Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
File: acp8FyMtsGNJHPpYUgM2n_vrdu0.mft (raw, json)
Hash identifier: VsKvQNlitdDF/4dCjMBRhzUnQraMQggkYacBKESepAM=
Subject key identifier: F0:05:E9:69:09:BD:39:F1:4E:61:B3:A3:65:C2:12:7C:92:88:91:B9
Authority key identifier: 69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
Certificate issuer: /CN=69ca7c17232db063491cfa585203369ffbeb76ed
Certificate serial: 019A4F2B871A28BE67ACA1004974E66C336F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
Manifest number: 1710
Signing time: Tue 04 Nov 2025 14:00:43 +0000
Manifest this update: Tue 04 Nov 2025 14:00:43 +0000
Manifest next update: Wed 05 Nov 2025 14:00:43 +0000
Files and hashes: 1: RkLlZjAasSrGiOmklIx_O-q25zk.roa (hash: Gwgv1/PPnszGyK+vUndl8BVc2mtdNprpDuh7CKowocQ=)
2: acp8FyMtsGNJHPpYUgM2n_vrdu0.crl (hash: kFneQPPDEAKvMct2WSS9eJhyti+w22VsGmy7WzWQ4w0=)
3: iLjCLg8Y0QSYNaQ0b-3HMIIKDDY.roa (hash: KCNb4IsFzC9RfJdx7AFbupcSXkYx7SjrNORvTA5EESA=)
4: jyBvJ0cOfKi9WwiQt60pyraI-oY.roa (hash: y3Y58DOqvcc4jvZsYybVxfvwXagMIIOulZAsS9iNgBc=)
5: s9L9BNwHKJhVemHf55wRw3Mdhbk.roa (hash: beDBJWuacokDomSZPce/uodduuYfGqhfMVgZDVtONCo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:2b:87:1a:28:be:67:ac:a1:00:49:74:e6:6c:33:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69ca7c17232db063491cfa585203369ffbeb76ed
Validity
Not Before: Nov 4 14:00:43 2025 GMT
Not After : Nov 5 14:00:43 2025 GMT
Subject: CN=f005e96909bd39f14e61b3a365c2127c928891b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f2:5a:39:5c:10:ff:f1:87:4a:e8:69:b1:1b:
16:1c:ae:ad:23:f2:14:50:03:53:c7:4c:fa:0b:58:
47:29:70:08:ca:fc:ea:71:2d:b0:db:53:a1:e9:d0:
9c:81:a2:12:4d:75:7d:9f:ce:e3:f1:88:29:7d:72:
8f:9b:dd:98:ac:fb:36:e9:ce:7f:bf:c8:cd:16:9f:
44:24:04:c3:06:b7:c3:58:87:64:ac:24:1c:01:e2:
37:b2:1e:46:97:c2:47:06:89:55:1c:f2:25:4a:86:
eb:1d:41:d7:68:54:a5:36:b2:d0:9e:62:cd:d6:83:
26:66:84:9a:c0:3d:5f:d6:b6:42:11:71:d0:49:53:
2b:02:fa:53:29:3b:11:6d:da:b0:4c:54:0b:ce:b0:
a3:24:95:7c:3f:11:b8:ad:3c:ae:24:95:81:ea:b3:
5f:5d:21:c2:8c:d5:76:8f:49:cd:88:fb:aa:af:0d:
b4:2d:69:75:ad:00:08:68:ed:13:3c:71:f6:6d:fe:
de:49:25:b7:c5:3e:b8:b2:62:5d:c5:1d:ef:a4:43:
0d:e1:86:12:c2:da:a8:95:96:97:fb:31:9b:f9:42:
4d:dc:40:3d:48:89:5c:dd:08:4c:84:c2:d5:82:e1:
83:29:3d:d0:a1:fa:f1:c3:30:a1:de:e1:9d:e1:90:
63:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:05:E9:69:09:BD:39:F1:4E:61:B3:A3:65:C2:12:7C:92:88:91:B9
X509v3 Authority Key Identifier:
keyid:69:CA:7C:17:23:2D:B0:63:49:1C:FA:58:52:03:36:9F:FB:EB:76:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acp8FyMtsGNJHPpYUgM2n_vrdu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/bfb423-da69-4265-95e5-f47ae7ddaec0/1/acp8FyMtsGNJHPpYUgM2n_vrdu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:dd:d6:8c:4a:86:9d:6b:83:83:7d:fd:36:6d:3a:aa:cf:48:
b6:04:84:38:7c:76:98:09:24:99:86:a9:4c:7c:34:d8:29:f4:
69:68:8f:20:85:2e:45:0a:70:ad:56:23:89:87:20:87:5d:86:
5e:17:bf:3b:46:0d:b6:4b:d2:a7:06:39:71:27:b0:d4:09:ac:
0e:fb:22:61:66:d6:15:ff:a5:da:d7:1f:86:96:87:af:20:a1:
51:0b:da:ec:1c:ae:41:9b:68:c7:2c:d0:99:6e:30:ce:35:25:
61:8b:a3:5f:0d:65:09:45:65:dc:07:c5:ec:ba:a3:3e:c0:53:
ee:17:df:11:fd:11:8a:18:d9:f3:26:8b:31:c6:7f:aa:1a:42:
a6:e9:58:39:b4:bb:fb:09:10:08:94:57:ce:75:c2:fa:28:e0:
87:d5:4a:0c:28:92:83:fe:dd:e9:53:44:98:40:57:34:d2:7f:
24:5c:f7:65:82:07:f2:f8:4a:28:69:08:39:45:63:b7:e0:2a:
f8:fb:4a:ea:67:88:36:eb:1e:94:e3:94:46:39:d6:a9:2b:2d:
83:1f:10:34:f5:76:e6:c8:ce:01:e3:45:50:fc:10:69:9c:42:
ce:55:92:8f:14:fc:7d:39:f7:9e:ce:34:eb:1c:9e:d5:7c:99:
e1:f9:d7:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpPK4caKL5nrKEASXTmbDNvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5Y2E3YzE3MjMyZGIwNjM0OTFjZmE1ODUyMDMzNjlmZmJl
Yjc2ZWQwHhcNMjUxMTA0MTQwMDQzWhcNMjUxMTA1MTQwMDQzWjAzMTEwLwYDVQQD
EyhmMDA1ZTk2OTA5YmQzOWYxNGU2MWIzYTM2NWMyMTI3YzkyODg5MWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfJaOVwQ//GHSuhpsRsWHK6tI/IU
UANTx0z6C1hHKXAIyvzqcS2w21Oh6dCcgaISTXV9n87j8YgpfXKPm92YrPs26c5/
v8jNFp9EJATDBrfDWIdkrCQcAeI3sh5Gl8JHBolVHPIlSobrHUHXaFSlNrLQnmLN
1oMmZoSawD1f1rZCEXHQSVMrAvpTKTsRbdqwTFQLzrCjJJV8PxG4rTyuJJWB6rNf
XSHCjNV2j0nNiPuqrw20LWl1rQAIaO0TPHH2bf7eSSW3xT64smJdxR3vpEMN4YYS
wtqolZaX+zGb+UJN3EA9SIlc3QhMhMLVguGDKT3QofrxwzCh3uGd4ZBjGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAF6WkJvTnxTmGzo2XCEnySiJG5MB8GA1UdIwQY
MBaAFGnKfBcjLbBjSRz6WFIDNp/763btMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUt
ZjQ3YWU3ZGRhZWMwLzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9iZmI0MjMtZGE2OS00MjY1LTk1ZTUtZjQ3YWU3ZGRhZWMw
LzEvYWNwOEZ5TXRzR05KSFBwWVVnTTJuX3ZyZHUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr93WjEqG
nWuDg339Nm06qs9ItgSEOHx2mAkkmYapTHw02Cn0aWiPIIUuRQpwrVYjiYcgh12G
Xhe/O0YNtkvSpwY5cSew1AmsDvsiYWbWFf+l2tcfhpaHryChUQva7ByuQZtoxyzQ
mW4wzjUlYYujXw1lCUVl3AfF7LqjPsBT7hffEf0RihjZ8yaLMcZ/qhpCpulYObS7
+wkQCJRXznXC+ijgh9VKDCiSg/7d6VNEmEBXNNJ/JFz3ZYIH8vhKKGkIOUVjt+Aq
+PtK6meINuselOOURjnWqSstgx8QNPV25sjOAeNFUPwQaZxCzlWSjxT8fTn3ns40
6xye1XyZ4fnXDg==
-----END CERTIFICATE-----
Generated at Tue Nov 4 20:16:09 2025 by rpki-client