Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
File: ACreZKPSvb6PfOg2ENLnxl-zPq0.mft (raw, json)
Hash identifier: 5NckmO4H5oxITqxnGSkI1WjkGF1oTWVYzsX0kwmicB8=
Subject key identifier: 75:89:9B:3E:1A:5C:8D:B9:BC:42:CD:56:66:9E:B0:57:60:74:73:F1
Authority key identifier: 00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
Certificate issuer: /CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Certificate serial: 019A4E4FAED4E95D6F59A5CDFFE5DC731F53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
Manifest number: 11B8
Signing time: Tue 04 Nov 2025 10:00:36 +0000
Manifest this update: Tue 04 Nov 2025 10:00:36 +0000
Manifest next update: Wed 05 Nov 2025 10:00:36 +0000
Files and hashes: 1: ACreZKPSvb6PfOg2ENLnxl-zPq0.crl (hash: 6Epb9VOJJU0JIG49qvD2h6GxLZqdcmhC5EgIyb8n4aA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4e:4f:ae:d4:e9:5d:6f:59:a5:cd:ff:e5:dc:73:1f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002ade64a3d2bdbe8f7ce83610d2e7c65fb33ead
Validity
Not Before: Nov 4 10:00:36 2025 GMT
Not After : Nov 5 10:00:36 2025 GMT
Subject: CN=75899b3e1a5c8db9bc42cd56669eb057607473f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:c1:7e:a6:3d:32:fa:98:e6:44:57:af:4a:
b7:91:0d:55:77:0b:1e:f3:01:ab:11:ce:a0:a8:23:
09:38:aa:62:76:98:b4:34:c7:06:4c:f1:80:7b:d2:
ee:9b:12:6c:ff:e4:38:5f:51:7f:34:2e:74:a1:88:
f1:7b:24:1f:14:66:d7:c2:76:b2:a7:a3:b0:df:31:
03:bd:ca:a4:54:92:a9:09:aa:e2:5c:a6:a9:b0:e8:
d6:58:95:d3:09:88:b7:be:ba:52:9c:a9:9a:a7:3d:
5c:60:b0:86:e4:66:90:4a:37:9b:0a:cc:9b:89:26:
5a:ea:b5:ca:05:82:2c:eb:3d:70:eb:07:95:84:03:
bd:cc:3a:d2:89:c8:4e:bc:aa:8d:ae:83:70:a3:fb:
4e:4f:5b:42:60:39:55:1d:1f:e9:b4:a0:2d:40:b7:
fc:bd:57:76:6a:f0:1e:00:50:ad:43:ee:36:8d:08:
01:1c:78:3c:e0:b6:1a:80:a3:6d:e7:20:ba:dd:3a:
bd:a4:80:95:0b:c5:aa:ed:91:a1:32:96:23:b1:c5:
18:6d:c7:51:7b:f6:e4:2a:8a:43:15:8e:e6:bb:75:
27:6e:3b:c4:8b:26:0c:c5:b8:67:10:1c:bc:7a:81:
da:88:0e:e2:55:91:fa:c7:e6:7b:35:62:24:87:dd:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:89:9B:3E:1A:5C:8D:B9:BC:42:CD:56:66:9E:B0:57:60:74:73:F1
X509v3 Authority Key Identifier:
keyid:00:2A:DE:64:A3:D2:BD:BE:8F:7C:E8:36:10:D2:E7:C6:5F:B3:3E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACreZKPSvb6PfOg2ENLnxl-zPq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/86134a-ee4d-4637-a4d4-c57cf8f1cd54/1/ACreZKPSvb6PfOg2ENLnxl-zPq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:db:0e:0d:b5:b7:89:e0:0d:f8:3e:34:e7:17:c1:d7:d2:36:
aa:5d:6b:30:35:d0:6b:e9:a8:3f:e8:5f:f1:ff:c0:4e:64:85:
0f:f1:b2:24:76:03:4c:d8:b0:94:20:4b:a3:ef:d4:e5:35:36:
bc:78:f1:58:4d:30:70:db:cb:9f:bd:1f:56:a5:47:58:2e:28:
ad:8b:b6:cc:ff:2a:46:51:fc:2c:d9:51:9a:a4:52:e6:d5:a9:
b6:e8:84:3c:49:18:68:26:74:94:5c:b2:1a:f5:8e:40:1c:5e:
ba:18:5e:bf:0d:74:d2:a3:e1:00:1d:8a:e3:bf:48:07:00:e2:
e6:99:08:b9:f8:30:8e:e2:c1:87:89:c3:5e:10:60:a2:a8:9e:
74:c3:9c:b7:cd:1f:74:45:ed:99:47:37:cf:e6:a4:db:59:2d:
25:6e:1d:89:e4:34:b3:e0:f4:0c:ba:e8:ad:d4:1c:1d:be:cb:
93:8c:68:e9:2b:62:3a:8a:72:bf:9d:e8:65:a9:dd:10:ac:5e:
9a:22:e9:6e:15:df:fb:cf:ed:83:4b:1e:1a:0b:e1:ae:4d:32:
05:4e:ce:18:6c:21:d3:21:ac:2c:61:96:5b:18:dd:b5:34:4f:
fc:87:e6:8a:de:12:df:93:cb:d0:8f:49:78:76:7b:c3:a4:f8:
0b:9c:b4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:05:23 2025 by rpki-client