Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
File: ACSx8TWREL_5kemsb1FGn9y0h68.mft (raw, json)
Hash identifier: +e0W+/UXRxI6PtwGNFdRY1GguHFL5uIZfuWeRSoE3WU=
Subject key identifier: 95:23:8E:90:2C:83:46:25:58:6F:C7:9D:B6:39:34:28:23:E5:97:2D
Authority key identifier: 00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
Certificate issuer: /CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Certificate serial: 0198D472DC99002DEF3ABABD29ED47219741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
Manifest number: 0B7A
Signing time: Sat 23 Aug 2025 01:02:34 +0000
Manifest this update: Sat 23 Aug 2025 01:02:34 +0000
Manifest next update: Sun 24 Aug 2025 01:02:34 +0000
Files and hashes: 1: 6Z3iiHN3VyWW6gZ2ZKzE17TH2kM.roa (hash: cm3sLpQPG8ZwhW1sT/aVnn9uH1eRaB9OvY6srQjdKdA=)
2: ACSx8TWREL_5kemsb1FGn9y0h68.crl (hash: AnsM+Z/b9scOPFZUI2KVGgiJHMrBrnL8Qanqh7Bzt4I=)
3: Y1KfRgbBfVzefGdkb0Fwgsciahg.roa (hash: aNRmz1hoVc6DWpXca8uL7+cZ3Jjgl7p4/PhhQMng11U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:dc:99:00:2d:ef:3a:ba:bd:29:ed:47:21:97:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0024b1f1359110bff991e9ac6f51469fdcb487af
Validity
Not Before: Aug 23 01:02:34 2025 GMT
Not After : Aug 24 01:02:34 2025 GMT
Subject: CN=95238e902c834625586fc79db639342823e5972d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ee:02:a1:f6:73:a9:28:bf:40:16:eb:02:4a:
81:10:c5:31:da:7a:ed:71:e6:7b:34:e1:66:78:1c:
e2:c0:e0:70:9e:0f:fe:15:ef:da:30:e9:ea:a9:7d:
68:0e:ae:7e:df:1c:d6:cc:65:cf:6b:10:0a:38:8e:
65:0f:9c:2e:00:62:e0:cf:3e:02:0d:a8:ab:f0:26:
f8:94:a7:ed:6e:2c:6a:5c:77:23:aa:a1:5e:3a:c9:
71:2b:a4:19:53:3a:6f:67:a4:c1:4a:2b:46:e3:6d:
bb:ae:04:bc:3e:38:ba:54:ea:c3:9b:62:76:a6:bd:
eb:67:15:5a:ae:24:ec:14:7a:30:53:52:0f:f1:f5:
ee:e7:f9:ce:52:a1:7f:4f:e1:92:64:1c:05:e9:4d:
ef:3b:4d:f6:f0:87:bc:d6:7d:1c:4c:39:d4:5d:cf:
59:44:02:71:05:52:d8:c6:90:c4:95:9b:d3:71:8d:
02:d6:d3:ec:7a:dc:f9:f2:e2:93:65:0b:08:d4:ea:
7b:83:1d:ef:f3:64:4b:9d:a3:e8:a8:20:06:ed:38:
61:f5:dd:08:18:85:6a:1d:f9:bc:66:3f:81:17:67:
cc:7d:45:5c:c7:f2:ba:87:fd:43:1f:37:e1:ca:ca:
a7:56:11:27:15:45:39:d3:04:22:f9:99:80:64:d7:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:23:8E:90:2C:83:46:25:58:6F:C7:9D:B6:39:34:28:23:E5:97:2D
X509v3 Authority Key Identifier:
keyid:00:24:B1:F1:35:91:10:BF:F9:91:E9:AC:6F:51:46:9F:DC:B4:87:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACSx8TWREL_5kemsb1FGn9y0h68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/b597c4-6a32-4008-b2ee-2da625eb7242/1/ACSx8TWREL_5kemsb1FGn9y0h68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:45:74:63:37:a3:c2:8b:98:e7:62:24:d6:7e:e5:c3:71:d4:
fb:c6:0d:d1:cb:db:a5:c3:94:c6:7d:cd:57:5b:59:a1:94:5b:
58:3b:0f:10:17:21:c1:04:8a:9e:b5:32:69:c8:ca:c5:ec:28:
3d:f3:ec:a8:6d:ac:b7:09:d4:20:3d:27:c0:47:67:a3:92:a5:
7f:c2:4b:6d:ca:c4:cd:66:a9:3f:3c:32:b6:4b:02:33:a1:58:
ef:3a:ed:9f:45:dc:45:38:c5:ef:bb:59:bf:7a:e9:b2:47:cb:
0a:3e:3d:2d:81:e3:2b:98:e9:5d:55:78:0d:2c:d4:30:74:19:
5e:d7:9e:b2:5f:80:c5:55:29:fd:a5:cf:7b:83:00:06:4b:5a:
ed:f1:f5:e1:e7:20:a5:2e:c3:c7:ac:37:08:4d:7a:b3:a4:7b:
14:b7:25:51:fb:67:0b:24:a3:93:90:a5:19:70:fc:55:d2:72:
2a:fa:50:73:7a:a5:e5:84:1c:38:b8:81:f7:5c:29:1c:39:5f:
61:df:ff:72:99:86:16:8b:06:1a:68:44:de:1e:e7:dd:08:b4:
7a:b8:76:80:84:c7:c1:9f:2e:a1:86:cf:10:19:46:45:c3:a0:
b9:a0:c3:81:f9:4a:42:a5:7b:ce:4f:26:f3:8b:80:02:68:a4:
db:8a:53:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:16 2025 by rpki-client