Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: kOsPQkCkMFJkL3izJYMlkRn//xhF6fbSyGo1deKzgG4=
Subject key identifier: 7E:44:A4:CE:D5:E2:AE:E9:23:66:C3:29:2B:0B:4A:27:8D:33:8F:B4
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 019A2AE7DFE0D66EEC2C36D9D7C35B8B71DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 0585
Signing time: Tue 28 Oct 2025 13:00:30 +0000
Manifest this update: Tue 28 Oct 2025 13:00:30 +0000
Manifest next update: Wed 29 Oct 2025 13:00:30 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: 4XaP2lrvZAGq6zyA43CmWDtXpCTmzNmxelK1EaflJLY=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Oct 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:2a:e7:df:e0:d6:6e:ec:2c:36:d9:d7:c3:5b:8b:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Oct 28 13:00:30 2025 GMT
Not After : Oct 29 13:00:30 2025 GMT
Subject: CN=7e44a4ced5e2aee92366c3292b0b4a278d338fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:57:a0:9e:56:b1:6c:af:bb:0a:a2:ef:a5:ad:
43:0d:7f:5a:68:17:7d:78:8c:d5:19:5b:ce:21:de:
71:4e:c4:5e:4c:83:ee:2d:e9:b4:b2:58:04:51:fd:
f2:07:da:fc:1a:fe:26:e2:6e:55:7d:70:95:d1:4f:
83:d5:c0:69:b6:22:dc:b8:90:9c:15:27:9c:13:da:
bf:8a:35:a1:ea:12:e7:37:ae:89:ad:fe:0c:f8:eb:
36:4f:60:04:76:34:82:e1:77:2f:84:55:e3:5a:ff:
61:35:91:29:f1:71:5f:88:da:9c:34:9c:16:87:f8:
d4:55:be:96:fc:e8:99:7b:46:59:b2:76:fd:35:04:
ca:a9:67:0e:f0:e7:de:34:0e:23:84:f1:da:81:69:
83:3c:64:8a:73:e6:cb:d7:f3:e6:f3:df:55:b5:d3:
6d:fe:59:e2:42:af:82:48:d7:4b:07:b8:42:a1:88:
47:bc:26:9d:82:25:f0:53:38:50:3f:9c:2d:cc:68:
a6:a2:7b:d8:89:96:f4:71:df:88:40:7f:ed:06:f6:
61:e7:ae:d1:43:a7:f2:32:4d:26:1e:f7:dc:0a:e2:
50:e0:77:98:88:bd:42:b9:6e:4f:50:f9:e6:aa:0c:
f3:db:e8:67:66:62:0c:03:12:80:c1:46:87:d1:fa:
da:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:44:A4:CE:D5:E2:AE:E9:23:66:C3:29:2B:0B:4A:27:8D:33:8F:B4
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:49:27:8b:ce:54:8e:cb:43:c5:34:99:03:43:00:e3:d2:37:
3e:e7:ff:22:6f:fe:e3:cc:73:81:e3:bb:34:25:e5:61:72:ad:
a0:4d:0b:c2:2e:0e:61:2e:fe:ac:24:d0:69:b3:a1:f1:2c:36:
75:63:c1:ab:52:cf:d9:03:95:ee:5b:22:d6:ca:92:88:2a:3e:
ed:fa:15:72:2d:a8:a6:27:6f:e5:45:9d:58:98:85:19:d4:7e:
59:e8:c0:f0:2b:4f:46:ac:fc:26:83:8c:8f:a8:aa:39:ff:65:
4f:a4:1e:46:95:15:16:fa:64:2a:32:e4:fb:0e:af:85:fa:93:
49:43:b2:7f:3c:be:e6:50:89:19:fa:76:17:d8:73:7f:39:dc:
bc:1c:ce:9d:fb:43:fd:0c:97:e0:db:83:d5:26:ac:11:88:94:
57:2e:ed:d6:09:7e:0a:ce:5e:42:5f:25:0f:0d:90:c8:e9:b6:
81:72:45:37:25:52:3c:96:35:4f:d5:f9:1c:a6:69:58:44:09:
6f:34:b4:ab:24:9f:f4:7a:48:a1:cf:60:b6:62:e0:dd:64:fb:
79:6b:e3:8a:e4:76:b5:79:05:49:99:ae:93:23:98:8a:0f:eb:
fe:55:bb:ce:f9:c4:bc:68:2c:4c:76:16:1b:45:fa:14:62:a8:
a1:37:5f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 28 16:24:29 2025 by rpki-client