
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: 8ACMyzOQk7cxoJBgBAz0YoO6ul0zzohhaZFIj5jMts8=
Subject key identifier: 73:F9:C2:80:67:2C:FD:28:A1:C0:3A:92:FE:AC:A8:48:01:A1:B7:7C
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019766601BA40C0017FCB67BD72259C494FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 158C
Signing time: Thu 12 Jun 2025 23:01:03 +0000
Manifest this update: Thu 12 Jun 2025 23:01:03 +0000
Manifest next update: Fri 13 Jun 2025 23:01:03 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: ZoQJtA0EZ0nLTO8NmOVpfkp7aUleDw1vQdRhNWh9r4k=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:60:1b:a4:0c:00:17:fc:b6:7b:d7:22:59:c4:94:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Jun 12 23:01:03 2025 GMT
Not After : Jun 13 23:01:03 2025 GMT
Subject: CN=73f9c280672cfd28a1c03a92feaca84801a1b77c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:32:16:25:d6:fb:19:e7:2e:3c:ed:fe:ad:0d:
3a:9b:ba:e1:91:ac:22:68:f9:74:e3:3b:d5:56:f7:
e7:9d:4a:fb:62:0e:58:b7:b3:d1:0e:11:8b:eb:1e:
22:23:b2:18:ee:71:9f:84:71:64:26:c3:04:50:b0:
d1:9a:38:68:d8:71:f1:6a:cb:d6:f8:10:61:9f:ec:
e8:c8:ca:f6:1b:77:78:ca:cb:e3:d1:41:a9:28:8f:
82:ce:aa:9a:f8:29:31:df:54:91:ee:1d:3c:03:7a:
2f:a8:63:5e:9b:6d:6f:2f:44:59:48:97:1d:f4:70:
71:40:25:5f:ec:aa:0c:28:4c:d8:d2:83:da:01:b8:
96:d5:91:71:e3:6e:d6:4d:c5:a0:40:ea:01:27:71:
a4:73:d8:67:39:68:f0:a3:66:92:81:d7:6d:bd:1e:
b4:b2:c0:e0:e5:4f:6b:a1:5c:b0:55:0d:08:0a:8e:
bb:05:8a:3f:73:b8:f7:4a:d9:6e:bd:ef:ae:15:f8:
79:a9:44:d3:c3:e8:2b:72:13:b3:40:5f:fe:75:62:
a9:cb:76:b5:06:d7:df:32:3b:76:f0:3e:cd:b8:25:
3f:f0:e5:9d:7f:b2:b5:32:b5:7e:a9:f9:87:1f:f2:
65:65:18:86:25:72:93:5f:cb:bc:4b:90:0b:74:92:
e0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F9:C2:80:67:2C:FD:28:A1:C0:3A:92:FE:AC:A8:48:01:A1:B7:7C
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:fd:23:92:51:ce:f8:6e:c8:8a:4b:d2:e4:50:63:3e:f6:e1:
59:f4:61:45:93:12:94:26:7f:cd:b6:1d:3e:86:9e:cc:de:06:
6e:5a:bf:f1:b7:fb:b8:d1:a2:23:20:a8:0b:a4:1d:06:67:48:
37:d8:53:cf:a7:b5:6b:d0:bd:b1:b5:ba:37:78:df:1c:dd:1a:
e4:c9:33:82:43:6a:43:7e:ff:a8:d7:c0:70:df:6e:48:db:07:
e6:c9:b6:4f:40:4b:ac:ed:29:e0:38:f1:2c:3a:b6:df:c6:89:
14:5b:e7:66:d5:a1:f1:6e:ff:be:bf:c8:e8:79:06:98:e2:8e:
ef:70:cb:94:b4:19:91:4e:84:1e:1f:ce:84:e5:30:fc:cd:57:
77:fc:1b:85:ea:0b:12:2f:77:8e:39:50:90:8f:62:72:78:2e:
d6:0e:62:af:d1:bd:66:17:bd:21:a5:ed:ee:f4:ea:11:81:59:
b1:57:89:d1:d1:32:e3:b4:b9:7d:07:5d:e8:15:fc:5c:bb:22:
23:8e:21:95:11:a0:f9:d0:8b:d1:cd:40:78:f0:d8:de:b7:1e:
5a:e5:d0:23:83:79:96:0d:e2:27:3d:51:84:62:9d:ed:64:b9:
a2:cd:56:1f:79:d2:66:7f:90:35:a3:97:43:5c:4e:be:24:d4:
37:e0:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 05:44:41 2025 by rpki-client