Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
File: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft (raw, json)
Hash identifier: og9NAJUqSDLBfxombsLYTFu6Os8ZpSWzc9oBEDmpkpg=
Subject key identifier: 1E:7C:20:76:28:39:A4:F1:84:85:2B:83:D5:A9:E7:A6:40:61:AD:E1
Authority key identifier: 00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
Certificate issuer: /CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Certificate serial: 01988168EB167FEC128DD993685A9AF04C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
Manifest number: 0C4D
Signing time: Wed 06 Aug 2025 22:03:13 +0000
Manifest this update: Wed 06 Aug 2025 22:03:13 +0000
Manifest next update: Thu 07 Aug 2025 22:03:13 +0000
Files and hashes: 1: 5rhrt2Pbzdo3SB0HVaTD62_t4Tg.roa (hash: y0iyxyMR7FjHlxAFSdTCsP19Zpu9WbwfJlDLERXkCss=)
2: ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl (hash: +j/MNkKFHTb5wBWq21kHgoQ5BimRIURh5T2qvqXOJtc=)
3: FXe_JPwCxokWG0F8sL8Vx_t96gE.roa (hash: 9THWoynL84G88vnVxVYdONxnlu6uMlCDE+r39l01xOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:68:eb:16:7f:ec:12:8d:d9:93:68:5a:9a:f0:4c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002c8865bc2a07e4acfeb263b4d9cf62460fd523
Validity
Not Before: Aug 6 22:03:13 2025 GMT
Not After : Aug 7 22:03:13 2025 GMT
Subject: CN=1e7c20762839a4f184852b83d5a9e7a64061ade1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bc:70:a7:3a:bb:37:64:8a:b4:35:b0:39:f5:
c8:dd:c4:a8:32:ac:a8:31:28:aa:92:19:e7:9a:be:
cb:0a:a8:24:cb:a2:c9:52:29:54:65:b2:e5:77:13:
74:fc:7d:ef:62:bb:ec:76:9d:b2:5a:5a:c7:0c:70:
81:a1:7a:55:d0:12:a6:54:ca:3a:bc:be:ee:10:2b:
7a:39:2b:a7:b0:bf:1b:90:ea:14:fa:e1:b7:17:db:
b1:2f:0f:21:25:a4:44:9b:d7:43:97:74:0b:2c:52:
56:8f:5f:7e:b0:55:8d:ed:1d:1e:53:73:b8:0a:70:
7f:e5:30:8b:72:1f:f5:2d:30:10:23:1a:dd:c2:c4:
99:39:96:9c:0e:70:69:0c:7a:89:50:d6:19:77:8b:
39:6b:79:97:88:52:c1:03:1a:7c:21:0d:08:d9:73:
21:6c:d0:b1:1d:5b:06:f5:aa:92:b2:9a:f2:ff:fd:
86:f9:20:1a:14:8b:86:18:82:e0:32:c0:db:04:e5:
46:22:b7:b0:36:8e:7d:9b:25:79:f1:1f:88:6f:17:
37:87:be:c0:d7:c1:b6:1c:28:8f:cd:d1:62:49:b1:
82:71:12:8b:04:cb:8f:a8:5b:9e:62:41:82:41:e4:
92:0f:d3:63:55:a6:19:52:7f:e3:00:61:9e:37:7e:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7C:20:76:28:39:A4:F1:84:85:2B:83:D5:A9:E7:A6:40:61:AD:E1
X509v3 Authority Key Identifier:
keyid:00:2C:88:65:BC:2A:07:E4:AC:FE:B2:63:B4:D9:CF:62:46:0F:D5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/d7fadc-1ebf-42da-9b22-a60c20c8f717/1/ACyIZbwqB-Ss_rJjtNnPYkYP1SM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d3:94:ec:32:98:ad:13:18:cb:48:21:32:18:ad:67:89:4b:
d2:2e:ad:02:e6:6d:b7:67:45:2b:03:f8:d5:cf:b8:79:6e:4b:
de:3f:b3:43:77:0f:a1:b4:85:0f:96:bd:3e:2d:51:11:f1:8b:
03:ac:15:99:8d:2f:6a:df:5c:2e:72:f8:5e:84:76:e9:aa:ac:
54:58:f2:79:48:0e:14:25:42:4a:17:d8:64:f0:6b:d2:c1:78:
e4:8a:42:39:b5:94:c8:ee:7f:65:68:4a:eb:b9:51:33:62:28:
b1:c5:19:73:5d:78:bb:b5:cd:41:b8:52:5f:85:14:74:6a:27:
ee:7b:fd:9c:4f:09:93:b5:dc:ed:98:58:55:54:dd:74:f5:f7:
f5:94:9c:31:c8:02:bd:dd:6a:40:a3:1a:a3:88:39:34:bb:71:
6d:d4:d1:10:b8:e1:ef:d5:f3:91:37:ac:23:1b:7c:b8:a5:5e:
00:f0:6f:90:56:bd:be:55:87:a5:54:04:7e:73:e7:fa:00:5e:
d1:45:5e:c3:c2:26:c1:a8:41:05:46:af:40:8b:b6:d5:12:bd:
df:12:5c:24:31:4a:85:28:f8:90:7a:b4:e0:93:61:0d:a2:07:
98:82:39:1d:fc:70:c9:df:d6:d2:43:5a:d2:23:c7:2f:d7:3b:
1b:ac:5b:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBaOsWf+wSjdmTaFqa8Ew8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwMmM4ODY1YmMyYTA3ZTRhY2ZlYjI2M2I0ZDljZjYyNDYw
ZmQ1MjMwHhcNMjUwODA2MjIwMzEzWhcNMjUwODA3MjIwMzEzWjAzMTEwLwYDVQQD
EygxZTdjMjA3NjI4MzlhNGYxODQ4NTJiODNkNWE5ZTdhNjQwNjFhZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrxwpzq7N2SKtDWwOfXI3cSoMqyo
MSiqkhnnmr7LCqgky6LJUilUZbLldxN0/H3vYrvsdp2yWlrHDHCBoXpV0BKmVMo6
vL7uECt6OSunsL8bkOoU+uG3F9uxLw8hJaREm9dDl3QLLFJWj19+sFWN7R0eU3O4
CnB/5TCLch/1LTAQIxrdwsSZOZacDnBpDHqJUNYZd4s5a3mXiFLBAxp8IQ0I2XMh
bNCxHVsG9aqSspry//2G+SAaFIuGGILgMsDbBOVGIrewNo59myV58R+Ibxc3h77A
18G2HCiPzdFiSbGCcRKLBMuPqFueYkGCQeSSD9NjVaYZUn/jAGGeN34VCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB58IHYoOaTxhIUrg9Wp56ZAYa3hMB8GA1UdIwQY
MBaAFAAsiGW8KgfkrP6yY7TZz2JGD9UjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjIt
YTYwYzIwYzhmNzE3LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi9kN2ZhZGMtMWViZi00MmRhLTliMjItYTYwYzIwYzhmNzE3
LzEvQUN5SVpid3FCLVNzX3JKanROblBZa1lQMVNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsNOU7DKY
rRMYy0ghMhitZ4lL0i6tAuZtt2dFKwP41c+4eW5L3j+zQ3cPobSFD5a9Pi1REfGL
A6wVmY0vat9cLnL4XoR26aqsVFjyeUgOFCVCShfYZPBr0sF45IpCObWUyO5/ZWhK
67lRM2IoscUZc114u7XNQbhSX4UUdGon7nv9nE8Jk7Xc7ZhYVVTddPX39ZScMcgC
vd1qQKMao4g5NLtxbdTRELjh79XzkTesIxt8uKVeAPBvkFa9vlWHpVQEfnPn+gBe
0UVew8ImwahBBUavQIu21RK93xJcJDFKhSj4kHq04JNhDaIHmII5Hfxwyd/W0kNa
0iPHL9c7G6xbQQ==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:25:27 2025 by rpki-client