Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
File: ACzThauQKWJxijm7ez7JmqQE5cA.mft (raw, json)
Hash identifier: kQcj0tMZwGdxZlFE6tpLQMfEasX2RgU1AGlmpa8P25g=
Subject key identifier: D0:9D:14:64:77:F0:7F:4E:5C:F8:85:04:BD:3B:2B:4C:5A:D4:1F:03
Authority key identifier: 00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
Certificate issuer: /CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Certificate serial: 019A71B8B747E20F949145CF0501DD4F010C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
Manifest number: 0AB0
Signing time: Tue 11 Nov 2025 07:02:02 +0000
Manifest this update: Tue 11 Nov 2025 07:02:02 +0000
Manifest next update: Wed 12 Nov 2025 07:02:02 +0000
Files and hashes: 1: ACzThauQKWJxijm7ez7JmqQE5cA.crl (hash: vj04i8IbpAAYFjgChsOTVkXqAKxocrIz7cpp8LrY/m8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 12 Nov 2025 07:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:71:b8:b7:47:e2:0f:94:91:45:cf:05:01:dd:4f:01:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002cd385ab902962718a39bb7b3ec99aa404e5c0
Validity
Not Before: Nov 11 07:02:02 2025 GMT
Not After : Nov 12 07:02:02 2025 GMT
Subject: CN=d09d146477f07f4e5cf88504bd3b2b4c5ad41f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b1:66:6e:e3:c7:3b:ff:1e:16:ac:f3:36:e3:
5a:dd:5b:8b:18:48:c4:50:83:2b:6c:ca:f0:ad:48:
07:0e:04:4c:ac:a5:65:b3:7d:83:60:c3:da:d2:b4:
f9:b8:ca:09:1b:f2:3e:03:dd:ce:d1:7c:26:c2:af:
27:a2:51:21:e1:d0:8d:06:19:0b:1b:c2:6f:88:46:
db:99:a8:21:f0:3b:67:bf:86:ef:62:a0:5b:68:3c:
f7:b0:a4:11:9b:80:f5:76:6d:9b:02:fd:8e:17:d6:
be:c3:9f:4e:08:01:3e:d2:16:65:23:13:14:23:41:
49:f5:20:fc:47:6d:1f:e5:ed:7c:8a:d3:00:1f:9d:
f3:3d:b5:e1:38:c1:8b:26:b8:c8:60:56:eb:ca:9e:
ad:0f:15:71:c1:53:91:ce:df:26:24:c4:17:74:2e:
40:97:58:46:11:d7:b8:c7:f5:e8:10:d4:00:32:e5:
c8:d0:02:0e:de:23:03:71:35:bb:1b:bb:b0:11:f3:
4a:b6:3f:30:02:a3:bd:42:09:95:ad:73:34:db:ce:
34:d2:4f:2a:af:8a:5e:22:bd:c2:33:72:c7:da:5c:
a8:c2:59:15:0a:f2:0b:2a:cc:cb:66:9c:51:57:01:
48:26:c9:dc:8a:92:cb:89:e9:66:6e:7b:7b:bc:d9:
4c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9D:14:64:77:F0:7F:4E:5C:F8:85:04:BD:3B:2B:4C:5A:D4:1F:03
X509v3 Authority Key Identifier:
keyid:00:2C:D3:85:AB:90:29:62:71:8A:39:BB:7B:3E:C9:9A:A4:04:E5:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACzThauQKWJxijm7ez7JmqQE5cA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/cf5f30-e7d0-4ad3-8987-e235d90f6471/1/ACzThauQKWJxijm7ez7JmqQE5cA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:88:ad:a6:ab:ad:14:1b:92:87:21:e2:89:b3:91:7c:7f:e5:
fb:1d:fd:be:eb:33:35:27:74:4e:11:67:d0:86:1d:01:5c:d3:
53:6c:9d:78:90:86:b7:12:d6:fb:1d:61:58:f3:1c:99:f8:fc:
53:c7:6d:e6:ee:02:c8:1e:f2:ef:58:94:8b:bf:cf:5f:f5:95:
28:d4:9e:67:43:7a:98:3c:df:65:34:5c:cc:a9:21:d4:87:7a:
74:d4:dd:a6:a7:2d:bd:05:23:91:69:e2:80:e3:55:ff:a3:70:
ee:ee:a6:4c:89:da:2e:8a:f5:7b:58:a5:ce:8f:ab:30:70:58:
2c:30:a3:86:be:03:db:01:73:a7:62:2f:ba:7b:8e:f7:df:93:
11:9c:14:12:51:6d:44:c9:95:16:f1:94:52:97:c9:cb:05:4b:
99:07:cc:1e:45:63:d2:ce:95:1e:58:0a:45:fc:ab:0e:cd:c1:
ad:b7:5a:c2:79:39:74:71:82:cd:c1:a6:93:26:b4:34:36:b3:
74:3f:64:a1:70:9f:e2:fc:24:b4:9a:23:64:e5:c4:49:2d:14:
54:7b:dd:0e:dc:90:88:2c:ae:e0:17:fe:9f:b4:19:80:6a:4f:
80:7d:16:3e:60:a9:99:04:38:cb:a8:d6:19:0c:83:ed:25:d3:
04:99:9b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 11 12:45:38 2025 by rpki-client