Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
File: AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft (raw, json)
Hash identifier: FbgNoXnHoxeOEZRhF5cJMjUi15wqQnLWrdxQxivpZhA=
Subject key identifier: CC:28:FF:C8:5F:08:6B:C8:9A:3C:3E:E6:4B:30:93:11:23:84:87:32
Authority key identifier: 01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
Certificate issuer: /CN=01c2863a6438b3402752a4740e90ce42eb589129
Certificate serial: 019A2176F9F20D2F8AD79F81ACBB9386C18C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
Manifest number: 108B
Signing time: Sun 26 Oct 2025 17:00:36 +0000
Manifest this update: Sun 26 Oct 2025 17:00:36 +0000
Manifest next update: Mon 27 Oct 2025 17:00:36 +0000
Files and hashes: 1: AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl (hash: gZIUq6bZsTYBpYvPVebToJgNrKWoZWYMpjUZ5BBdCqM=)
2: DVOzFfjLRaTUZyMinPqbQ4S_9DE.roa (hash: W1flvtqrAEaVVbhIS1vtvgxbygP7i6aEq71rS+R0/KY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 14:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:21:76:f9:f2:0d:2f:8a:d7:9f:81:ac:bb:93:86:c1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c2863a6438b3402752a4740e90ce42eb589129
Validity
Not Before: Oct 26 17:00:36 2025 GMT
Not After : Oct 27 17:00:36 2025 GMT
Subject: CN=cc28ffc85f086bc89a3c3ee64b30931123848732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:3a:4d:1b:c7:7c:7e:46:5e:0e:c1:bb:96:f5:
c4:fc:85:6a:db:33:50:5c:0c:5a:d3:db:78:dd:45:
63:1a:dd:b1:6a:d1:e9:a4:4e:98:6c:b6:f3:1b:3b:
8a:53:b6:e0:f6:fe:70:17:c8:a0:62:fe:7d:3d:bb:
99:fc:a3:21:de:8b:a9:d0:1b:7c:aa:f7:ce:07:66:
40:e0:fa:74:a6:40:55:dd:06:1a:f2:62:f9:9f:f9:
c4:0b:af:e9:e3:ec:58:2e:cf:a9:86:05:77:41:91:
3e:0b:0c:01:72:e1:0f:fe:06:83:01:45:40:2d:7c:
84:5d:77:7f:9a:c4:6a:95:ea:75:02:5c:92:1d:b5:
3e:94:36:b7:ce:4c:5b:42:82:31:a6:a3:22:7d:ef:
8f:c5:fb:75:ff:5f:94:48:1c:30:a3:05:ad:9e:f8:
51:b5:af:ee:ae:50:20:f8:39:ef:e1:1f:6a:da:87:
65:37:72:65:62:47:0c:97:10:0c:23:2d:f0:5c:34:
7f:9f:98:6b:12:d4:5e:58:6f:48:f5:9f:dc:05:d8:
2f:a5:8f:33:a8:7d:68:19:8b:b7:e3:7f:73:6f:72:
ce:bf:c2:0a:95:d5:6f:71:2a:d5:d8:62:83:4d:e7:
ad:98:6a:a5:ea:c9:6f:49:13:ff:1b:c7:2c:16:67:
1e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:28:FF:C8:5F:08:6B:C8:9A:3C:3E:E6:4B:30:93:11:23:84:87:32
X509v3 Authority Key Identifier:
keyid:01:C2:86:3A:64:38:B3:40:27:52:A4:74:0E:90:CE:42:EB:58:91:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcKGOmQ4s0AnUqR0DpDOQutYkSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/25237e-ce6a-4302-b6a4-b5405834f0c5/1/AcKGOmQ4s0AnUqR0DpDOQutYkSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:8a:06:df:92:d3:ef:ba:95:c8:de:2e:a1:3a:53:6d:a6:52:
ab:e1:83:7b:4e:a6:40:57:e0:94:87:a1:b1:e4:77:ac:f1:9a:
ae:be:48:56:08:a9:8e:4d:00:7d:e8:d6:70:f3:fa:85:2e:e2:
1e:87:9e:52:7a:ba:80:24:c6:83:23:36:4e:35:5d:b5:eb:f9:
88:1d:5b:65:64:f9:1e:ee:7f:34:fc:cd:ff:61:99:61:86:cd:
d1:d0:04:29:0d:36:2f:28:dc:d7:54:40:6a:6d:95:7a:e2:7c:
4e:41:1f:ed:dd:6d:87:ca:63:12:91:95:46:df:91:3c:84:25:
dd:eb:80:47:f9:37:fb:de:31:7d:bf:8a:97:1d:00:f5:c1:17:
55:7c:70:12:45:f0:13:b8:6d:ba:fb:92:c0:24:ae:42:ea:a0:
9d:6f:39:96:14:54:14:39:02:65:f3:c7:f1:30:bb:85:a9:27:
34:3f:ee:96:d6:2d:58:be:44:e3:dd:b6:d5:e9:4b:3c:90:89:
dc:46:92:a5:19:0f:16:6c:5f:96:d7:09:45:04:50:27:23:ca:
f9:d9:e6:47:eb:24:4a:95:8b:6f:00:f5:18:42:e0:5c:c6:e3:
d0:8f:72:0f:be:e9:a5:ec:67:57:4b:84:f1:90:2e:e8:43:50:
b4:4b:1c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 27 00:28:49 2025 by rpki-client