Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: nzt9pgDdhsLmnQWK11lJ9InXFornQUhbLs2+RrstEss=
Subject key identifier: 0F:09:1F:C2:4A:B3:77:08:9B:4F:FA:81:32:65:00:0C:1B:59:88:B7
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 019A541B21E60DD5AA965EA813822F61ECE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0353
Signing time: Wed 05 Nov 2025 13:00:55 +0000
Manifest this update: Wed 05 Nov 2025 13:00:55 +0000
Manifest next update: Thu 06 Nov 2025 13:00:55 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: hAp7i+8oc6D4Q9z4m4GXC2wgHBv19bNNPEsAolzZHX8=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Nov 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:54:1b:21:e6:0d:d5:aa:96:5e:a8:13:82:2f:61:ec:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Nov 5 13:00:55 2025 GMT
Not After : Nov 6 13:00:55 2025 GMT
Subject: CN=0f091fc24ab377089b4ffa813265000c1b5988b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d7:35:87:8f:e8:a8:bc:bb:98:8a:4a:9f:7f:
1c:8b:30:75:8d:58:08:2f:86:f2:13:93:4f:a3:99:
0e:1c:ae:d4:44:f7:10:99:86:92:b5:1e:79:a7:9c:
0a:43:87:7b:e2:78:d5:2c:1b:84:74:5a:ea:42:d5:
bc:49:89:a8:ed:b6:7a:c7:80:05:88:f0:5a:d8:ac:
39:90:61:f7:c1:f9:fe:1b:88:16:f0:77:96:57:9c:
cd:c1:52:ca:12:ce:4b:c3:f1:9d:d5:7b:f0:cc:28:
e9:aa:ba:cd:50:15:58:48:bb:81:5c:01:a7:45:a5:
57:f6:1c:01:fb:1a:2d:71:25:0c:c1:5f:a1:da:7b:
df:46:ef:11:3c:ee:04:63:73:d3:f9:d6:10:1e:fc:
e3:85:1f:74:b8:6d:61:68:c9:57:51:96:a3:40:7e:
ca:73:2f:4e:f1:8d:64:5d:bb:35:ec:2b:24:d5:b5:
28:df:ed:28:3f:49:8c:91:fe:3e:53:e9:7f:dc:bd:
cd:d0:5c:d6:bd:7b:16:5d:2b:dd:f7:72:e5:c5:51:
b1:85:55:69:fb:5e:1e:7f:6e:07:82:ab:87:0d:cf:
c4:5f:a9:47:92:4a:bc:86:b9:ec:f8:67:81:93:ce:
47:9a:a7:32:41:ba:5a:bd:5c:df:ba:c4:89:79:1e:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:09:1F:C2:4A:B3:77:08:9B:4F:FA:81:32:65:00:0C:1B:59:88:B7
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:96:21:36:2f:52:6e:9b:ac:2d:9b:34:a2:c2:a4:4e:69:76:
e7:39:13:f1:ae:16:d3:8a:1d:86:54:b6:71:16:dc:23:af:47:
1b:99:a8:b9:df:bd:bf:a5:ed:99:c6:bb:8c:d4:7b:cd:dd:0d:
09:e1:2f:f3:bf:66:8a:c6:c0:8e:fc:c8:46:ff:aa:f2:f6:4f:
7c:7c:ca:7c:a4:8d:5a:66:f5:15:f5:df:fe:f1:95:0e:0f:04:
09:87:31:73:d3:3c:34:c4:6e:c8:c8:ee:86:17:32:06:1f:af:
51:62:85:41:47:06:84:40:f0:20:10:37:f7:4c:d6:78:d6:ba:
ae:96:07:aa:cf:d2:c8:82:7e:b5:77:61:0d:9d:23:a2:fa:9d:
f8:3d:00:23:3e:54:da:21:ce:af:97:59:cd:1e:90:70:67:a6:
c1:3a:d6:94:be:70:c4:30:ed:34:f9:98:33:06:85:d7:bb:17:
b4:81:9f:86:b1:5c:c3:14:90:f0:62:9e:7c:2a:45:fa:b0:09:
38:51:03:fd:bd:60:5a:69:f1:71:85:1a:ef:42:d1:6a:f2:67:
1c:4d:25:1f:c6:62:0d:7c:ef:e8:8c:fa:ce:3a:dd:1a:29:3e:
8b:e1:16:9f:f9:33:30:c6:9c:95:fc:58:74:2e:c8:a1:ef:25:
39:6e:63:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 17:51:16 2025 by rpki-client