Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
File: AcS3hNgWbovQ9H1yD95frsFkWzQ.mft (raw, json)
Hash identifier: twhluTkpPoIewTkUd6KJ/dSfEfacPZzhPTBZ7/rAjeg=
Subject key identifier: FD:8E:56:95:82:39:AD:71:31:1C:B1:28:BA:B7:57:D9:12:3F:1D:7E
Authority key identifier: 01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
Certificate issuer: /CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Certificate serial: 019A4DE18894658ABE5B402EB9B12E1A1C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
Manifest number: 170D
Signing time: Tue 04 Nov 2025 08:00:17 +0000
Manifest this update: Tue 04 Nov 2025 08:00:17 +0000
Manifest next update: Wed 05 Nov 2025 08:00:17 +0000
Files and hashes: 1: AcS3hNgWbovQ9H1yD95frsFkWzQ.crl (hash: ozlJR4H8tfEOeABtygmjWgVmXGZBqfnmAPKYu1bbLOk=)
2: TfDOBJVmJoj40V_l3LjkaTEjm8g.roa (hash: ReTHm2rRZcfjOGQDNdmXkBd+jk6YyXS+LSWab0KtASc=)
3: v50wWhyCI7hTEJpByG9mHooOhqA.roa (hash: E6PQDvh39GUQ1c6SbkD744Bu9C+vTY8Ul4lMsKxnnNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:88:94:65:8a:be:5b:40:2e:b9:b1:2e:1a:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01c4b784d8166e8bd0f47d720fde5faec1645b34
Validity
Not Before: Nov 4 08:00:17 2025 GMT
Not After : Nov 5 08:00:17 2025 GMT
Subject: CN=fd8e56958239ad71311cb128bab757d9123f1d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:6d:de:bc:c1:68:12:d3:54:19:94:2c:0a:f1:
5e:31:15:36:aa:87:4c:fc:aa:9f:d8:8b:27:40:28:
72:a0:0b:84:18:c3:df:be:da:f8:dd:79:8d:d6:a8:
f0:cd:eb:c6:9e:57:50:fc:15:e0:49:5d:dc:c5:2e:
dc:8b:5a:77:98:59:4f:82:76:26:e8:8a:7e:48:23:
e4:fa:cd:ef:ec:00:ae:fc:f7:92:b6:2d:cb:6a:d5:
61:48:53:3b:17:d3:68:38:4b:5c:46:7e:c9:cc:9a:
23:9d:0d:59:ef:4e:9b:e8:1d:36:a3:e8:35:72:27:
66:dc:36:fa:ea:e8:ea:19:e7:a5:da:24:40:2c:ba:
21:30:2b:bf:7a:ce:66:67:3a:7a:28:66:a7:94:af:
83:60:1b:c1:52:6e:d6:e3:8f:87:b5:d2:3c:66:6d:
18:83:44:0d:1e:d8:d5:eb:45:a7:e1:fe:9c:ea:00:
e0:58:b3:c3:fc:6f:69:27:62:7a:c2:87:d5:8a:d0:
78:34:1b:ac:70:5e:be:3f:44:02:1f:6a:37:41:39:
e4:c8:c0:48:19:4b:d9:df:8a:f3:97:16:96:6a:4e:
eb:d3:1e:ba:23:ef:00:28:69:58:11:08:c1:db:6b:
2f:09:a5:3e:9a:18:57:e1:2a:b4:5d:43:9a:9c:ff:
58:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8E:56:95:82:39:AD:71:31:1C:B1:28:BA:B7:57:D9:12:3F:1D:7E
X509v3 Authority Key Identifier:
keyid:01:C4:B7:84:D8:16:6E:8B:D0:F4:7D:72:0F:DE:5F:AE:C1:64:5B:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcS3hNgWbovQ9H1yD95frsFkWzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/f2b840-2c85-465b-8b93-5b5beb10513b/1/AcS3hNgWbovQ9H1yD95frsFkWzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:80:83:6b:0e:45:d0:aa:32:f3:54:31:7f:af:c3:d7:18:e8:
65:37:96:47:ca:97:df:1e:1b:a9:95:cd:b3:d0:04:d1:9f:de:
8d:f6:d9:66:96:7d:8c:82:39:81:59:f7:32:f9:f3:76:04:ba:
c5:9e:cb:7a:42:67:f7:fe:51:86:a6:d4:07:52:65:43:07:da:
0a:c1:e0:d8:af:e1:b8:f0:34:9a:be:c5:40:ab:c3:ba:bf:29:
a5:3f:0e:f7:ca:2e:e6:1e:df:35:47:f9:be:4c:e4:c2:0c:9c:
e9:44:ff:e8:13:d1:28:d7:ac:32:04:8d:48:0e:eb:09:42:fe:
f8:ea:3c:de:e0:70:33:82:72:9a:c7:36:81:35:0d:ca:11:53:
29:50:b3:c7:b1:80:18:0f:43:34:1a:50:73:69:f5:24:24:74:
b1:a8:a6:31:01:c8:ce:2f:09:22:87:b6:67:04:11:79:bf:79:
e0:bf:ec:b8:f7:b1:59:68:62:13:10:ab:d8:78:80:a2:40:a6:
50:f8:0b:7e:ed:07:1b:23:43:2a:a4:80:e6:e0:7f:23:5b:0b:
a3:cf:7c:f1:b1:90:70:b9:62:d6:5a:a0:18:f2:d0:93:a5:2c:
83:1c:3a:55:7e:e1:f7:95:56:6a:1c:8b:e5:14:90:ae:02:44:
ad:1c:48:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:12:27 2025 by rpki-client