Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: yDeb3lagQQSP2R5f8nTfb8YgxodMArZHHHwteT5RfIY=
Subject key identifier: E3:2A:A8:4E:66:FB:EE:E9:B8:EC:4D:1C:30:E2:20:3E:FB:9D:B3:03
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019921B27F8DFA6BF87359ECCB0C16CCB69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0A02
Signing time: Sun 07 Sep 2025 01:02:49 +0000
Manifest this update: Sun 07 Sep 2025 01:02:49 +0000
Manifest next update: Mon 08 Sep 2025 01:02:49 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: hqegkezOTGU2X9IK7ofnB1H4VdgiPSmfMdlRm5ey/Dg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:7f:8d:fa:6b:f8:73:59:ec:cb:0c:16:cc:b6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Sep 7 01:02:49 2025 GMT
Not After : Sep 8 01:02:49 2025 GMT
Subject: CN=e32aa84e66fbeee9b8ec4d1c30e2203efb9db303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:59:40:2e:fd:6c:f1:31:ac:43:2e:40:9a:
9d:e0:a2:54:9c:fe:06:43:e8:1b:32:64:e9:af:69:
9e:2e:f4:37:2e:dc:0c:f0:07:5f:6e:66:72:e9:cf:
f3:10:0f:4f:6e:42:09:7c:b6:9e:55:b0:13:1f:e1:
20:08:d2:d6:f6:93:65:a4:c0:b4:2c:80:9a:b6:28:
8a:ca:c2:61:fc:ad:02:95:0a:1e:3a:a2:6a:5a:4d:
fc:7b:59:5a:7e:30:1c:5a:c5:f7:a3:a5:87:2a:3d:
50:25:3a:a1:28:ea:73:68:3b:6c:e9:ed:90:27:57:
01:e5:27:a7:c6:ed:f9:aa:08:f2:ab:9c:1a:62:86:
a8:6c:12:af:d7:09:91:a1:a6:7e:d5:09:77:1d:36:
28:d2:5a:92:26:95:d3:8a:df:25:c3:3c:b3:af:12:
3f:5f:98:d8:b1:c2:61:f7:19:ac:f2:9d:32:8b:a6:
c7:c1:a8:57:ec:b7:6e:80:cb:59:d6:cf:19:e3:c5:
c7:f8:9a:3e:69:ff:75:6a:a3:bc:71:cf:eb:69:87:
8a:2c:f8:11:64:50:2b:6a:7c:da:35:2c:f5:ee:d2:
59:bc:a6:88:1f:08:4f:1c:33:d5:ef:00:7a:07:04:
7d:f6:a9:aa:41:17:de:35:d0:64:f5:10:18:82:51:
f4:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:2A:A8:4E:66:FB:EE:E9:B8:EC:4D:1C:30:E2:20:3E:FB:9D:B3:03
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:5e:e8:ff:1d:7d:0b:cb:1c:01:4d:84:3f:f2:98:00:e5:4b:
86:aa:26:a4:84:a1:c7:b1:46:dc:87:1e:e5:1b:f3:22:45:7f:
5f:27:52:8b:65:4d:8a:ca:be:9b:3d:fc:3b:7d:b1:2d:b7:0f:
ce:96:d3:60:77:54:38:a6:ea:ac:4b:a8:97:c1:36:74:26:ec:
f3:9e:ee:5d:0d:0d:1c:c4:1c:f3:ab:8b:e9:2e:67:9a:ed:c7:
78:1b:35:5c:d4:40:db:a1:3e:53:cb:04:d5:55:06:b2:ed:bd:
72:f5:11:95:85:0e:c0:27:12:35:09:3e:11:df:58:a0:f8:02:
96:4b:88:7d:66:f9:af:c6:00:5a:48:4a:c3:22:8c:9e:19:eb:
89:81:ba:1d:39:4a:1b:03:6a:c2:14:dc:82:91:3b:36:c4:60:
b8:af:9f:6a:27:00:0f:a6:cb:19:80:e6:4e:60:dd:c3:52:79:
9b:6b:1b:13:71:cd:02:2c:32:71:45:16:7f:81:9f:4d:db:47:
70:36:ea:78:3d:5c:f0:82:68:c4:ef:a0:fc:2f:92:69:a5:7a:
ba:f7:c7:95:e9:87:1f:b0:d6:a4:36:1a:df:3d:74:31:db:58:
68:62:2e:77:4a:52:90:6a:b9:8e:a5:5c:b0:18:a9:44:43:83:
15:a5:c7:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:41:12 2025 by rpki-client