Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: EvtcNApbWz+79IJU9CL2EeyuOsv17qWKxAhNcXw07WM=
Subject key identifier: 98:98:E3:22:C5:50:B1:D5:35:C9:E1:47:BA:83:67:0C:5C:BF:74:22
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 019A4EF459584A8EA5E16A9A1471F6F53231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0C3E
Signing time: Tue 04 Nov 2025 13:00:27 +0000
Manifest this update: Tue 04 Nov 2025 13:00:27 +0000
Manifest next update: Wed 05 Nov 2025 13:00:27 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: htPFFKaSPGD93eFZto/pOyoEeOQFUs+EHB+/JT2MJsM=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:f4:59:58:4a:8e:a5:e1:6a:9a:14:71:f6:f5:32:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Nov 4 13:00:27 2025 GMT
Not After : Nov 5 13:00:27 2025 GMT
Subject: CN=9898e322c550b1d535c9e147ba83670c5cbf7422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:a6:ba:4b:41:fe:0d:1c:f2:6d:c5:19:8f:
a3:b3:95:6a:2a:a1:7d:a4:68:cd:1d:88:1b:eb:85:
f2:68:0b:5b:74:01:16:9c:4c:00:b1:ad:2f:97:ce:
90:26:88:3c:52:05:e2:8a:ed:00:f2:21:3d:28:f5:
fa:36:fc:49:61:85:93:a5:d1:45:3f:20:a3:a5:86:
ce:34:4e:5d:d8:74:1c:c0:0c:58:40:ed:93:62:33:
de:18:b2:40:2b:c9:08:cd:c0:23:eb:e9:8a:1c:3e:
5d:1f:85:c5:bb:e0:b4:1d:7c:d0:59:35:d6:5e:18:
bc:4e:1c:00:1f:bf:2c:6f:5d:e1:2d:a6:09:71:14:
4e:41:6f:b0:f0:28:9b:87:ec:fe:36:24:a7:ba:d3:
cb:2e:e8:86:28:91:ff:9d:a5:a5:44:72:26:b4:5f:
52:3c:f2:dd:b0:3e:4c:7e:ff:ff:67:e0:ab:36:6f:
4e:f1:7a:68:56:db:f8:b0:b4:7a:5f:05:67:ae:61:
ea:db:ba:df:65:67:f1:f7:47:23:15:21:6a:ee:6f:
5c:fc:77:d4:c6:9f:98:46:6f:80:e6:4d:84:d7:47:
cf:18:b2:2c:b7:7e:cf:0e:42:82:ec:f3:58:50:03:
80:ba:2f:88:ac:f7:3f:92:87:81:b2:cf:f3:37:fd:
ec:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:98:E3:22:C5:50:B1:D5:35:C9:E1:47:BA:83:67:0C:5C:BF:74:22
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7e:e8:48:09:bb:bb:15:32:fc:a2:8f:9d:c8:c2:66:e2:b8:
f8:04:96:22:0c:9f:1d:3e:a1:cc:1f:c3:46:95:e6:fd:57:d0:
59:ea:af:6d:d3:29:1b:5c:ab:89:ac:d9:83:24:87:a0:67:c8:
6b:ad:7d:c5:a4:ac:4b:d6:55:93:cf:ec:f1:0f:38:1d:30:bb:
9e:55:ae:d3:ba:84:3a:5c:5a:2a:a4:3e:1e:7b:6b:72:22:15:
f5:d9:0f:c9:c0:36:4c:c0:23:5b:f6:04:ce:2a:b6:ce:e2:77:
5a:5e:28:37:00:37:49:98:b7:4a:26:89:c0:a2:2a:8e:55:11:
da:48:d4:b6:22:6a:e6:c7:dd:5e:4e:41:84:0f:a0:cb:a3:6e:
28:5d:45:2b:c6:d6:c2:de:84:2b:e3:c6:e7:3d:f8:b6:49:a3:
8e:c7:77:de:59:27:e4:39:06:93:8f:20:e8:a2:0d:ce:6b:ed:
ed:f2:69:53:12:ac:b3:69:f2:37:b4:65:7b:bb:f7:83:19:2c:
7c:dc:61:1d:05:c7:51:bd:cc:2d:9f:9b:e7:7c:ff:ac:81:db:
12:53:2b:f5:33:08:f4:34:44:47:61:da:8a:f7:1b:e6:63:76:
e9:3c:ee:fd:75:67:9c:f3:c5:2a:c9:ce:47:be:66:f3:8e:73:
16:72:9b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:54:43 2025 by rpki-client