Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
File: acZ5acPJ2Prbyac-P_VjYdAgO3E.mft (raw, json)
Hash identifier: BhilIXYYddbDrPzoOq4NTdIe7EJBEP5sIGcVb0BzFaY=
Subject key identifier: C8:FF:96:E7:90:CA:5F:88:F0:11:A3:12:90:F7:4A:F8:1C:30:43:BD
Authority key identifier: 69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
Certificate issuer: /CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Certificate serial: 019A50E3B172351170F8FE57764BE75D4446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
Manifest number: 1713
Signing time: Tue 04 Nov 2025 22:01:30 +0000
Manifest this update: Tue 04 Nov 2025 22:01:30 +0000
Manifest next update: Wed 05 Nov 2025 22:01:30 +0000
Files and hashes: 1: 5juFOi12IlXtCkf2DtKHvFjQ7Jk.roa (hash: ww1Ap6yHRZv0yJoUDsvGuz2Z305tTs+DxDhKtXDBfFg=)
2: IKiqkrmFyojfs3_xOt7fZHFSlPM.roa (hash: A7gXKJoNQ0QRvI+SScjx1MnLDAh3sHJvpIH2WHgULw8=)
3: PtfamAIKc-wbnus8-5afpUvZHGU.roa (hash: h8WtMUiUF98qcvLvFpadosq7yztYyhy7KWS+4nBxrlg=)
4: U4yjQ1ijOYxRWOmhUG5jb5FaBQ4.roa (hash: c6bEmKe9x58NR/VbAT8OhvrCDKKUEqAOtV7EWWPUmrc=)
5: acZ5acPJ2Prbyac-P_VjYdAgO3E.crl (hash: oPLypbj66U4Gs52z0XYpxGT+i2xPK99t9/ASK7oJjqg=)
6: rS6BwZvo3GfqDYx4UHFP382Hars.roa (hash: SFt6Clcvm0ncW0QPfJN10WZH+aRfPVixy7ab3a3BU/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:50:e3:b1:72:35:11:70:f8:fe:57:76:4b:e7:5d:44:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69c67969c3c9d8fadbc9a73e3ff56361d0203b71
Validity
Not Before: Nov 4 22:01:30 2025 GMT
Not After : Nov 5 22:01:30 2025 GMT
Subject: CN=c8ff96e790ca5f88f011a31290f74af81c3043bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ad:5e:a2:5e:0b:ec:ef:78:30:47:71:cf:ce:
26:97:e5:55:5c:19:05:7d:a6:da:84:ec:bd:f8:a3:
63:74:f0:d9:c4:b0:02:55:de:5b:f4:4e:36:f2:15:
f4:7d:79:f0:db:1f:07:16:73:7f:e8:b2:7d:18:06:
4e:4a:75:28:91:7c:bb:8d:e4:83:a1:9e:a8:74:35:
4c:b8:40:f0:fa:4a:1d:3b:9b:57:e4:b7:54:ab:87:
d9:9e:1f:aa:cc:bb:21:fd:54:9f:f0:f7:d9:d0:16:
66:9f:b4:c2:1a:d1:13:36:49:a5:07:93:82:6e:3c:
69:9a:ec:00:7c:db:c3:63:e3:7f:40:39:7c:f2:61:
b0:31:95:a1:19:e8:7d:ca:56:8f:a0:2c:70:94:a1:
2d:ae:cf:2b:9c:b4:af:ad:01:90:ed:24:bb:12:ce:
a4:77:92:70:cb:aa:77:82:60:a1:c8:09:ea:9f:27:
90:4b:71:8a:be:5b:2a:ef:8f:3a:e8:0a:1d:a9:29:
69:56:2c:24:f2:05:d1:20:ec:b3:73:4c:63:97:08:
0a:8a:54:00:af:92:f1:bd:46:82:e5:ae:09:e1:94:
47:ab:ae:02:e5:50:62:30:1c:06:d5:1b:73:01:be:
4d:fd:08:3f:ab:85:6c:6f:ba:8f:17:0e:fb:2b:f9:
73:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:FF:96:E7:90:CA:5F:88:F0:11:A3:12:90:F7:4A:F8:1C:30:43:BD
X509v3 Authority Key Identifier:
keyid:69:C6:79:69:C3:C9:D8:FA:DB:C9:A7:3E:3F:F5:63:61:D0:20:3B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/acZ5acPJ2Prbyac-P_VjYdAgO3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/cdbf8f-6e67-4ab1-bf18-48ef8e1114e4/1/acZ5acPJ2Prbyac-P_VjYdAgO3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1b:de:ef:ac:26:49:c4:21:fa:fe:25:c3:5c:d3:b0:01:2e:
29:b4:e0:8f:b4:ad:ef:08:1a:e6:83:63:f1:31:c8:9e:b6:2c:
21:98:29:64:53:c3:05:d2:4f:7a:55:ed:dd:c2:49:3f:8d:0c:
d8:f1:cb:74:a7:3d:e4:20:9c:45:af:5a:b5:19:5c:b9:22:a4:
3b:bc:4a:c8:76:45:e0:3f:64:cc:5e:1b:a4:06:ac:64:10:08:
43:5b:2c:a2:8f:c8:56:9a:e3:d2:f0:58:cc:5f:2b:dd:40:fd:
6e:1a:e6:a0:c7:91:9e:79:8b:57:7a:fa:72:ce:ff:52:80:c5:
58:66:05:74:b4:c3:a8:0c:15:bc:d3:a4:c6:dc:44:0f:b5:3d:
1b:ad:76:99:fb:94:ce:c3:21:a7:f0:83:aa:c6:71:0e:38:bd:
b6:0c:1a:57:a7:7d:cb:58:ec:ed:d7:73:be:6e:3f:ac:2e:6f:
7f:e7:7c:46:70:96:3f:3d:9d:05:17:59:a0:2b:f7:a5:19:08:
fc:02:f0:f2:74:7f:06:c0:f4:55:ef:d9:5b:e1:d0:46:4c:09:
d7:0a:f5:8e:2d:0f:92:41:56:50:fd:5c:8d:03:a9:50:18:e1:
f7:71:25:23:9a:10:49:16:7e:19:0e:1a:dd:12:60:3a:d9:7b:
aa:94:71:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 23:53:37 2025 by rpki-client