Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
File: CAcCkygCwnQ9M19n1HpCOMMyRTM.mft (raw, json)
Hash identifier: l8HnLi7pDXBJxmt7Y6pyXr2LoXeEue3ZWXo2W5274q8=
Subject key identifier: 39:3D:23:00:D3:1A:6C:53:3C:50:CC:E9:12:C4:B7:74:C4:75:AE:E0
Authority key identifier: 08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
Certificate issuer: /CN=080702932802c2743d335f67d47a4238c3324533
Certificate serial: 01987ED4122EB33C1D1C96CC9222074F3E04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
Manifest number: 0260
Signing time: Wed 06 Aug 2025 10:01:24 +0000
Manifest this update: Wed 06 Aug 2025 10:01:24 +0000
Manifest next update: Thu 07 Aug 2025 10:01:24 +0000
Files and hashes: 1: CAcCkygCwnQ9M19n1HpCOMMyRTM.crl (hash: 7MdH1yqK/hc2wuGcbFotLvbJVtDtVd2H5t/qBjNWUdU=)
2: lVxazzssSIQktTuekaP8gaWWHmA.roa (hash: XZofJOcbbYfDn8B1ukHfJuS3+okkzKxPP+y/thGcTl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:d4:12:2e:b3:3c:1d:1c:96:cc:92:22:07:4f:3e:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=080702932802c2743d335f67d47a4238c3324533
Validity
Not Before: Aug 6 10:01:24 2025 GMT
Not After : Aug 7 10:01:24 2025 GMT
Subject: CN=393d2300d31a6c533c50cce912c4b774c475aee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:6a:2f:f0:1f:ae:56:6c:e5:56:c9:c9:65:
e3:9d:3e:8a:c8:d4:9b:04:43:e6:45:a9:69:da:76:
24:3e:5b:8f:f7:87:03:65:61:5b:8f:59:fe:14:2b:
05:95:0d:ad:c4:db:db:b6:a3:f2:40:54:41:76:75:
91:39:34:88:e3:bf:fd:6a:f7:de:04:a5:73:aa:eb:
5c:02:d5:bf:3e:19:e8:a0:57:3d:47:ad:69:96:8c:
11:b2:28:43:7e:a2:0e:67:27:10:e9:94:f0:71:6a:
6a:81:0e:b3:57:53:2d:d2:3f:35:15:22:c7:cd:89:
de:2f:71:84:0f:c3:cb:9b:c4:7e:66:5d:fd:29:f3:
22:fb:53:74:59:47:9b:a1:e4:cc:96:de:21:60:c2:
32:78:02:8c:19:20:15:24:c0:bd:f2:1a:d8:89:cf:
e8:a2:8a:ab:95:c9:43:34:be:f8:7d:6a:e1:40:1c:
d6:7e:03:2d:74:ea:a1:75:fe:7a:08:7d:35:ff:96:
9b:95:ce:1a:ca:68:4c:79:0f:fb:d7:21:be:91:cf:
cf:ce:08:69:02:03:b6:51:a3:12:27:c8:02:ee:c9:
72:88:e5:3a:b0:92:78:1a:8d:90:45:39:ad:8f:9b:
a9:92:22:2d:ec:f9:09:4d:1d:ab:6f:d4:1e:58:a4:
51:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:3D:23:00:D3:1A:6C:53:3C:50:CC:E9:12:C4:B7:74:C4:75:AE:E0
X509v3 Authority Key Identifier:
keyid:08:07:02:93:28:02:C2:74:3D:33:5F:67:D4:7A:42:38:C3:32:45:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAcCkygCwnQ9M19n1HpCOMMyRTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/f532fd-91e2-4fb6-be87-480feb92d718/1/CAcCkygCwnQ9M19n1HpCOMMyRTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:61:65:e2:52:0c:d4:d9:db:7c:df:84:f3:98:8a:fd:d8:e2:
ad:e2:5d:e7:f1:36:bc:8a:53:a6:ea:d6:c3:7c:d0:61:13:fd:
38:c8:ef:a2:38:f3:c5:27:91:8f:20:b9:5a:ec:c7:61:be:20:
5c:2a:63:89:5d:bb:55:a6:cf:59:52:23:43:df:87:85:90:4b:
64:b3:e4:ea:3f:1f:7d:ad:78:b6:bc:e6:d1:fc:a4:45:db:d0:
ad:35:c2:62:45:4d:5e:7e:77:10:54:a5:b5:66:45:c0:8c:f0:
65:56:72:7c:ff:bf:70:0d:41:91:2d:6b:08:37:68:7e:0f:b5:
6a:41:fe:42:1e:d2:3b:44:65:3d:02:a6:52:8a:bf:c0:5f:ed:
3b:73:ae:c4:aa:dd:1e:98:d0:d3:b2:08:81:be:fc:0a:c8:7f:
35:16:4e:30:a6:9c:7a:a7:7a:ab:6f:9b:fa:a7:b9:e3:78:ac:
bc:31:eb:16:7c:c8:80:06:70:0c:01:0c:77:8a:55:1d:d1:77:
e9:4b:96:2f:fb:dd:47:1b:39:d5:05:7e:ad:dd:fc:b8:5f:60:
bf:a9:21:94:c1:3c:46:98:d0:b9:97:fa:38:5f:73:30:13:b3:
56:c1:b8:05:e3:c1:b7:61:bb:c2:7e:74:6b:19:f0:7c:56:39:
54:d0:08:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:10:30 2025 by rpki-client