Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
File: AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft (raw, json)
Hash identifier: BIcpatzjS3WObdEIk8y1//0jMctc83A2ZW2lDQ3XIgo=
Subject key identifier: D1:58:31:5A:F3:57:D8:5A:5C:46:00:E1:68:F7:96:8F:C5:83:69:15
Authority key identifier: 01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
Certificate issuer: /CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Certificate serial: 019A7149ECDA9ACD25839445D16ECB1BC5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
Manifest number: 10B1
Signing time: Tue 11 Nov 2025 05:01:01 +0000
Manifest this update: Tue 11 Nov 2025 05:01:01 +0000
Manifest next update: Wed 12 Nov 2025 05:01:01 +0000
Files and hashes: 1: AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl (hash: ehlxL2jyHzzYgXvKlBpn36apqObPDNWZ20kuGSfSRBM=)
2: lnFBPEwYXwbrEbBc_1U4hqBIiD0.roa (hash: pkORWbBvX/TB59ufAxJ53BtkrDGiG+iuAuMuYoIsXog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 05:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:49:ec:da:9a:cd:25:83:94:45:d1:6e:cb:1b:c5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c352118fd5f75454cfc61be61a42abef4dc4f8
Validity
Not Before: Nov 11 05:01:01 2025 GMT
Not After : Nov 12 05:01:01 2025 GMT
Subject: CN=d158315af357d85a5c4600e168f7968fc5836915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:31:33:58:80:33:7a:80:17:9b:6e:9b:d9:96:
4c:c9:f0:3c:64:d5:d2:90:13:f0:55:e3:8f:3b:44:
42:1e:a2:de:80:38:bc:bd:23:97:58:7d:d5:33:b9:
95:e3:0c:f8:15:b7:14:9c:41:89:03:a7:fa:8f:45:
e2:84:47:0d:19:c7:8b:f3:b0:7e:d1:31:13:6b:78:
ef:12:0f:16:60:a4:54:05:78:2f:f9:72:c1:ef:8f:
7d:ae:d2:c3:ae:30:c5:54:c9:81:bc:ab:75:a8:9f:
e2:8d:c9:2c:81:20:2d:1a:72:60:c0:74:f6:55:8b:
ea:f2:6b:6a:55:97:a2:23:94:bf:16:bc:3d:61:df:
a6:d4:2d:ae:0e:a0:15:fd:9a:e8:99:f1:9d:7e:55:
9e:15:3b:5a:f3:53:b4:8c:f0:70:e5:9f:dd:0a:90:
f7:91:9f:fb:f7:18:02:61:f5:2d:ce:1f:cf:93:05:
46:02:ca:7a:1d:c2:9f:a5:c7:13:5a:47:80:0b:34:
19:1d:db:6a:81:8b:cd:cb:12:c3:cd:99:c5:40:4b:
a5:03:8d:71:b5:1b:e3:9b:c7:38:7d:7d:ed:27:fb:
4f:33:51:f4:d0:ae:a3:a0:b0:57:88:c7:5e:18:68:
98:cf:e8:f8:47:00:54:13:cc:a0:5d:e4:dd:f9:37:
a8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:58:31:5A:F3:57:D8:5A:5C:46:00:E1:68:F7:96:8F:C5:83:69:15
X509v3 Authority Key Identifier:
keyid:01:C3:52:11:8F:D5:F7:54:54:CF:C6:1B:E6:1A:42:AB:EF:4D:C4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcNSEY_V91RUz8Yb5hpCq-9NxPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/5e8a2a-4573-436b-902a-ef01e1dc7dac/1/AcNSEY_V91RUz8Yb5hpCq-9NxPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:87:c6:b0:f6:cc:b6:14:13:94:6b:ce:76:73:d4:6e:6b:
6b:46:05:47:da:1f:9b:d6:21:de:3e:7c:8c:59:43:0c:2c:fa:
18:02:77:cb:eb:28:f4:ff:76:0e:84:35:2f:27:c0:d0:87:ae:
b1:1b:a1:4d:c3:3d:ac:1e:fc:a4:49:81:cd:d3:41:24:0d:b5:
06:8a:ac:72:06:84:6b:d7:50:d2:44:1b:e4:e0:79:22:d9:8f:
24:c2:1e:77:1b:c4:6a:c3:ee:7c:ca:9e:7e:bb:b0:7b:1a:1b:
3b:73:c4:05:f2:9a:70:97:cd:44:df:e6:52:9e:91:23:ec:2f:
d8:8f:83:76:6b:02:26:43:0f:4a:71:04:da:95:b9:c8:79:d1:
b3:33:0e:49:e8:4b:6e:71:3c:ff:70:b3:97:ff:89:90:92:a4:
6d:a9:c0:29:de:65:ac:a3:4e:73:e1:e3:b1:7b:09:85:6d:2e:
d5:dd:cf:d0:8d:3c:52:34:22:74:a7:e7:77:f4:70:bc:10:00:
cf:a2:bf:d8:fc:4b:e4:fa:61:62:40:ce:5c:c8:91:0d:0c:52:
bc:a3:c7:13:86:85:b4:11:e6:a5:5b:27:89:62:85:eb:68:70:
da:99:55:48:f7:56:dc:7f:a0:d9:2c:4f:d7:bc:ad:2d:4c:c4:
be:99:7b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:54:59 2025 by rpki-client