Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
File: AcvG50Tu-cAWdAHVbB-TgO72SUg.mft (raw, json)
Hash identifier: ZtJfPYkeidCVMRNZUMqeLNjDjrlwjvQRjS5DSxco3nM=
Subject key identifier: C4:32:77:85:B3:2A:5C:0A:50:B9:75:EE:F3:8F:57:C8:D2:A5:4B:29
Authority key identifier: 01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
Certificate issuer: /CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Certificate serial: 01987298479698FECE40BCC8CBC17BCC466A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
Manifest number: 04A1
Signing time: Mon 04 Aug 2025 01:00:39 +0000
Manifest this update: Mon 04 Aug 2025 01:00:39 +0000
Manifest next update: Tue 05 Aug 2025 01:00:39 +0000
Files and hashes: 1: AcvG50Tu-cAWdAHVbB-TgO72SUg.crl (hash: h5QYQNMVwW20NTIV+bMO60rig9t++RxnOsf8q2DyPxY=)
2: BX2JPGJy6RMaPcWuXvWlFqwNrIA.roa (hash: u+UX2pAd1eP7HJXW9NY0JTLVGtLaRb7rjxt8LHxvOj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:47:96:98:fe:ce:40:bc:c8:cb:c1:7b:cc:46:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01cbc6e744eef9c0167401d56c1f9380eef64948
Validity
Not Before: Aug 4 01:00:39 2025 GMT
Not After : Aug 5 01:00:39 2025 GMT
Subject: CN=c4327785b32a5c0a50b975eef38f57c8d2a54b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9b:57:ef:a5:12:3b:d7:42:a5:e4:bd:3e:cd:
7a:15:62:ff:1a:a3:ae:f7:2e:55:04:62:ec:08:89:
50:92:91:6e:3e:fc:ad:5a:52:3e:2a:ba:20:e9:8c:
b4:5a:07:1e:0d:c1:01:7a:71:a5:2c:11:24:4d:6c:
6b:aa:c7:a0:9f:32:2e:f5:95:84:26:4e:ed:63:6b:
cc:b2:11:40:7d:35:84:88:ad:15:5f:84:a4:03:79:
97:6b:79:71:e5:75:02:0d:a1:b9:6a:f0:61:b9:eb:
17:97:90:0b:92:de:85:ca:34:fb:1f:4f:98:c9:ac:
ff:8e:3b:cb:d4:13:73:d7:73:20:2d:65:40:0a:cb:
a2:9f:5e:77:93:d1:29:98:0e:61:a9:22:fe:13:f5:
1b:8f:fd:9c:e1:14:3b:f7:ea:ac:b6:f0:83:50:8d:
96:bd:2c:97:6a:62:a6:8d:06:14:f2:04:ff:ab:53:
a5:27:ef:b5:a9:84:68:a7:2b:f4:98:89:de:69:ed:
8d:82:03:c9:48:9f:67:28:43:09:5e:bd:60:b0:6f:
9b:2d:ad:4d:40:5c:9d:c5:b8:2e:74:f9:75:74:25:
ae:dc:39:6a:3a:b2:dc:79:d3:8b:97:22:46:c0:49:
d8:13:f4:7b:d3:53:cc:a5:27:b2:e4:7a:70:b6:23:
5a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:32:77:85:B3:2A:5C:0A:50:B9:75:EE:F3:8F:57:C8:D2:A5:4B:29
X509v3 Authority Key Identifier:
keyid:01:CB:C6:E7:44:EE:F9:C0:16:74:01:D5:6C:1F:93:80:EE:F6:49:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AcvG50Tu-cAWdAHVbB-TgO72SUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f493c6-103c-4d79-9ae2-9e2da37b419e/1/AcvG50Tu-cAWdAHVbB-TgO72SUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:cf:61:06:b6:86:96:6a:d4:34:69:c4:87:0e:df:a3:e0:ac:
1c:56:e4:24:e9:5e:26:9e:18:b9:ef:83:d9:a6:4f:b3:15:16:
14:94:23:14:bd:58:fa:60:29:59:36:52:9c:da:c6:e7:3c:f4:
b0:7e:75:28:fa:15:71:db:2b:ba:34:db:97:ff:56:08:a7:57:
04:72:40:6b:c7:37:1b:b6:3b:55:95:6f:1f:4a:e1:ea:b9:97:
c7:65:51:d2:2a:75:33:92:b8:2e:2f:f9:61:5d:46:76:37:05:
62:66:ce:d2:b1:76:a4:ce:44:de:0f:01:da:16:4a:46:ec:a5:
81:51:5a:75:2f:76:93:59:8f:cd:ae:3a:f8:db:aa:35:77:5d:
44:8a:71:dc:a3:62:82:54:36:1e:c8:b7:e3:cf:07:6c:da:19:
f3:db:6e:8b:b2:9e:d0:3c:9f:2b:b8:63:7a:ae:5e:52:b4:00:
e2:ae:d6:a9:1b:08:67:0f:75:91:ab:74:7a:ca:58:f7:75:2a:
36:82:83:77:bf:32:5d:83:78:d7:99:01:32:f9:96:24:49:a0:
77:0d:70:bc:4f:18:a3:66:92:48:16:17:17:8c:6a:bc:39:8a:
7f:51:66:dd:49:b9:c1:8d:20:ee:db:18:06:21:41:b1:d0:b4:
48:06:33:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:13:58 2025 by rpki-client