Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
File: Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft (raw, json)
Hash identifier: 4GjNZNns2aHgMG9ng/8xlwMNYyDpYR0451FEkefb/+I=
Subject key identifier: 38:2E:A0:B6:3F:A6:CD:4D:F4:A0:46:3F:E4:7E:8B:83:90:A8:8E:9D
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 019874F4B3AE50BD2063D88E34AAC85F7690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 12:00:50 +0000
Manifest this update: Mon 04 Aug 2025 12:00:50 +0000
Manifest next update: Tue 05 Aug 2025 12:00:50 +0000
Files and hashes: 1: Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl (hash: X+Z5wDc8GcgSEn1mkREmq8XyqyM7w+tFSUtM0I3MGmI=)
2: rnVgQnSvZayWReSkh23-vQQTXhc.roa (hash: hebKWON0JMZ90AbYifXQ2mjTupBoFKWh8ulvnxLBZ8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f4:b3:ae:50:bd:20:63:d8:8e:34:aa:c8:5f:76:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Aug 4 12:00:50 2025 GMT
Not After : Aug 5 12:00:50 2025 GMT
Subject: CN=382ea0b63fa6cd4df4a0463fe47e8b8390a88e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:07:68:68:e6:fd:ec:f1:5b:f4:ec:31:ec:7b:
7a:9a:b3:52:a5:63:18:16:22:32:cc:fa:f7:3e:9c:
fa:5a:d0:98:40:b7:fe:d9:9e:73:37:93:1b:4c:c3:
1d:c8:a3:17:52:5f:45:12:2f:47:da:41:25:da:58:
8b:0e:7e:8e:d5:f5:65:53:6d:97:19:5c:51:a2:f0:
74:09:59:fc:6e:ed:26:74:45:98:6a:51:89:0f:4c:
52:77:7b:e5:09:48:27:3e:cc:27:01:a6:bf:d8:ab:
25:e6:71:f5:6b:ad:ae:2b:b9:3e:d8:f5:4e:ff:52:
ab:7c:dc:d5:dd:7b:4d:54:fc:a9:b6:86:12:62:c7:
10:55:89:a8:93:cf:09:b5:4d:fa:77:36:4e:60:97:
0b:12:a0:17:fa:36:e9:31:ed:c9:38:2d:f4:c0:93:
5e:83:fa:d5:ba:df:ea:f6:70:94:38:09:71:6d:96:
c1:0e:a4:a8:41:3b:d2:db:30:9e:64:25:16:5d:27:
08:05:ab:24:0a:94:e1:7f:e8:14:6a:8b:53:62:4f:
8c:e0:49:83:df:3e:7e:51:1b:f4:78:2b:e8:d5:f9:
70:71:6b:61:96:d2:a4:08:58:30:ac:5c:83:74:c1:
47:31:a3:7e:47:a2:02:93:16:07:02:36:2c:49:65:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:2E:A0:B6:3F:A6:CD:4D:F4:A0:46:3F:E4:7E:8B:83:90:A8:8E:9D
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:02:5e:e5:3f:29:4d:71:28:4e:75:97:90:5e:70:47:54:38:
5a:66:df:d3:9e:80:c1:b1:57:61:a3:7f:6a:ab:4b:19:78:ab:
03:39:58:00:0d:5a:e4:de:e7:13:19:da:22:28:4c:ca:89:2d:
d9:11:d9:d4:77:3f:2e:14:41:8a:4f:6e:63:f5:d4:b9:15:53:
e8:34:12:a2:d3:f1:ac:fc:57:70:ca:c0:d0:ff:67:b3:56:52:
4f:a2:92:53:44:fd:34:80:bf:63:74:4f:83:a8:65:d0:cd:28:
c4:ac:bf:16:db:c9:ed:ea:2f:84:aa:ac:be:c7:76:19:8c:b7:
bf:c9:3d:87:bc:2d:df:5e:a4:26:5a:38:27:b3:94:e1:1f:9a:
bc:87:e3:b4:0d:bf:2a:2b:fa:f5:9d:34:7d:7a:64:3a:97:b3:
21:1e:fb:0c:90:50:a2:8c:48:0e:b1:f2:24:db:e5:f1:fa:51:
16:ac:94:5a:39:1c:bb:9c:54:3f:f1:45:04:14:67:dd:d6:88:
48:90:52:69:58:99:f1:ed:85:09:a7:66:52:a9:e4:dc:bc:61:
26:7e:2c:2d:e1:7d:d4:96:47:ea:34:27:22:06:e6:5f:a6:f5:
a7:d8:f3:a0:a4:9c:8f:96:5d:90:22:37:69:41:e7:31:e7:9b:
e1:75:11:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:10:05 2025 by rpki-client