Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: PaXefp3hVHSI1tuQZOhYNPm2qi59KQuGsTZ8ZLLmuoA=
Subject key identifier: B8:89:0B:D2:F2:0B:3B:08:F6:59:CE:66:B2:E2:E4:B8:1A:DE:D8:39
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 019A51877883E16584BCE6DA52BE5DBB0E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 0599
Signing time: Wed 05 Nov 2025 01:00:23 +0000
Manifest this update: Wed 05 Nov 2025 01:00:23 +0000
Manifest next update: Thu 06 Nov 2025 01:00:23 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: kkC/DidIKIN/XsB58j/5sdrAvSCf72bEwE/Wm2RwJt4=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 18:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:87:78:83:e1:65:84:bc:e6:da:52:be:5d:bb:0e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Nov 5 01:00:23 2025 GMT
Not After : Nov 6 01:00:23 2025 GMT
Subject: CN=b8890bd2f20b3b08f659ce66b2e2e4b81aded839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:87:6f:62:36:be:aa:70:5c:fb:0a:eb:44:63:
99:b8:59:a4:b3:cb:cd:f9:08:1b:ee:49:9b:e3:fe:
f2:33:da:ca:3f:b6:8e:35:ee:03:5d:38:ca:e4:ab:
12:ef:43:51:91:a5:dc:7e:76:52:00:d2:a8:62:83:
1f:6b:41:80:9b:aa:e9:3c:1e:b6:5f:2b:ee:86:14:
51:9d:b6:6a:6e:0c:45:f0:a4:db:b2:c7:40:d4:1e:
8b:a9:aa:f8:c2:7d:1a:cf:24:df:d1:0f:a8:10:e8:
73:46:df:4e:f6:86:f6:5b:bc:66:ff:ae:01:8c:58:
76:4c:81:1a:43:19:92:61:ca:81:c2:35:a4:e1:51:
75:70:cf:e0:bd:78:c3:56:fe:d1:8a:2e:98:ba:b9:
4d:52:a5:15:b9:92:72:00:ef:cb:31:d1:62:e2:4c:
49:72:ec:07:58:cf:c4:84:bf:23:b5:67:9e:29:fd:
ba:87:b0:60:f0:72:98:d9:3c:b2:1b:6d:1d:f4:08:
d4:5f:85:60:ec:9f:b9:83:94:8a:81:b2:4d:3d:78:
ed:b8:cd:24:a2:eb:8d:9d:d6:65:39:ef:f1:1d:2e:
e5:a8:72:4f:a4:ca:42:cb:92:3e:1d:5e:c1:85:bc:
9a:4d:d9:0f:3f:5e:c2:40:6f:32:c5:f8:dc:e5:25:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:89:0B:D2:F2:0B:3B:08:F6:59:CE:66:B2:E2:E4:B8:1A:DE:D8:39
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2d:cc:85:b2:30:23:22:a6:7f:5b:41:c6:a5:bb:95:e7:cc:
5e:4b:0f:bc:e5:8e:23:da:a8:93:e7:5d:6c:92:ad:c0:fa:67:
f4:9f:cb:4d:7b:75:79:a4:3c:d8:2b:d8:71:e4:9e:d1:ce:c2:
c2:1c:9b:62:e4:b5:ae:50:17:37:f7:c5:bd:35:f8:cf:6c:c3:
86:c5:d7:7a:ae:b4:dd:6f:9d:fb:3f:50:c8:ca:4d:2b:10:ca:
36:a9:eb:f2:ed:f2:c9:df:24:11:ae:9f:73:f8:1e:a4:0b:ba:
16:86:95:2b:4d:5a:c5:df:f2:fd:af:5c:f8:12:1d:fb:0f:b7:
15:2b:97:9c:ca:cf:71:76:ce:29:20:54:d8:17:8f:0d:6e:66:
32:53:12:4a:77:b1:7b:1e:18:00:47:24:a5:f4:99:19:34:ff:
16:38:99:58:a4:e0:92:dd:b1:44:d1:0a:06:cf:a7:78:8f:9b:
6d:f6:43:b7:cf:1e:9b:b1:6f:96:3b:38:a0:08:f9:53:2b:55:
c4:c8:21:e2:79:04:68:2d:97:ef:9d:10:ae:15:9e:8b:1c:af:
57:2d:8d:d8:95:8c:a1:99:94:87:4f:2a:71:79:3f:73:ad:4a:
85:72:ef:fb:bc:cc:51:bb:16:29:52:bd:3c:aa:36:f6:17:1d:
3c:9e:5e:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZpRh3iD4WWEvObaUr5duw45MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxY2JjNmU3NDRlZWY5YzAxNjc0MDFkNTZjMWY5MzgwZWVm
NjQ5NDgwHhcNMjUxMTA1MDEwMDIzWhcNMjUxMTA2MDEwMDIzWjAzMTEwLwYDVQQD
EyhiODg5MGJkMmYyMGIzYjA4ZjY1OWNlNjZiMmUyZTRiODFhZGVkODM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYdvYja+qnBc+wrrRGOZuFmks8vN
+Qgb7kmb4/7yM9rKP7aONe4DXTjK5KsS70NRkaXcfnZSANKoYoMfa0GAm6rpPB62
XyvuhhRRnbZqbgxF8KTbssdA1B6Lqar4wn0azyTf0Q+oEOhzRt9O9ob2W7xm/64B
jFh2TIEaQxmSYcqBwjWk4VF1cM/gvXjDVv7Rii6YurlNUqUVuZJyAO/LMdFi4kxJ
cuwHWM/EhL8jtWeeKf26h7Bg8HKY2TyyG20d9AjUX4Vg7J+5g5SKgbJNPXjtuM0k
ouuNndZlOe/xHS7lqHJPpMpCy5I+HV7BhbyaTdkPP17CQG8yxfjc5SWDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLiJC9LyCzsI9lnOZrLi5Lga3tg5MB8GA1UdIwQY
MBaAFAHLxudE7vnAFnQB1Wwfk4Du9klIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTIt
OWUyZGEzN2I0MTllLzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9mNDkzYzYtMTAzYy00ZDc5LTlhZTItOWUyZGEzN2I0MTll
LzEvQWN2RzUwVHUtY0FXZEFIVmJCLVRnTzcyU1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi3MhbIw
IyKmf1tBxqW7lefMXksPvOWOI9qok+ddbJKtwPpn9J/LTXt1eaQ82CvYceSe0c7C
whybYuS1rlAXN/fFvTX4z2zDhsXXeq603W+d+z9QyMpNKxDKNqnr8u3yyd8kEa6f
c/gepAu6FoaVK01axd/y/a9c+BId+w+3FSuXnMrPcXbOKSBU2BePDW5mMlMSSnex
ex4YAEckpfSZGTT/FjiZWKTgkt2xRNEKBs+neI+bbfZDt88em7Fvljs4oAj5UytV
xMgh4nkEaC2X750QrhWeixyvVy2N2JWMoZmUh08qcXk/c61KhXLv+7zMUbsWKVK9
PKo29hcdPJ5ecQ==
-----END CERTIFICATE-----
Generated at Wed Nov 5 03:41:05 2025 by rpki-client