5:92:8f:1f:0a:9c:2a:c8:28:19:28:7c:08:dc:47:2a:6d:c0:
9e:45:0c:e4:1b:a3:17:81:10:f7:da:ed:8b:37:99:02:b9:de:
68:bf:ef:b1:64:97:18:20:dd:16:7d:42:11:0b:19:c9:b2:e7:
7c:a1:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:49:45 2025 by rpki-client